:26:00 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:00 executing program 2: fsopen(&(0x7f0000000180)='ext3\x00', 0x0) 03:26:01 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x18, 0x140b, 0xa09, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) 03:26:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x4, 'syz2\x00'}]}, 0x20}}, 0x0) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x3, &(0x7f00000003c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD_XDP(0xa, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xbf) [ 848.934668][T15653] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 03:26:01 executing program 0: syz_io_uring_setup(0x469d, &(0x7f0000000100)={0x0, 0x0, 0xc00}, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x8903, 0x0) 03:26:01 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x400) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000740)={'ip6tnl0\x00', 0x0}) io_getevents(0x0, 0x0, 0x1, &(0x7f0000000280)=[{}], &(0x7f00000002c0)) io_setup(0x6d42, &(0x7f0000000580)) 03:26:01 executing program 2: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000900), 0x0, &(0x7f0000000980)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@uni_xlateno}]}) 03:26:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000180)=[@register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000200)="8f7472881132991279ba18a7bf11737fb4e6bd23c342cee9210abf48973f934a70ab67b05ab895a59e4a4940df358028b6e69e1e73962b6a7d5580d2808636f00d2a5605c6f324d6432c1691bf0a3831"}) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) syz_io_uring_setup(0x77dc, &(0x7f0000000600), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) 03:26:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x12, 0x0, 0x0) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@exit]}, &(0x7f0000000280)='GPL\x00', 0x1, 0x1000, &(0x7f0000000780)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 03:26:01 executing program 2: syz_mount_image$qnx6(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x1006000, &(0x7f0000001540)) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x6, 0x13, 0x0, &(0x7f0000000380)) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x34}}, 0x0) 03:26:01 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 03:26:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x7000000, &(0x7f0000001300), 0x0, &(0x7f0000001380)) 03:26:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x7ffffffff000}}, 0x0) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x894a, &(0x7f00000000c0)={'tunl0\x00', 0x0}) 03:26:01 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001600), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000001780)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {}]}) 03:26:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:26:01 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:01 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', 0x0}) 03:26:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000005a000000080003"], 0x28}}, 0x0) 03:26:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x8912, 0x0) 03:26:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14}, 0x7ffff000}}, 0x0) 03:26:02 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, 0x0) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0x801c581f, 0x0) [ 850.111825][T15720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:26:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x441) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 03:26:02 executing program 1: io_uring_setup(0x0, 0x0) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 2: socket(0x2, 0x0, 0x80000001) 03:26:02 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000040), 0x7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) 03:26:02 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc0045878, 0x0) 03:26:02 executing program 2: r0 = socket(0x11, 0xa, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}}, 0x0) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 0: removexattr(&(0x7f0000001a00)='./file0\x00', 0x0) 03:26:02 executing program 1: syz_mount_image$hpfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000003ec0)=[{&(0x7f0000003b80)="19", 0x1, 0x77a9}, {&(0x7f0000003c40)='=', 0x1}], 0x0, 0x0) 03:26:02 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x3cb502, 0x0) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x0, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 0: syslog(0x2, &(0x7f0000000100)=""/172, 0xac) 03:26:02 executing program 1: syz_io_uring_setup(0x469d, &(0x7f0000000100)={0x0, 0x0, 0x7}, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x0, 0x0) 03:26:02 executing program 2: syz_clone3(&(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xfffffeb0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff], 0x1}, 0xdb) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x2, 0x4) 03:26:02 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x207fff}}}) 03:26:02 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:02 executing program 2: pselect6(0x40, &(0x7f0000000480), 0x0, &(0x7f0000000500)={0xac}, &(0x7f0000000540), &(0x7f00000005c0)={&(0x7f0000000580)={[0x3]}, 0x8}) 03:26:03 executing program 1: socketpair(0x2b, 0x1, 0x5, &(0x7f0000000040)) 03:26:03 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:03 executing program 2: syz_mount_image$omfs(&(0x7f0000000140), 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000002c0)) 03:26:03 executing program 0: syslog(0x2, &(0x7f0000000100)=""/172, 0xac) 03:26:03 executing program 1: syz_mount_image$qnx6(&(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000001200), 0x0, &(0x7f0000001280)) 03:26:03 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:03 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 03:26:03 executing program 1: mq_open(&(0x7f0000000000)='^(5{/\'+P#\\@[!]}/\xc0}\x00', 0x0, 0x0, 0x0) 03:26:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x4020940d, &(0x7f0000000080)={'vcan0\x00'}) 03:26:03 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1\x00'}) 03:26:03 executing program 1: openat$pfkey(0xffffffffffffff9c, 0x0, 0x52400, 0x0) [ 851.203448][T15789] veth1: mtu less than device minimum 03:26:04 executing program 0: syslog(0x2, &(0x7f0000000100)=""/172, 0xac) 03:26:04 executing program 2: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)) 03:26:04 executing program 1: openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4200, 0x0) 03:26:04 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:04 executing program 2: getrusage(0x1, &(0x7f0000001240)) 03:26:04 executing program 1: syz_clone(0x2a048400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:04 executing program 2: getrusage(0x1, &(0x7f0000001240)) 03:26:04 executing program 2: getrusage(0x1, &(0x7f0000001240)) 03:26:04 executing program 0: syslog(0x2, &(0x7f0000000100)=""/172, 0xac) 03:26:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x38) 03:26:04 executing program 2: getrusage(0x1, &(0x7f0000001240)) 03:26:04 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:04 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='0\x00', 0x2) 03:26:05 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100c66309"], 0x28}}, 0x0) 03:26:05 executing program 2: ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000040)={'team_slave_0\x00'}) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x6100, 0x0) [ 852.890729][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:26:05 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0x0, @output}) 03:26:05 executing program 0: syslog(0x0, &(0x7f0000000100)=""/172, 0xac) 03:26:05 executing program 1: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 03:26:05 executing program 0: syslog(0x0, &(0x7f0000000100)=""/172, 0xac) 03:26:05 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, 0x0, 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:05 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000002e40)) 03:26:05 executing program 0: syslog(0x0, &(0x7f0000000100)=""/172, 0xac) 03:26:05 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x0, 0x0, 0x0, 0x1880}, 0x48) 03:26:05 executing program 0: syslog(0x2, 0x0, 0x0) 03:26:05 executing program 1: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@obj_type={'obj_type', 0x3d, '/dev/fuse\x00'}}]}}) 03:26:05 executing program 2: mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3a91ea82) [ 853.776701][T15840] fuse: Bad value for 'fd' 03:26:05 executing program 1: r0 = syz_clone(0x40000000, &(0x7f0000000000)="affd490dbe59f99543231bc68e169d54bb75efe4720bb00cad66bcbf5d7256efb03cd8e3dc590d05af08f263ed387903f15e0252ac451011a92023", 0x3b, 0x0, 0x0, &(0x7f00000000c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x0, 0x12, 0x0, 0x7fffffff, 0x0, r0}) socket(0x18, 0x0, 0x0) 03:26:06 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000240)=0xffffffff) 03:26:06 executing program 0: syslog(0x2, 0x0, 0x0) 03:26:06 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, 0x0, 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:06 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x891d, &(0x7f0000000080)={'vcan0\x00'}) 03:26:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x5, 0x0, &(0x7f0000000000)) 03:26:06 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x9395a0547069191b, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000180)={0xc1, "dccb171209e83a02aee2fb8bcf94734c8234d354d6c1cc14f0c64175c549539f36d0f9a5de33fc334b9cb9bb61e2193a637eb64a67ea354bfc66b563a5462670af517e28a940f1eb734a5656dada1545cb1d24dceb63c11c4009da0b26f533ff14d3e6f95f912e534871cb356bc71c1821c31248b517fc4610419f43173b2c6fe79c21d7c4b6502167af140294eb7756cc55f513c61ef952d919f67c54a656e51339eb67f25b7f1dcbe2700d229400a4912dc9557c9afb528c676c05fb5e8082af0b4af84d8b449e936cfce58392b4403aad1c80ce80e7fd96dcb8dc9e3a581ddb045f3eea8417e6de197111694588493791ec663aec53b25487d48898821203"}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0xde9) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f0000000100)={0x5, 0x7fffffff, 0x8000, 0xec7, 0x1f}) 03:26:06 executing program 0: syslog(0x2, 0x0, 0x0) 03:26:06 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 03:26:06 executing program 0: clock_gettime(0x5, &(0x7f0000000300)) 03:26:06 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f00000000c0)) 03:26:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) 03:26:07 executing program 2: socket(0x2, 0x0, 0x734f568c) 03:26:07 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, 0x0, 0xff01) splice(r0, 0x0, r2, 0x0, 0x100000001, 0x0) 03:26:07 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x31, 0x0, &(0x7f0000000600)) 03:26:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 03:26:07 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xffffffc0}, 0x8) 03:26:07 executing program 1: r0 = socket(0x2, 0x3, 0x4) bind$802154_dgram(r0, 0x0, 0x0) 03:26:07 executing program 1: select(0x40, &(0x7f0000000100)={0x7fff}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:08 executing program 2: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', 0x0}) 03:26:08 executing program 0: r0 = socket(0x2, 0x3, 0x4) bind$802154_dgram(r0, &(0x7f0000000040), 0x14) 03:26:08 executing program 1: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0800fabd7000fcdbdf25edffffff0700310005000000080032008d0a00000840310024"], 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25010000000900030073797a3200000000090001"], 0x4c}}, 0x0) 03:26:08 executing program 1: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0800fabd7000fcdbdf25edffffff0700310005000000080032008d0a00000840310024"], 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf25010000000900030073797a3200000000090001"], 0x4c}}, 0x0) 03:26:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'macvlan1\x00'}) [ 856.362204][T15891] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 03:26:08 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x0, {0x0, @vbi}}) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:08 executing program 0: syz_open_dev$radio(&(0x7f0000000080), 0x3, 0x2) pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0xffffffffffffffff) 03:26:08 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20000454}}, 0x0) [ 856.403823][T15899] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 03:26:08 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0), 0x4) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r0, &(0x7f00000007c0)=ANY=[], 0xff01) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x100000001, 0x0) 03:26:08 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 03:26:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x4}, 0x4) 03:26:08 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x0, 0x11, r0, 0x82000000) 03:26:08 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000000)) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000001, 0x0) 03:26:08 executing program 2: socket$inet(0x2c, 0x3, 0x0) 03:26:08 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x2600) 03:26:08 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000200)={0x3, @sdr}) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000001, 0x0) 03:26:08 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:26:08 executing program 1: r0 = socket(0x10, 0x3, 0x0) bind$802154_dgram(r0, 0x0, 0x0) 03:26:08 executing program 2: syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000008d00)='./file0\x00', 0x0, 0x0, 0x0) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x100000001, 0x0) 03:26:08 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000002140)) 03:26:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x89a1, &(0x7f0000000080)={'vcan0\x00'}) 03:26:08 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x5452, &(0x7f0000000000)={'team_slave_0\x00'}) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:26:08 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 03:26:08 executing program 0: r0 = socket(0x2, 0x3, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x7ffffffff000}}, 0x0) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:26:08 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) syz_mount_image$omfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000240), 0x1800, &(0x7f00000002c0)={[], [{@audit}]}) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 03:26:08 executing program 2: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x30, 0x0, &(0x7f0000000600)) 03:26:08 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x1d}]}) 03:26:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:26:08 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1fe}, 0x14) write$binfmt_misc(r1, &(0x7f00000007c0)=ANY=[], 0xff01) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 03:26:08 executing program 1: fanotify_mark(0xffffffffffffffff, 0x5a, 0x0, 0xffffffffffffffff, 0x0) 03:26:08 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12811, r0, 0x0) 03:26:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:26:08 executing program 1: getresuid(&(0x7f00000011c0), 0x0, 0x0) 03:26:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:26:08 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8913, &(0x7f0000000080)={'vcan0\x00'}) 03:26:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x5, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12811, r0, 0x0) 03:26:08 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0xc, 0x0, &(0x7f0000000600)) 03:26:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 03:26:08 executing program 2: socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) 03:26:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@delqdisc={0x24, 0x25, 0x1}, 0x24}}, 0x0) 03:26:08 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0x0) 03:26:08 executing program 0: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x0) 03:26:08 executing program 0: syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x1000002, &(0x7f0000001340)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize}]}}) 03:26:08 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) 03:26:08 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8980, 0x0) 03:26:08 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', 0x0}) 03:26:08 executing program 2: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f00000000c0)) 03:26:08 executing program 3: syz_mount_image$omfs(&(0x7f0000000140), 0x0, 0x0, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x10001}], 0x0, &(0x7f00000002c0)={[{']'}]}) 03:26:08 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 03:26:08 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8927, &(0x7f0000000080)={'vcan0\x00'}) 03:26:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x5452, 0x0) 03:26:09 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xffff}}, 0x14) 03:26:09 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x7, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)) 03:26:09 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 03:26:09 executing program 2: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0x2}, 0x10) 03:26:09 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) inotify_add_watch(r0, 0x0, 0x30000288) 03:26:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000002b80)={'syztnl0\x00', 0x0}) 03:26:09 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 03:26:09 executing program 0: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, 0x0) 03:26:09 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) 03:26:09 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8927, &(0x7f0000000000)={'team_slave_0\x00'}) 03:26:09 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) 03:26:09 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f00000000c0)={0x2}, 0x8, 0x0) 03:26:09 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000000)=0x1) 03:26:09 executing program 2: syz_clone(0x84010000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:09 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8924, &(0x7f0000000080)={'vcan0\x00'}) 03:26:09 executing program 3: pipe2$9p(0x0, 0x4080) 03:26:09 executing program 0: getcwd(&(0x7f00000000c0)=""/166, 0xa6) 03:26:09 executing program 3: syz_clone(0x4204000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:09 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x5421, 0x0) 03:26:09 executing program 0: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x16, 0x0, &(0x7f0000000600)) 03:26:09 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0}) 03:26:09 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, 0x0) 03:26:09 executing program 0: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x1000001, 0x0, {0x1, @vbi}}) 03:26:09 executing program 1: getresuid(&(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)) 03:26:09 executing program 0: shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) 03:26:09 executing program 3: syz_clone(0x4204000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:09 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 03:26:09 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000140)=0x3) 03:26:10 executing program 2: fanotify_mark(0xffffffffffffffff, 0x5a, 0x40000001, 0xffffffffffffffff, 0x0) 03:26:10 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) 03:26:10 executing program 3: syz_clone(0x4204000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:10 executing program 0: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9}, &(0x7f0000000080)={0x9}, 0x0, 0x0, 0x0) 03:26:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0xd0, &(0x7f0000000a40), 0x4) 03:26:10 executing program 2: userfaultfd(0x180000) 03:26:10 executing program 1: r0 = socket(0x2, 0x3, 0x4) recvmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40) 03:26:10 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "aced19417b123073"}}, 0x48}}, 0x0) 03:26:10 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x0) read$usbfs(r0, 0x0, 0x0) 03:26:10 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x840, 0x0) [ 858.019020][T16081] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability 03:26:10 executing program 0: shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/4096) 03:26:10 executing program 3: syz_clone(0x4204000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:10 executing program 0: socket(0x2, 0xa, 0x8) 03:26:10 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 03:26:10 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:26:10 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, &(0x7f0000000300)) 03:26:10 executing program 1: r0 = socket(0x2, 0x3, 0x4) sendmsg$nl_crypto(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={0x0}}, 0x0) 03:26:10 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x10840, 0x0) 03:26:10 executing program 1: msgsnd(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xa2, 0x0) 03:26:10 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 03:26:10 executing program 1: getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, &(0x7f0000000100)) getresuid(&(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)) 03:26:10 executing program 0: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x15, 0x0, &(0x7f0000000600)) 03:26:10 executing program 0: syz_clone(0x40000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 03:26:10 executing program 3: r0 = socket(0x2, 0x3, 0x4) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) 03:26:10 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) 03:26:10 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8912, &(0x7f0000000000)={'team_slave_0\x00'}) 03:26:10 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 03:26:10 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40), 0xa40, 0x0) 03:26:10 executing program 1: r0 = socket(0x2, 0x3, 0x4) recvmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x1) 03:26:10 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={0x0, 0x0, 0x28}, 0x10) 03:26:10 executing program 0: openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000002980), 0xffffffffffffffff) 03:26:10 executing program 1: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000300)=0x4) 03:26:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x28}}, 0x0) 03:26:10 executing program 0: syz_clone(0x10080080, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:10 executing program 2: openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4002, 0x0) 03:26:10 executing program 1: r0 = socket(0x2, 0x3, 0x4) recvmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2020) 03:26:10 executing program 3: setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) 03:26:10 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0xfffffffffffffff7, 0x0) 03:26:10 executing program 1: mq_open(&(0x7f0000000180)='.[.\x00', 0x0, 0x0, 0x0) 03:26:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33fe0}}, 0x0) 03:26:10 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000200)=""/229, 0xfffffffffffffe90) 03:26:10 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000e40), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) 03:26:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8970, &(0x7f0000000080)={'vcan0\x00'}) 03:26:10 executing program 1: syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@default_permissions}, {}, {@allow_other}, {@allow_other}, {}]}}) 03:26:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 03:26:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3}]}) 03:26:10 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x54}, 0x1, 0x0, 0x2}, 0x0) [ 858.685913][T16156] block nbd3: shutting down sockets 03:26:10 executing program 1: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x1, 0x0, {0x0, @vbi}}) [ 858.688555][T16161] fuse: Bad value for 'fd' 03:26:10 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8911, &(0x7f0000000080)={'vcan0\x00'}) 03:26:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:26:10 executing program 3: r0 = socket(0x18, 0x0, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 03:26:10 executing program 1: openat$incfs(0xffffffffffffffff, 0x0, 0x101900, 0x0) 03:26:10 executing program 1: syz_mount_image$omfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{0x0}], 0x1800, &(0x7f00000002c0)={[{'@@'}], [{@audit}, {@dont_appraise}]}) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 03:26:10 executing program 2: modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) modify_ldt$write(0x1, &(0x7f0000000140), 0x10) [ 858.755781][ T40] audit: type=1326 audit(1653794770.873:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16170 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3e549 code=0x0 03:26:10 executing program 3: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x8}) 03:26:10 executing program 2: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x29, 0x0, &(0x7f0000000600)) 03:26:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:26:10 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @sdr}) 03:26:11 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002e00), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000020c0)={0x0, 0x41, "e70e667929c2e288811dcc734f25c0ac691b5dda83f7fbd5226cc2e78cf53a7ea046484cc1f707ea9e1e941d0104da0b8ac1a4ff3911755da2d48f59515949b655"}) [ 858.855731][ T40] audit: type=1326 audit(1653794770.973:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16186 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3e549 code=0x0 03:26:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x34}]}) 03:26:11 executing program 3: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x24041, 0x0) 03:26:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:26:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0xff0f, 0x0) 03:26:11 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x894c, 0x0) 03:26:11 executing program 1: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f00000001c0)="f2", 0x1, 0x10001}, {&(0x7f0000000b80)="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", 0x1000, 0x100000000}, {0x0}], 0x0, &(0x7f00000002c0)) 03:26:11 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='0\x00', 0x20000042) [ 858.953510][ T40] audit: type=1326 audit(1653794771.063:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16198 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3e549 code=0x0 03:26:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) 03:26:11 executing program 1: memfd_create(&(0x7f0000000000)='^&*:\x00', 0x0) 03:26:11 executing program 3: openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0xc100, 0x0) 03:26:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0xe0, 0x208, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "cf7c8cc5af8ac72400ea4d670d561872cd934cbc066af31a58295fc93aa1"}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 03:26:11 executing program 1: r0 = socket(0x2, 0x3, 0x4) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040), 0x10) [ 859.031969][ T40] audit: type=1326 audit(1653794771.143:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16208 comm="syz-executor.0" exe="/syz-executor.0" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f3e549 code=0x0 03:26:11 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x4100) 03:26:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x1, {0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe}}}) 03:26:11 executing program 3: r0 = syz_clone(0x40000000, &(0x7f0000000000), 0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="34b7253876b5255f475efb639a6d42117d9e288fa6f491b4cd32af71568048f61431b08cc0dcdaa0fbaa926e09499b38c7ee5f03eda5123703b3a8bc42ed9bd4781c634d64242eaa87c0b16ff0d662cb01e26b374ede241d482f7f084b74fbabc4b46bacbb5429bcd51e71db63d9d66434eaa51928dadf11488b21f20d8f2706b132ba6d14d21b689d2aebb0ec0bee2e5e1da367d1b5d17742ae309b19a60f7b78a13a3b0c81bf60dc187e7e6757ba1e757c805a73fafbfc3b9900fc296f9aa04ca80d6097da7c32e57934b7fc4c14fce72f22ea8d4bca048b9b16f57e389506c168a782ae") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x100, 0x12, 0x5, 0x7fffffff, 0x1, r0}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000240)={0x7e8d, 0x4, 0x1, {0xb, @sliced={0x373, [0x0, 0x8, 0x0, 0x0, 0x81, 0x8, 0x9, 0x7ff, 0xffff, 0x0, 0x0, 0x0, 0xdcca, 0x9, 0xf9da, 0x0, 0xfff, 0xffff, 0x0, 0x7cb, 0x0, 0x1ff, 0xac65, 0x6, 0x3, 0x4, 0x58e, 0x4, 0xffff, 0x1, 0x2, 0x800, 0x2, 0x3, 0x2, 0x7, 0x6386, 0x39, 0x27, 0x0, 0x3ff, 0x9, 0x4, 0x1f, 0xa18e, 0x3, 0x6, 0x7f], 0xffff4634}}}) socket(0x18, 0x0, 0x0) 03:26:11 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x40854) 03:26:11 executing program 2: capset(&(0x7f0000000300), 0x0) 03:26:11 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000140)={'bridge_slave_1\x00'}) 03:26:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8980, &(0x7f0000000080)={'vcan0\x00'}) 03:26:11 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x6100, 0x0) [ 859.178812][T16229] bridge_slave_1: mtu less than device minimum 03:26:11 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x4113, r0, 0x0) 03:26:11 executing program 1: r0 = socket(0x25, 0x5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={0x0}}, 0x0) 03:26:11 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000540)={0x23, 0x0, 0x4}, 0x10) 03:26:11 executing program 2: socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) 03:26:11 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) 03:26:11 executing program 2: r0 = socket(0x25, 0x5, 0x0) connect$nfc_raw(r0, &(0x7f0000000080), 0x10) 03:26:11 executing program 1: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 03:26:11 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:11 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:26:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000080d8cd"], 0x54}}, 0x0) 03:26:11 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4) 03:26:11 executing program 1: syz_clone(0x40000000, &(0x7f0000000000)="af", 0x1, 0x0, 0x0, &(0x7f00000000c0)="34b7253876b5255f475efb639a6d42117d9e288fa6f491b4cd32af71568048f61431b08cc0dcdaa0fbaa926e09499b38c7ee5f03eda5123703b3a8bc42ed9bd4781c634d64242eaa87c0b16ff0d662cb01e26b374ede241d482f7f084b74fbabc4b46bacbb5429bcd51e71db63d9d66434eaa51928dadf11488b21f20d8f2706b132ba6d14d21b689d2aebb0ec0bee2e5e1da367d1b5d17742ae309b19a60f7b78a13a3b0c81bf60dc187e7e6757ba1e757c805a73fafbfc3b9900fc296f9aa04ca80d6097da7c32e57934b7fc4c14fc") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 03:26:11 executing program 3: syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080), 0x0, &(0x7f0000000300)={0x1f}, 0x0, 0x0) 03:26:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x5ca}, 0x4) 03:26:11 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200900, 0x0) 03:26:11 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=""/15, 0xa5, 0xf}, 0x20) 03:26:11 executing program 0: r0 = socket(0x2, 0x3, 0x4) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}, 0x1, 0x0, 0xffffff7f}, 0x0) 03:26:11 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syzkaller1\x00'}) 03:26:11 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x80, 0x0, 0x464, 0x8}, 0x48) 03:26:11 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x54) 03:26:11 executing program 3: syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x4400) 03:26:11 executing program 0: socket(0x63, 0x0, 0x0) 03:26:11 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x0, 0x2, {0x9, @vbi}}) 03:26:11 executing program 2: syz_clone(0x40000000, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 03:26:11 executing program 3: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x18, 0x0, &(0x7f0000000600)) 03:26:11 executing program 0: getresuid(&(0x7f00000011c0), &(0x7f0000001200), 0x0) 03:26:11 executing program 1: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_clone(0x8800000, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x2, 0x0, 0x0, 0xee01, 0xee00}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6}) 03:26:11 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8901, &(0x7f0000000000)) 03:26:11 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x0) 03:26:11 executing program 3: socket(0x2b, 0x801, 0x0) 03:26:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x5, 0x0) read$usbfs(r0, &(0x7f0000000200)=""/229, 0xe5) 03:26:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) 03:26:11 executing program 0: syz_clone(0x80102200, 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)="696fda4ccbbf3f7f48e0d4759ad5a7655206c828a606ec32c095") 03:26:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 03:26:11 executing program 1: ustat(0x7, &(0x7f0000000040)) 03:26:11 executing program 0: semget(0x1, 0x0, 0x650) 03:26:11 executing program 2: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x6e000, 0x0) 03:26:11 executing program 1: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x12, 0x0, &(0x7f0000000600)) 03:26:11 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x62000, 0x0) 03:26:11 executing program 0: socket(0x15, 0x5, 0xb59a) 03:26:11 executing program 3: syz_mount_image$ocfs2(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000008cc0), &(0x7f0000008d00)='./file0\x00', 0x0, 0x2000, 0x0) 03:26:11 executing program 2: r0 = socket(0x2, 0x3, 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) 03:26:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f00000001c0)={'wg0\x00'}) 03:26:11 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000028c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000002980), 0xffffffffffffffff) 03:26:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0) 03:26:11 executing program 3: openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) 03:26:11 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'team_slave_0\x00'}) 03:26:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8980, &(0x7f0000000100)={@private2}) 03:26:11 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c}, 0x1c}}, 0x40854) 03:26:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000240)="b8", 0x1}, {0x0}], 0x2, &(0x7f0000000400)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@empty]}}}], 0x28}, 0x0) 03:26:11 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x14, &(0x7f0000000140)={&(0x7f00000002c0)="019810ef92c601582d68e46ae962d55d0138862d800a1b34f2f09c3c5dfa0b1fdbf32e0e9f8a71a975a3d24ba2af9f3cb62d9913f7c630e61c9acf6a82bef42c1d8d0361fe4e82c332e9eca2f85904e9a0df0556f58541e4dc1568bb5d1557127e8d77a21d05c4a2ae859ba07252c5390b5104b57108087ebb94b6d6b4882b10", 0x80}}, 0x0) 03:26:11 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00'}, 0x10) 03:26:11 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 03:26:11 executing program 3: r0 = socket(0x2, 0x3, 0x4) getsockopt$WPAN_WANTLQI(r0, 0x0, 0xf, 0x0, &(0x7f0000000600)) 03:26:11 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000040)='4\x00', 0xffffffffffffff4a) 03:26:11 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, 0x0) 03:26:12 executing program 2: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) 03:26:12 executing program 0: socketpair(0xa, 0x0, 0x800, &(0x7f0000000080)) 03:26:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x89a0, 0x0) 03:26:12 executing program 1: syz_clone(0x8800000, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 03:26:12 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write$FUSE_DIRENT(r0, 0x0, 0xe0) 03:26:12 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12811, r0, 0x10000) 03:26:12 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8937, &(0x7f0000000080)={'vcan0\x00'}) 03:26:12 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/161, 0x1a, 0xa1, 0x1}, 0x20) 03:26:12 executing program 1: syz_clone(0x8800000, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 03:26:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r0, 0x29, 0xb, 0x0, &(0x7f0000000040)) 03:26:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x54}, 0x8}, 0x0) 03:26:12 executing program 1: syz_clone(0x8800000, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 03:26:12 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x8000, 0x0, {0x1, @pix_mp}}) 03:26:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8930, &(0x7f0000000080)={'vcan0\x00'}) 03:26:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x7fffffff, 0x0, 0xec7}) 03:26:12 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) read$usbfs(r0, 0x0, 0x0) 03:26:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1}) 03:26:12 executing program 1: syz_clone(0x8800000, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 03:26:12 executing program 0: mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 03:26:12 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x0, 0x1, {0x1, @vbi}}) 03:26:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x0) 03:26:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x5450, 0x0) 03:26:12 executing program 0: openat$vcsu(0xffffffffffffff9c, &(0x7f0000001180), 0x10480, 0x0) 03:26:12 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) 03:26:12 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8942, &(0x7f0000000000)={'team_slave_0\x00'}) 03:26:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="04"], 0x48}}, 0x0) 03:26:12 executing program 0: pselect6(0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000540), 0x0) 03:26:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 03:26:12 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var]}}, &(0x7f0000000100)=""/129, 0x2a, 0x81, 0x1}, 0x20) 03:26:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="3c84bfb11ae9ec86dc55246c1f", 0xd}, {&(0x7f0000000180)="ac", 0x1}], 0x2, 0x0, 0x0) 03:26:12 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x24, @long}, 0x14, &(0x7f0000000640)={0x0}}, 0x0) 03:26:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, &(0x7f0000000040)=""/161, 0x26, 0xa1, 0x1}, 0x20) 03:26:12 executing program 1: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000040), 0xffffffffffffffa2) 03:26:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 03:26:12 executing program 2: syz_mount_image$omfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x1800, 0x0) 03:26:12 executing program 1: syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) 03:26:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 03:26:12 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000028c0), 0x101, 0x0) 03:26:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 03:26:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="3c84bfb11ae9ec86dc55246c1f", 0xd}, {&(0x7f0000000180)="ac", 0x1}], 0x2, 0x0, 0x0) 03:26:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private0}}) 03:26:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 2: openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) 03:26:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8922, &(0x7f0000000080)={'vcan0\x00'}) 03:26:12 executing program 3: capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)={0x4}) 03:26:12 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x0, 0x0, {0x0, @vbi}}) 03:26:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="3c84bfb11ae9ec86dc55246c1f", 0xd}, {&(0x7f0000000180)="ac", 0x1}], 0x2, 0x0, 0x0) 03:26:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 2: sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0xec5b7e03f72826c8) 03:26:12 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0xc4080, 0x0) 03:26:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40012141) 03:26:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x846512678b3a18b2}) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="3c84bfb11ae9ec86dc55246c1f", 0xd}, {&(0x7f0000000180)="ac", 0x1}], 0x2, 0x0, 0x0) 03:26:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:12 executing program 2: r0 = socket(0x2, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, 0x0) 03:26:12 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x24040881) 03:26:12 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000001100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001140)={0xec4, 0x3ed, 0x0, 0x0, 0x0, "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"}, 0xec4}}, 0x0) 03:26:12 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x8}]}) 03:26:12 executing program 1: sigaltstack(0x0, &(0x7f0000000040)={0x0}) 03:26:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}}, 0x38) 03:26:12 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x3000)=nil, 0x1000) 03:26:12 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) 03:26:12 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8993, &(0x7f0000000080)={'vcan0\x00'}) 03:26:12 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mq_getsetattr(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x8000}, 0x0) 03:26:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:26:12 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000100)={0x0, @sliced}) 03:26:12 executing program 0: socketpair(0x29, 0x0, 0x0, &(0x7f0000000340)) 03:26:12 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000480)=0x2) 03:26:12 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)="e6") 03:26:12 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8901, &(0x7f0000000080)={'vcan0\x00'}) 03:26:12 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 03:26:12 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x3, 0x3}}, 0x26) 03:26:13 executing program 0: syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x200) 03:26:13 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8981, &(0x7f0000000000)) 03:26:13 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0x4020940d, &(0x7f0000000100)={0x9, @sliced}) 03:26:13 executing program 1: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x5, 'syz0\x00'}) r0 = getpgid(0xffffffffffffffff) r1 = getpgid(r0) r2 = syz_clone(0x40100000, &(0x7f0000000080)="3faadeb5e1da2773d3051b72b93cf09b8be46287c3e17db0158c2f671ccfed842a7e95bdc725b04dd1b8d2755f61b5e77a953c1a6ed25567c3d9e75487088142d5df6c2e3fa2d9092fd6df24831f43f407f5f23796d12c906224778220c197a87788dfe19432fafc71df5ba951b593b1e5495bda85ae87901afc471ba93869c60920a927d5afa31151", 0x89, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="0aa47512f66fe05ab771ba4dbddb976c9ed3baa2f67ee1a62786ad2382323d751d1640d8419c7b9e4ee5802cf7fca00d562cdee3107d66d94b0abbfee85a8b18c4d62ee477b358e226a6f86369192437ffc3acb9605766ddfbdf6811bec842abd1ef3808a4af63867129ac4545f4400365766e3e134abb2acbf00ba0a5da59bd938999cf89bbea0d3a2f") ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000280)={r2, 0x1, 0x8b}) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = syz_clone(0x14240000, &(0x7f0000000300)="692b333447eebbe9c1b531c7b1f17e79519dae6d577b8f81084febfc987966026ad5d489cb84a3c41f71a5eb6ceaaf0dce9bd96136cef194fec377848c8d4dc17f70c8416b0d20dcb42ae879ee01f26cbdf9ad7c472d5e009bee13eaf4d54d530a387ff0973fb70285d5dece112632f2be2b9c536b93cfb07d9204538b90207ea14c309594125756e598e9fa", 0x8c, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="7d9fba75bb0791dc1cdffab18952cdf4dd62410554d576bdc47ae9e5f0a92ef01bec18015eb9a0ac2a3b9e4b23ad4ababeb26c6701ee84e8ba1bd90355d1efd7f233bba45f193b55a2b29fafbb1ccf29834093b5ac6250f01e384c44691c76c346152b0d7315ffb4a4027cec0ac08f412543a7cfbe6c5a8158efc156a290395c692e2126f259e595bf74bb3615937d986c13b56c0b80c3be3e69685cd7f47eda4e456e98147763d5b47aa343f4c52e60f1a4000531aa8dc631160c80e3381c3404d6a16004fa3c677f0037") write$cgroup_pid(r3, &(0x7f0000000540)=r4, 0x12) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x7f) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, 0x0) prlimit64(r1, 0x4, 0x0, &(0x7f0000000880)) 03:26:13 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d10010904002003020600050624"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x48, &(0x7f0000000140)={0x5, 0xf, 0x48, 0x1, [@generic={0x43, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa39"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 03:26:13 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x20000000}, 0x48) 03:26:13 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0x9, 0x1, 0x1, 0x7fff, 0x8}, 0x2b) 03:26:13 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x32) 03:26:13 executing program 1: utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x0) 03:26:13 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401"], &(0x7f0000000300)={0x0, 0x0, 0x5f, &(0x7f0000000140)={0x5, 0xf, 0x5f, 0x1, [@generic={0x5a, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa3981ca6d4c9de1747c60ff963bea691fc87c31da2994a35e"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}]}) 03:26:13 executing program 1: syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x9000, &(0x7f0000000400)) 03:26:13 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) [ 861.233003][T16128] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 861.323765][ T3089] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 861.482835][T16128] usb 7-1: Using ep0 maxpacket: 16 [ 861.572850][ T3089] usb 8-1: Using ep0 maxpacket: 16 [ 861.703504][T16128] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.703555][T16128] usb 7-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.703575][T16128] usb 7-1: config 1 interface 0 has no altsetting 0 [ 861.823035][ T3089] usb 8-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 861.823450][ T3089] usb 8-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.823478][ T3089] usb 8-1: config 1 interface 0 has no altsetting 0 [ 861.943089][T16128] usb 7-1: string descriptor 0 read error: -22 [ 861.943223][T16128] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 861.943249][T16128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.984394][T16128] usb 7-1: bad CDC descriptors [ 862.102976][ T3089] usb 8-1: string descriptor 0 read error: -22 [ 862.103339][ T3089] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 862.103366][ T3089] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.144377][ T3089] usb 8-1: bad CDC descriptors [ 862.189302][T16128] usb 7-1: USB disconnect, device number 25 [ 862.349195][ T3762] usb 8-1: USB disconnect, device number 12 03:26:14 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d100109040020"], &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 03:26:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x1600bd7d, 0x0, &(0x7f0000000040)) 03:26:14 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) 03:26:14 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) 03:26:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:26:14 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x3, &(0x7f0000001140)=@framed, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_createauth\x00', r0}, 0x10) 03:26:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:26:15 executing program 3: r0 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 862.993125][ T3762] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 863.252905][ T3762] usb 7-1: Using ep0 maxpacket: 16 [ 863.452917][ T3762] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 863.452960][ T3762] usb 7-1: config 1 interface 0 has no altsetting 0 [ 863.614054][ T3762] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 863.614075][ T3762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.614088][ T3762] usb 7-1: Product: syz [ 863.614096][ T3762] usb 7-1: SerialNumber: syz [ 863.895312][ T3762] usb 7-1: USB disconnect, device number 26 03:26:16 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103ff032c04c109058202000280"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x1, [@generic={0x5b, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa3981ca6d4c9de1747c60ff963bea691fc87c31da2994a35e49"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 03:26:16 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d10010904002003020600050624"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 03:26:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 03:26:16 executing program 2: unshare(0x2020600) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) 03:26:16 executing program 2: syz_usb_connect$cdc_ecm(0x6, 0x5c, &(0x7f0000000080)=ANY=[], 0x0) [ 864.652735][ T3089] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 864.652882][ T3762] usb 8-1: new high-speed USB device number 13 using dummy_hcd 03:26:17 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103ff032c04c1090582020002800681090503021000000305"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x1, [@generic={0x5b, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa3981ca6d4c9de1747c60ff963bea691fc87c31da2994a35e49"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}]}) [ 864.903544][ T3089] usb 5-1: Using ep0 maxpacket: 16 [ 864.912715][ T3762] usb 8-1: Using ep0 maxpacket: 16 03:26:17 executing program 2: r0 = socket(0x1, 0x1, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 03:26:17 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x1, [@generic={0x2f, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}]}) [ 865.112746][ T3089] usb 5-1: unable to get BOS descriptor or descriptor too short [ 865.152982][ T3762] usb 8-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 865.153033][ T3762] usb 8-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.153060][ T3762] usb 8-1: config 1 interface 0 has no altsetting 0 [ 865.192744][ T3735] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 865.200670][ T3089] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 865.201593][ T3089] usb 5-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.201699][ T3089] usb 5-1: config 1 interface 0 has no altsetting 0 [ 865.273291][T16134] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 865.422783][ T3762] usb 8-1: string descriptor 0 read error: -22 [ 865.422849][ T3762] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.422864][ T3762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.432875][ T3735] usb 6-1: Using ep0 maxpacket: 16 [ 865.464457][ T3762] usb 8-1: bad CDC descriptors [ 865.472966][ T3089] usb 5-1: string descriptor 0 read error: -22 [ 865.473034][ T3089] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.473048][ T3089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.522911][T16134] usb 7-1: Using ep0 maxpacket: 16 [ 865.524349][ T3089] usb 5-1: bad CDC descriptors [ 865.662886][ T3735] usb 6-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 865.662938][ T3735] usb 6-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.663011][ T3735] usb 6-1: config 1 interface 0 has no altsetting 0 [ 865.670061][ T3762] usb 8-1: USB disconnect, device number 13 [ 865.724913][T16454] usb 5-1: USB disconnect, device number 18 [ 865.725692][T16134] usb 7-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 865.725736][T16134] usb 7-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 865.725765][T16134] usb 7-1: config 1 interface 0 has no altsetting 0 [ 865.942903][ T3735] usb 6-1: string descriptor 0 read error: -22 [ 865.943017][ T3735] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 865.943064][ T3735] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.984782][ T3735] usb 6-1: bad CDC descriptors [ 866.133894][T16134] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.134008][T16134] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 03:26:18 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103ff032c04c109058202000280"], &(0x7f0000000300)={0x0, 0x0, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x1, [@generic={0x5b, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa3981ca6d4c9de1747c60ff963bea691fc87c31da2994a35e49"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) [ 866.134029][T16134] usb 7-1: Product: syz [ 866.134113][T16134] usb 7-1: SerialNumber: syz [ 866.193520][ T3737] usb 6-1: USB disconnect, device number 21 03:26:18 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 03:26:18 executing program 0: r0 = socket(0x25, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x4045855, 0x0, 0x0) 03:26:18 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x1c, &(0x7f0000000140)={0x5, 0xf, 0x1c, 0x1, [@generic={0x17, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2"}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc07}}]}) [ 866.453879][T16134] usb 7-1: bad CDC descriptors [ 866.457684][T16134] usb 7-1: USB disconnect, device number 27 [ 866.482987][T16454] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 866.592828][ T3762] usb 5-1: new high-speed USB device number 19 using dummy_hcd 03:26:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002180)={@local, 0x0, 0x0, 0x0, 0x5}, 0x20) 03:26:18 executing program 1: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 866.755274][T16603] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 03:26:18 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ecryptfs', 0x4000, 0x0) [ 866.782914][T16454] usb 8-1: Using ep0 maxpacket: 16 [ 866.833662][ T3762] usb 5-1: Using ep0 maxpacket: 16 03:26:19 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a44000010203010902"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) [ 867.013496][T16454] usb 8-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 867.013543][T16454] usb 8-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.013568][T16454] usb 8-1: config 1 interface 0 has no altsetting 0 [ 867.093079][ T3762] usb 5-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 867.093122][ T3762] usb 5-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 867.093152][ T3762] usb 5-1: config 1 interface 0 has no altsetting 0 [ 867.192955][T16456] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 867.253650][ T3762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.253681][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.253699][ T3762] usb 5-1: Product: syz [ 867.253714][ T3762] usb 5-1: Manufacturer: à°‡ [ 867.253730][ T3762] usb 5-1: SerialNumber: syz [ 867.273563][T16454] usb 8-1: string descriptor 0 read error: -22 [ 867.273626][T16454] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.273641][T16454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.335272][T16454] usb 8-1: bad CDC descriptors [ 867.462822][T16456] usb 7-1: Using ep0 maxpacket: 16 [ 867.536237][ T3735] usb 8-1: USB disconnect, device number 14 [ 867.583821][ T3762] usb 5-1: bad CDC descriptors [ 867.586698][ T3762] usb 5-1: USB disconnect, device number 19 [ 867.672901][T16456] usb 7-1: config 0 has no interfaces? [ 867.923066][T16456] usb 7-1: string descriptor 0 read error: -22 [ 867.923139][T16456] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.923179][T16456] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.924597][T16456] usb 7-1: config 0 descriptor?? 03:26:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./file0\x00', 0x100000000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000340)="eb3c906d8d6673fdd261740002800100024011eb04f801", 0x17}], 0x0, &(0x7f0000000180)) creat(0x0, 0x0) r2 = syz_mount_image$minix(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x9, 0x6, &(0x7f0000000740)=[{&(0x7f0000000380)="3eba2fa5e874470e40ddbaa7e64b00b17f97d107a730a194f3cda7b7d8e98dd9f6932a7910f85da6e053a13f1d41b799e6d48f49b8257695cbd8515260ac7b60e8cbbfc8af1e0ccd586c0071a3fd8e9a24e625f8b3e0a2a9dd7572787d530f07a154e8d3c4c23309ba343f2006311919af74c844534d0a3bb88a1f12f49d28d94440dc6259e2084d67c3a5503ce1ced009f4d674a0e81ec2e0efb3a679560427cee6e4520a9695144bbb9f94c4ac4683ebd63ba64f2c97", 0xb7, 0xfffffffffffffffd}, {&(0x7f0000000440)="f515ba23ff7ae81e3734dac09185ac43c0c11e76f0f55b773eedfad6d33882021d475fa2826c0fb38309e4c21bae751a88be988d9dcecee77c7c6a2afc7a8083d9a6e3152f8777ead261956c3bc7a3c9ce44719b8ea256e400620dd2bd916ab2daf654c5639a63caea47179000e4f96cc909b58d680851f4ddc1bf", 0x7b, 0x5}, {0x0, 0x0, 0x80000000}, {&(0x7f0000000580)="7eee544761692b8febc3c745258e5252e385636a825e47827979e5231729275017a8ce2316776fe633901e80d32ef8d1eb962efd22d987f74e47a91ba80754c29c8defd64f1da640f83706de3f104c8a61b0adc69a2bab2f005237ced3caffc2a52a9c7ccfb11775bee1d756b95490cc8569740fcfe40fe14720000292980ad3c647ac20a6feb0167712af64855d120705b9ef94dfad9d072f704d67d8851048880796e440a292bdfe55", 0xaa, 0x100}, {&(0x7f0000000640)="087ac54e24d1e54f2ed120dc48a4a14ac38ea4bad9e96cfd7c8a978fa88b9f0b3d545fa9794ad6f23540ca1251dfd3e8b844e169c2cc77f5a43fc7b1e5bbb6e39a74d1d12eac9897e3240290afd1bd228d80dec26eabd06ea262be68c778416bccfb", 0x62, 0xfffffffffffffffb}, {&(0x7f00000006c0)="eb459f767189186024fc070a8a423b975b130d849e8f04a3a4f74ff971037bf0c103403dac55f57bf019d14fa17f0ce037b877d53c3e19f719d3c99d29199e1a1b0ec687375cc3461a0161cf75fd44c4d35d7621e4c208376e39611bca4fb5359cb953b75ab6cd80040fb4de7cab50d58e6b9be9ffb18807c1b1b4fc45", 0x7d, 0x8}], 0x1008000, &(0x7f0000000800)={[{'%[*\'#-*{'}, {'vfat\x00'}], [{@smackfsroot={'smackfsroot', 0x3d, '-#'}}, {@permit_directio}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x38, 0x2bcb45ba2047d46c, 0x62, 0x66, 0x38, 0x39, 0x31], 0x2d, [0x64, 0x0, 0x36], 0x2d, [0x61, 0x33, 0x39, 0x63], 0x2d, [0x30, 0x37, 0x32, 0x32], 0x2d, [0x37, 0x64, 0x37, 0x34, 0x65, 0x31, 0x65, 0xaffccc4bebcee19f]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, 'vfat\x00'}}, {@seclabel}, {@dont_measure}]}) mknodat$loop(r2, &(0x7f0000000900)='./file0\x00', 0x8000, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0xc0185502, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) 03:26:20 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xf3, &(0x7f00000001c0)=""/243, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:20 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d1001090400200302060005062406000067052400070009240f017908000058c47f0001052401027f09058103ff032c04c109058202000280"], &(0x7f0000000300)={0x0, 0x0, 0x60, &(0x7f0000000140)={0x5, 0xf, 0x60, 0x1, [@generic={0x5b, 0x10, 0x2, "4cccda1826612f459f3313f7839864a6711270f2153ddb5c4ee22a4f2d4956a3210da6240649db9f0941c8b4bcc368d004cd0b6867d63dc457fab4281282aa3981ca6d4c9de1747c60ff963bea691fc87c31da2994a35e49"}]}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) 03:26:20 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d100109040020030206000506240600"], &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x6, 0x6, 0x0, 0x20, 0xe1}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x2, [{0x0, 0x0}, {0x4, &(0x7f0000000200)=@lang_id={0x4}}]}) [ 868.187052][ T3737] usb 7-1: USB disconnect, device number 28 [ 868.342886][T16134] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 868.342956][ T3762] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 868.582900][T16134] usb 8-1: Using ep0 maxpacket: 16 [ 868.602700][ T3762] usb 5-1: Using ep0 maxpacket: 16 03:26:20 executing program 2: getpid() syz_usb_connect(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x182, &(0x7f0000000440), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r5 = socket$inet(0x2, 0x6, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @private}}, 0x0) io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x4) [ 868.782887][T16134] usb 8-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config [ 868.782949][T16134] usb 8-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.782975][T16134] usb 8-1: config 1 interface 0 has no altsetting 0 [ 868.852815][ T3762] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.852857][ T3762] usb 5-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.852875][ T3762] usb 5-1: config 1 interface 0 has no altsetting 0 03:26:21 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003020000102505a1a440000102030109024a0001010d10010904002003020600050624"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 869.032897][T16134] usb 8-1: string descriptor 0 read error: -22 [ 869.033425][T16134] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.033472][T16134] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.081562][T16134] usb 8-1: bad CDC descriptors [ 869.112834][ T3762] usb 5-1: string descriptor 0 read error: -22 [ 869.112935][ T3762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.112961][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.162334][ T3762] usb 5-1: bad CDC descriptors [ 869.213034][ T3737] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 869.289944][T16454] usb 8-1: USB disconnect, device number 15 [ 869.364577][T16456] usb 5-1: USB disconnect, device number 20 [ 869.493131][ T3737] usb 6-1: Using ep0 maxpacket: 16 03:26:21 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) pipe2$watch_queue(&(0x7f0000000240), 0x80) [ 869.692960][ T3737] usb 6-1: unable to get BOS descriptor or descriptor too short 03:26:21 executing program 2: syz_open_dev$vcsu(&(0x7f0000000240), 0xc4f, 0x42000) 03:26:21 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, 0x0, 0x0) 03:26:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000000)={0x0, 0x1d, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x45}}}, 0x3a}}, 0x0) [ 869.783012][ T3737] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 03:26:21 executing program 2: socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0xa, 0x2, 0x1, &(0x7f0000000000)) [ 869.783060][ T3737] usb 6-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.783090][ T3737] usb 6-1: config 1 interface 0 has no altsetting 0 03:26:21 executing program 0: syz_open_dev$media(&(0x7f0000000200), 0x0, 0x10002) 03:26:21 executing program 3: openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) [ 870.082892][ T3737] usb 6-1: string descriptor 0 read error: -22 [ 870.082992][ T3737] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 870.083019][ T3737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.123466][ T3737] usb 6-1: bad CDC descriptors [ 870.329772][T16128] usb 6-1: USB disconnect, device number 22 03:26:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) 03:26:22 executing program 3: openat$nvram(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) 03:26:22 executing program 0: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) 03:26:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) 03:26:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14}, 0x14}}, 0x0) 03:26:22 executing program 0: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc001}, 0x4000) syz_open_procfs$userns(r1, &(0x7f0000000840)) 03:26:22 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:23 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 03:26:23 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c0000, 0x0) 03:26:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 03:26:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r1, 0x1}, 0x14}}, 0x0) 03:26:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_team\x00', {'veth1_to_hsr\x00'}}) 03:26:23 executing program 2: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x1}) 03:26:23 executing program 3: ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) 03:26:23 executing program 0: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 03:26:23 executing program 2: socketpair(0x0, 0x800, 0x10000, &(0x7f0000000100)) 03:26:23 executing program 0: syz_emit_ethernet(0x11, &(0x7f0000000500)={@dev, @link_local, @void, {@x25}}, 0x0) [ 871.202918][T16128] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 871.572893][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 871.572920][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.572937][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.572951][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 871.572975][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 871.572990][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.574712][T16128] usb 6-1: config 0 descriptor?? [ 872.078031][T16128] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 872.083484][T16128] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 872.346954][T16128] usb 6-1: USB disconnect, device number 23 03:26:24 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:24 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/235, 0x1a, 0xeb, 0x1}, 0x20) 03:26:24 executing program 0: syz_open_dev$usbmon(&(0x7f0000000000), 0xd79d, 0x101c42) syz_open_procfs(0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) 03:26:24 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000440)={0x0}) 03:26:25 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 03:26:25 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000440)={0x0, 0x0, 0x7}) 03:26:25 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) 03:26:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$OBJ_GET_PROG(0x21, &(0x7f0000000100)={&(0x7f0000000440)='./file0\x00'}, 0x4e) [ 873.152691][T16454] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 873.532873][T16454] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 873.532912][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.532928][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.532942][T16454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 873.532970][T16454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 873.533018][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.535868][T16454] usb 6-1: config 0 descriptor?? [ 874.015516][T16454] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 874.022194][T16454] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 874.306541][ T3089] usb 6-1: USB disconnect, device number 24 03:26:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:26 executing program 2: r0 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) 03:26:26 executing program 0: r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r0) 03:26:26 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f0000000240)=""/242, 0xf2}], 0x1, &(0x7f0000003b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 03:26:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, &(0x7f0000000100)) 03:26:26 executing program 0: prctl$PR_SET_NAME(0xf, &(0x7f0000000300)='\xbcm\x87\xd3\xfd\vy\xe7\xc8\xb5\x11\xd2\xfe\x02\x123\v\xc85\xef\xb3\x11(\xc7\xe6\x90\x92b\x95{\xc3L\xdfc\xb1,\xe9\xac\xa6`\x95\a(\xb0Y\x8b\xce\x1d\xab\xe0\x8a}M\xb0\xdc\x16\xaa\xa1\x8f\xda\f&W\xea\b\x8f8Z\xb5\x9e#>t\xf6\xe1\xe2\x9b*E\x8f\xb3.\xce\xb2](;\x82\x03\xa25\x7fs\xf1\xef\x1b\xbf\xc5\xde\x19Y\x16\x17\n\x81@\xa1\xd3\xf2X\xfe8u\x90\xce\xc2\x1b\x97[K\x1b\x97\x81\x81$\xeaq\x88\x94!\xdfF\x8f\aU\x9a\xc7g\xd9\xc4\xdeh|4Wi\xfd\xfc\x83\xe2\'\xf5z8\xdf\n\x88\\\x9e\xd1\x1bU\xc8\xf4O\f4B\x0f[f\xfe=\xe2\xcb\x81\xa0Y\xe7e\xc4\xc6\xde\xd0g\xe7\xe5\xceU}\x99\x11\xdef\v\xc7') [ 874.853222][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 03:26:27 executing program 3: r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, &(0x7f0000003b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x9, 0x0) 03:26:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x0, 0x1}, 0x8, 0x10, 0x0}, 0x80) bpf$OBJ_GET_PROG(0x1c, &(0x7f0000000100)={&(0x7f0000000440)='./file0\x00'}, 0x4e) [ 875.132918][ T3089] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 875.503066][ T3089] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 875.503115][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 875.503143][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 875.503164][ T3089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 875.503205][ T3089] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 875.503227][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.505909][ T3089] usb 6-1: config 0 descriptor?? [ 875.975396][ T3089] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 875.979514][ T3089] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 876.257853][T16454] usb 6-1: USB disconnect, device number 25 [ 876.555970][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.556031][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 03:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000080)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_SPORT={0x6}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) 03:26:28 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, &(0x7f0000000100)) 03:26:28 executing program 0: bpf$OBJ_GET_PROG(0x8, &(0x7f0000000100)={0x0, 0x0, 0x18}, 0x10) 03:26:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, &(0x7f0000000100)) 03:26:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5608, 0x2) 03:26:28 executing program 3: r0 = getpgid(0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/pid_for_children\x00') process_vm_readv(r0, &(0x7f0000000600)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x29d, &(0x7f0000003b00)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000002b00)=""/4096, 0x7ffff000}], 0x9, 0x0) 03:26:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, &(0x7f0000000100)) [ 877.062700][ T3737] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 877.433122][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 877.433232][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.433249][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.433263][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 877.433292][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 877.433306][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.435382][ T3737] usb 6-1: config 0 descriptor?? [ 877.934701][ T3737] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 877.938571][ T3737] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 878.210048][T16454] usb 6-1: USB disconnect, device number 26 03:26:30 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:30 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4}, 0x48) 03:26:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000150001"], 0x54}}, 0x0) 03:26:30 executing program 2: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:30 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0xe, 0x0, 0x0) 03:26:30 executing program 2: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:30 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x22, 0x0, 0x0) 03:26:30 executing program 0: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x212000, 0x0) 03:26:30 executing program 3: select(0x40, &(0x7f0000000000)={0x7fff}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x2710}) [ 879.022794][ T6] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 879.402920][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 879.402962][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.402987][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.403010][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 879.403132][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 879.403158][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.407304][ T6] usb 6-1: config 0 descriptor?? [ 879.885616][ T6] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 879.891531][ T6] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 880.156597][T16454] usb 6-1: USB disconnect, device number 27 03:26:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:32 executing program 2: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:32 executing program 3: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0), 0x0, &(0x7f0000000140)) 03:26:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) 03:26:32 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) 03:26:32 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_tracing={0x1a, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:32 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x4000001) [ 880.952897][T16134] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 881.314174][T16134] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 881.314226][T16134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.314255][T16134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.314276][T16134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 881.314337][T16134] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 881.314363][T16134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.316198][T16134] usb 6-1: config 0 descriptor?? [ 881.794694][T16134] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 881.798028][T16134] appleir 0003:05AC:8243.000E: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 882.066345][T16452] usb 6-1: USB disconnect, device number 28 03:26:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:34 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x1e, &(0x7f0000000040), 0x10) 03:26:34 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:34 executing program 3: clock_nanosleep(0x0, 0x0, &(0x7f00000000c0), 0x0) 03:26:34 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x84080, 0x0) 03:26:34 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4bfa, &(0x7f0000000100)) 03:26:34 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x10340, 0x0) 03:26:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}}, 0x0) [ 882.872832][T16128] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 883.242836][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 883.242866][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.242882][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.242896][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 883.242921][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 883.242935][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.244971][T16128] usb 6-1: config 0 descriptor?? [ 883.715431][T16128] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 883.718336][T16128] appleir 0003:05AC:8243.000F: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 883.986053][T16128] usb 6-1: USB disconnect, device number 29 03:26:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, 0x0) 03:26:36 executing program 0: select(0x40, &(0x7f0000000000), &(0x7f0000000080)={0x4}, 0x0, 0x0) 03:26:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:36 executing program 3: r0 = socket(0x18, 0x0, 0x1) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={0x0}}, 0x0) 03:26:36 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x280000, 0x0) 03:26:36 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x30d}, 0x48) 03:26:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, 0x0) 03:26:36 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000140)="b0", 0x1) 03:26:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="5e0600000000000002004e22000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002004e20"], 0x310) 03:26:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, 0x0) [ 884.782969][T16128] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 885.152916][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 885.152958][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 885.152984][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 885.153006][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 885.153085][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 885.153109][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.154437][T16128] usb 6-1: config 0 descriptor?? [ 885.658437][T16128] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 885.661273][T16128] appleir 0003:05AC:8243.0010: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 885.873916][ T6] usb 6-1: USB disconnect, device number 30 03:26:38 executing program 3: socket(0x2, 0x1, 0x2) 03:26:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, 0x0) 03:26:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:38 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x17, &(0x7f0000000040), 0x10) 03:26:38 executing program 0: socket$inet6_dccp(0xa, 0x6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 03:26:38 executing program 2: clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080)) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) 03:26:38 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 03:26:38 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) 03:26:38 executing program 3: r0 = getpgrp(0x0) r1 = gettid() r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)) 03:26:38 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) [ 886.702682][T16128] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 887.073022][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 887.073064][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.073091][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.073112][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 887.073148][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 887.073171][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.075385][T16128] usb 6-1: config 0 descriptor?? [ 887.554266][T16128] appleir 0003:05AC:8243.0011: No inputs registered, leaving [ 887.556367][T16128] appleir 0003:05AC:8243.0011: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 887.755433][ T3762] usb 6-1: USB disconnect, device number 31 03:26:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:40 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:40 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) 03:26:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000180)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="800040"], 0x80}}, 0x0) 03:26:40 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5421, &(0x7f0000000040)={0x7}) 03:26:40 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) 03:26:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 03:26:40 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x4b47, 0x0) [ 888.437617][T16828] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 888.592931][ T3762] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 888.952948][ T3762] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 888.952997][ T3762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.953025][ T3762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.953049][ T3762] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 888.953142][ T3762] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 888.953198][ T3762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.962105][ T3762] usb 6-1: config 0 descriptor?? [ 889.434586][ T3762] appleir 0003:05AC:8243.0012: No inputs registered, leaving [ 889.439193][ T3762] appleir 0003:05AC:8243.0012: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 889.640430][T16134] usb 6-1: USB disconnect, device number 32 03:26:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:42 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40305829, 0x0) 03:26:42 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) 03:26:42 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0xe8) 03:26:42 executing program 2: syz_clone(0xebf345c3394817b, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:42 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, 0x0) [ 890.352846][T16849] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 890.417651][T16854] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 890.482813][ T6] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 890.842924][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 890.843004][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.843032][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.843279][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 890.843369][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 890.843393][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.845663][ T6] usb 6-1: config 0 descriptor?? [ 891.393098][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 891.393205][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 891.395529][ T6] usb 6-1: USB disconnect, device number 33 03:26:43 executing program 2: mmap$snddsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x30, 0xffffffffffffffff, 0x0) 03:26:43 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:43 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:43 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:43 executing program 2: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) socketpair(0x0, 0x0, 0x0, &(0x7f0000002ac0)) 03:26:44 executing program 2: syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x0, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x10, 0x20}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x9, 0x4, 0x3}}]}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xff, 0x0, 0x1, 0x20, 0x5d}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x3, [{0x38, &(0x7f0000000200)=@string={0x38, 0x3, "7a65f2e3031d34459a5b6de70b88375fbbc6b1afe8695dc1efd62d70a32fa1bbb8b503ebeabeea7b34586cfd1c2c93b527f20231f718"}}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}]}, 0x2c}}, 0x20000001) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000045c0)={0x0, 0x0, &(0x7f0000004580)={0x0}}, 0x280d1) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4040081) [ 892.031503][T16867] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 892.060705][T16868] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 892.152888][ T6] usb 6-1: new high-speed USB device number 34 using dummy_hcd 03:26:44 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) [ 892.212718][ T3735] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 892.423435][T16873] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 892.533746][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 892.533790][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.533817][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 03:26:44 executing program 0: syz_clone(0x190e3a4dff6484ce, 0x0, 0x0, 0x0, 0x0, 0x0) [ 892.533839][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 892.533880][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 892.533902][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.536077][ T6] usb 6-1: config 0 descriptor?? [ 892.653673][ T3735] usb 7-1: not running at top speed; connect to a high speed hub [ 892.737484][ T3735] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 03:26:44 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="9141dd287dfc7468514b9a726ef482959a76041c9cf5acd41d8bdcd213a01d67ef82828dced133891d9778844700006d700b9d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) pread64(r0, &(0x7f0000000440)=""/126, 0x7e, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 03:26:44 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) [ 893.014420][T16880] device ‚‚ÎÑ3‰—x„G entered promiscuous mode [ 893.092733][T16452] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 893.093500][ T6] usbhid 6-1:0.0: can't add hid device: -71 [ 893.094912][ T6] usbhid: probe of 6-1:0.0 failed with error -71 [ 893.099558][ T6] usb 6-1: USB disconnect, device number 34 [ 893.332848][T16452] usb 5-1: Using ep0 maxpacket: 16 [ 893.382853][ T3735] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 893.382885][ T3735] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.382905][ T3735] usb 7-1: SerialNumber: syz 03:26:45 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:45 executing program 3: syz_clone(0x104400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 893.492845][T16452] usb 5-1: unable to get BOS descriptor or descriptor too short [ 893.573331][T16452] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 893.573352][T16452] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 03:26:45 executing program 3: syz_clone(0x104400, 0x0, 0x0, 0x0, 0x0, 0x0) [ 893.709057][ T3735] usb 7-1: USB disconnect, device number 29 [ 893.773026][T16452] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 893.773058][T16452] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.773071][T16452] usb 5-1: Product: syz [ 893.773080][T16452] usb 5-1: Manufacturer: syz [ 893.773088][T16452] usb 5-1: SerialNumber: syz [ 893.792863][T16456] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 894.025979][ T1257] usb 5-1: USB disconnect, device number 21 03:26:46 executing program 3: syz_clone(0x104400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:46 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x5460, &(0x7f0000000040)) 03:26:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 03:26:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 894.222998][T16456] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 894.223048][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.223065][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.223094][T16456] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 894.223120][T16456] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 894.223134][T16456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.225729][T16456] usb 6-1: config 0 descriptor?? 03:26:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000014c0)=""/208, 0x30, 0xd0, 0x1}, 0x20) [ 894.762911][T16456] usbhid 6-1:0.0: can't add hid device: -71 [ 894.762977][T16456] usbhid: probe of 6-1:0.0 failed with error -71 [ 894.764503][T16456] usb 6-1: USB disconnect, device number 35 03:26:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:47 executing program 3: syz_clone(0x104400, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 03:26:47 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x40305839, 0x0) 03:26:47 executing program 0: process_madvise(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) 03:26:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 03:26:47 executing program 0: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000040)=""/107, 0x6b) 03:26:47 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0x541b, &(0x7f0000000040)) [ 895.513452][ T3089] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 895.903782][ T3089] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 895.903817][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.903836][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.903850][ T3089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 895.903875][ T3089] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 895.903890][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.905851][ T3089] usb 6-1: config 0 descriptor?? [ 896.452751][ T3089] usbhid 6-1:0.0: can't add hid device: -71 [ 896.452824][ T3089] usbhid: probe of 6-1:0.0 failed with error -71 [ 896.453935][ T3089] usb 6-1: USB disconnect, device number 36 03:26:49 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x1f}}]}}]}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) 03:26:49 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 03:26:49 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:49 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x20001) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)) 03:26:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_ima(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 03:26:49 executing program 0: syz_clone(0x3b04000, 0x0, 0x0, 0x0, 0x0, 0x0) 03:26:49 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x3f, 0x8c, &(0x7f00000000c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:49 executing program 3: syz_open_dev$vcsa(&(0x7f0000000ac0), 0xffffffffffffffff, 0x519c01) [ 897.192858][ T3735] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 897.214154][T16134] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 897.472881][T16134] usb 7-1: Using ep0 maxpacket: 16 [ 897.564692][ T3735] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 897.564736][ T3735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.564752][ T3735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.564765][ T3735] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 897.564792][ T3735] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 897.564806][ T3735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.567966][ T3735] usb 6-1: config 0 descriptor?? [ 897.593069][T16134] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 897.773330][T16134] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 897.773368][T16134] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.773389][T16134] usb 7-1: Product: syz [ 897.773405][T16134] usb 7-1: Manufacturer: syz [ 897.773420][T16134] usb 7-1: SerialNumber: syz [ 898.050381][T16134] usb 7-1: USB disconnect, device number 30 [ 898.138315][ T3735] usbhid 6-1:0.0: can't add hid device: -71 [ 898.138385][ T3735] usbhid: probe of 6-1:0.0 failed with error -71 [ 898.139484][ T3735] usb 6-1: USB disconnect, device number 37 03:26:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:50 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 03:26:50 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000ac0), 0x0, 0x0) read(r0, 0x0, 0x0) 03:26:50 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0xce}, @generic={0x83, 0x2}]}}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 03:26:50 executing program 3: fsopen(&(0x7f0000000600)='fuse\x00', 0x0) 03:26:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 03:26:50 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1}) ioctl$TUNSETCARRIER(r0, 0x8927, &(0x7f0000000080)) 03:26:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r0) [ 898.842731][T16456] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 899.263277][T16456] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 899.263353][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.263380][T16456] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.263394][T16456] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 899.263435][T16456] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 899.263449][T16456] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.265094][T16456] usb 6-1: config 0 descriptor?? [ 899.803046][T16456] usbhid 6-1:0.0: can't add hid device: -71 [ 899.803187][T16456] usbhid: probe of 6-1:0.0 failed with error -71 [ 899.809449][T16456] usb 6-1: USB disconnect, device number 38 03:26:52 executing program 2: r0 = socket(0x2, 0x3, 0x4) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x2404801d) 03:26:52 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1173cc", 0x14, 0x2b, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:26:52 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:26:52 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:52 executing program 0: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) 03:26:52 executing program 2: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001440), &(0x7f0000001480)={'enc=', 'pkcs1', ' hash=', {'sha3-256-generic\x00'}}, 0x0, 0x0) 03:26:52 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffff337) 03:26:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, 0x0, 0x0) 03:26:52 executing program 2: chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d80)) 03:26:52 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) 03:26:52 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ipvlan1\x00', 0x2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) 03:26:52 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) 03:26:52 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:52 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x1185, 0x1}, 0x48) 03:26:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002c00)={&(0x7f0000002840), 0xc, &(0x7f0000002bc0)={&(0x7f0000002880)={0x14}, 0x14}}, 0x0) 03:26:52 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001d80)) 03:26:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x4b52, &(0x7f0000000180)={0x0, 0x1000000, 0x0, 0x0, 0x0, "97e6dd20c7ff2033a24630075fd394470a854c"}) 03:26:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 03:26:53 executing program 2: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) 03:26:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x1) 03:26:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer={0x630b}], 0x0, 0x0, 0x0}) 03:26:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2, &(0x7f0000000240)=@raw=[@map_idx], &(0x7f0000000280)='GPL\x00', 0x0, 0x1, &(0x7f00000002c0)=""/1, 0x41000, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x80) 03:26:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000023c0)={&(0x7f00000022c0), 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x14, 0x0, 0x0, 0x70bd29}, 0x14}}, 0x0) getpgrp(0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, &(0x7f0000002400), &(0x7f0000002580), &(0x7f00000025c0)="003aea71bc41a27087d1ea274477a58d66b60559e5e6d028") getpgid(r1) 03:26:53 executing program 1: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r0, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:53 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 03:26:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@random_vendor={0xdd, 0x6, "d02c1f5506bb"}]}]}, 0x38}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="000000000000000000000a007ced766701803727cb7a930d74555516001bbef2236d43840d310b37b7fc08dfc85caa8f1a9a476b"], 0x18}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 901.365735][T16996] binder: 16992:16996 unknown command 0 [ 901.365783][T16996] binder: 16992:16996 ioctl c0306201 20000180 returned -22 03:26:53 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x2, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f0000000280)='GPL\x00', 0x6ae3, 0x1, &(0x7f00000002c0)=""/1, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:26:53 executing program 2: syz_mount_image$squashfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x8004, &(0x7f0000000480)=ANY=[]) 03:26:53 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 901.473896][ T40] audit: type=1804 audit(1653794813.593:20): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1377/cgroup.controllers" dev="sda1" ino=1153 res=1 errno=0 03:26:54 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg(r0, 0x0, 0x0, 0x0) 03:26:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:54 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:26:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@random_vendor={0xdd, 0x6, "d02c1f5506bb"}]}]}, 0x38}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="000000000000000000000a007ced766701803727cb7a930d74555516001bbef2236d43840d310b37b7fc08dfc85caa8f1a9a476b"], 0x18}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 03:26:54 executing program 2: socketpair(0x28, 0x0, 0x8001, &(0x7f0000000200)) 03:26:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [""]}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:26:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000340)={'ip6gre0\x00', 0x0}) 03:26:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)) [ 902.006766][ T40] audit: type=1804 audit(1653794814.123:21): pid=17021 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1378/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 03:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x4004044) 03:26:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@random_vendor={0xdd, 0x6, "d02c1f5506bb"}]}]}, 0x38}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="000000000000000000000a007ced766701803727cb7a930d74555516001bbef2236d43840d310b37b7fc08dfc85caa8f1a9a476b"], 0x18}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) [ 902.181285][ T40] audit: type=1804 audit(1653794814.293:22): pid=17037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1379/cgroup.controllers" dev="sda1" ino=1159 res=1 errno=0 03:26:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:54 executing program 2: getresgid(&(0x7f0000001cc0), &(0x7f0000001d00), 0x0) 03:26:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x38, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_MDID={0x6}, @NL80211_ATTR_IE={0xc, 0x2a, [@random_vendor={0xdd, 0x6, "d02c1f5506bb"}]}]}, 0x38}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="000000000000000000000a007ced766701803727cb7a930d74555516001bbef2236d43840d310b37b7fc08dfc85caa8f1a9a476b"], 0x18}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x10000a006) 03:26:54 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x0) 03:26:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) 03:26:54 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1e, 0x0) 03:26:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 902.538379][ T40] audit: type=1804 audit(1653794814.653:23): pid=17045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1380/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0 03:26:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x6, 0x1, 0x201}, 0x14}}, 0x0) 03:26:55 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000880)={'syztnl0\x00', 0x0}) 03:26:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:55 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 03:26:55 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x4, &(0x7f0000000240)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x6, 0xd4d, 0x7, 0x10, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) 03:26:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001d80)=@ipmr_delroute={0x1c, 0x6b}, 0x37fe0}}, 0x37fc4) 03:26:55 executing program 0: bpf$MAP_CREATE(0x10, &(0x7f0000000500), 0x48) 03:26:55 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 03:26:55 executing program 0: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) 03:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0xc) 03:26:55 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:55 executing program 3: r0 = socket(0x1, 0x5, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 03:26:55 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x6, 0xd4d, 0x7, 0x10, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0xc) 03:26:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc008ae88, 0x0) 03:26:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0xc) 03:26:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0x4008ae06, 0x0) 03:26:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)=@ipv6_deladdr={0x18, 0x15, 0x501}, 0x18}}, 0x0) [ 903.832857][T16456] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 904.022699][T16456] usb 6-1: device descriptor read/64, error 18 [ 904.292787][T16456] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 904.482760][T16456] usb 6-1: device descriptor read/64, error 18 [ 904.614091][T16456] usb usb6-port1: attempt power cycle [ 905.022855][T16456] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 905.202924][T16456] usb 6-1: device descriptor read/8, error -61 [ 905.472939][T16456] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 905.681732][T16456] usb 6-1: device descriptor read/8, error -61 [ 905.792958][T16456] usb usb6-port1: unable to enumerate USB device 03:26:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:26:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x14}, 0x14}}, 0x0) 03:26:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101}, 0xc) 03:26:58 executing program 2: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[], [{@smackfsroot={'smackfsroot', 0x3d, '[)%%\'\\{{('}}]}) [ 906.590310][T17103] binder: Unknown parameter 'smackfsroot' 03:26:58 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:26:58 executing program 3: timer_create(0x0, &(0x7f0000000380)={0x0, 0x0, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000003c0)) 03:26:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d0077"], 0x1c}}, 0x0) 03:26:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14}, 0x14}}, 0x0) [ 907.092702][ T3737] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 907.312853][ T3737] usb 6-1: device descriptor read/64, error 18 [ 907.582786][ T3737] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 907.783309][ T3737] usb 6-1: device descriptor read/64, error 18 [ 907.905699][ T3737] usb usb6-port1: attempt power cycle [ 908.333611][ T3737] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 908.522942][ T3737] usb 6-1: device descriptor read/8, error -61 [ 908.802943][ T3737] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 909.003316][ T3737] usb 6-1: device descriptor read/8, error -61 [ 909.141196][ T3737] usb usb6-port1: unable to enumerate USB device 03:27:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:01 executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f00000013c0)=@name, 0x10) 03:27:01 executing program 2: r0 = socket(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xa00}, 0x0) 03:27:01 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 03:27:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) 03:27:01 executing program 0: add_key(0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, &(0x7f0000000240)={0x0, 0x0, 0x1, @thr={&(0x7f0000000100), 0x0}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x77359400}}, &(0x7f0000000100)) 03:27:01 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[{&(0x7f00000001c0)='\a', 0x1}, {&(0x7f0000000140)="ba", 0x1}, {&(0x7f0000000280)="ad", 0x1}, {&(0x7f0000000440)='2', 0x1}], 0x0, 0x0) 03:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x11, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}}, 0x0) [ 909.710314][T17129] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 909.710497][T17129] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 910.092778][T16128] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 910.282793][T16128] usb 6-1: device descriptor read/64, error 18 [ 910.553151][T16128] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 910.762964][T16128] usb 6-1: device descriptor read/64, error 18 [ 910.884827][T16128] usb usb6-port1: attempt power cycle [ 911.303047][T16128] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 911.472855][T16128] usb 6-1: device descriptor read/8, error -61 [ 911.742856][T16128] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 911.933060][T16128] usb 6-1: device descriptor read/8, error -61 [ 912.053158][T16128] usb usb6-port1: unable to enumerate USB device 03:27:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}]}, 0x50}}, 0x0) 03:27:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x10) 03:27:04 executing program 0: request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0xfffffffffffffffb) 03:27:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 03:27:04 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x9eacaf185dd73cf5}, 0x14}}, 0x0) 03:27:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xa, 0x0, 0x0) 03:27:04 executing program 3: r0 = socket(0x2, 0xa, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x33, &(0x7f0000000000), 0x4) [ 913.153048][T16128] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 913.342731][T16128] usb 6-1: device descriptor read/64, error 18 [ 913.622838][T16128] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 913.814503][T16128] usb 6-1: device descriptor read/64, error 18 [ 913.942865][T16128] usb usb6-port1: attempt power cycle [ 914.363593][T16128] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 914.534766][T16128] usb 6-1: device descriptor read/8, error -61 [ 914.802760][T16128] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 914.983019][T16128] usb 6-1: device descriptor read/8, error -61 [ 915.102880][T16128] usb usb6-port1: unable to enumerate USB device 03:27:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:07 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/module/drm', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1) 03:27:07 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x1, 0xc, &(0x7f0000000000)="d6714066", 0x4) 03:27:07 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 03:27:07 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x8982, 0x0) 03:27:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt(r0, 0x0, 0xb, &(0x7f0000000100)=')', 0x1) 03:27:07 executing program 2: r0 = socket(0x25, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x1703, &(0x7f0000000040)) 03:27:07 executing program 0: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x3, &(0x7f0000000980)=@framed, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) [ 916.183005][ T3762] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 916.382758][ T3762] usb 6-1: device descriptor read/64, error 18 [ 916.652763][ T3762] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 916.853190][ T3762] usb 6-1: device descriptor read/64, error 18 [ 916.974152][ T3762] usb usb6-port1: attempt power cycle [ 917.166628][ C3] hpet: Lost 1 RTC interrupts [ 917.402807][ T3762] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 917.670324][ C3] hpet: Lost 4 RTC interrupts [ 917.670552][ T3762] usb 6-1: device descriptor read/8, error -61 [ 917.932853][ T3762] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 918.113033][ T3762] usb 6-1: device descriptor read/8, error -61 [ 918.234763][ T3762] usb usb6-port1: unable to enumerate USB device 03:27:10 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3c, 0x0, &(0x7f0000000540)) 03:27:10 executing program 2: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 03:27:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000300), 0x0, &(0x7f0000000380)={0x8}, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 03:27:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) io_submit(r1, 0x2, &(0x7f0000001900)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x9}]) 03:27:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x0) 03:27:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x8000}, 0x1c) 03:27:10 executing program 3: futex(&(0x7f00000004c0), 0x5, 0x0, 0x0, &(0x7f0000000540), 0x0) [ 919.242788][T16456] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 919.432752][T16456] usb 6-1: device descriptor read/64, error 18 [ 919.702678][T16456] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 919.892905][T16456] usb 6-1: device descriptor read/64, error 18 [ 920.012847][T16456] usb usb6-port1: attempt power cycle [ 920.432855][T16456] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 920.612873][T16456] usb 6-1: device descriptor read/8, error -61 [ 920.882839][T16456] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 921.052915][T16456] usb 6-1: device descriptor read/8, error -61 [ 921.174413][T16456] usb usb6-port1: unable to enumerate USB device 03:27:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00', 0x1}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) 03:27:13 executing program 3: keyctl$set_reqkey_keyring(0x3, 0xfffffff9) 03:27:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x6, 0x4, 0x0, &(0x7f0000000540)) 03:27:13 executing program 2: r0 = socket(0x25, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x89a3, &(0x7f0000000040)) 03:27:13 executing program 3: memfd_create(&(0x7f0000000340)='/dev/vcsu\x00', 0x2) 03:27:13 executing program 0: r0 = socket(0x25, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8930, &(0x7f0000000040)) 03:27:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001040)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}}], 0x1, 0x0) [ 922.262795][T16455] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 922.662799][T16455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.662840][T16455] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 922.662862][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 922.662876][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.666244][T16455] usb 6-1: config 0 descriptor?? 03:27:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:16 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f00000000c0)) 03:27:16 executing program 0: r0 = socket$inet(0x2, 0xa, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, &(0x7f00000000c0)) 03:27:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter, 0x20000588) [ 924.813242][T16128] usb 6-1: USB disconnect, device number 63 03:27:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x0, 0x0, 0x3ff}, 0x48) 03:27:16 executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) mlockall(0x5) 03:27:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x2}]}, {0x0, [0x0]}}, &(0x7f00000006c0)=""/219, 0x27, 0xdb, 0x1}, 0x20) 03:27:17 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @var={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000100)=""/149, 0x46, 0x95, 0x1}, 0x20) [ 925.232744][T16128] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 925.592993][T16128] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.593021][T16128] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 925.593056][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 925.593124][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.595114][T16128] usb 6-1: config 0 descriptor?? [ 926.381597][ C3] hpet: Lost 2 RTC interrupts 03:27:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:19 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001200)={0x2020}, 0x2020) 03:27:19 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e20, @private}, 0x10, &(0x7f0000000280)=[{0x0, 0x4}, {0x0}, {&(0x7f00000011c0)='\\', 0x1}], 0x3}, 0x4008000) 03:27:19 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x29010, &(0x7f00000001c0)) [ 927.854105][T16455] usb 6-1: USB disconnect, device number 64 03:27:20 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x2, 0x4e20, @private}, 0x10, &(0x7f0000000280)=[{0x0, 0x6000}, {0x0}, {&(0x7f00000011c0)='\\', 0x1}], 0x3}, 0x0) 03:27:20 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x14db, 0x3ff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x400, 0x5, 0x0, 0xffffffffffffffff, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xe}, 0x48) 03:27:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/233, 0x27, 0xe9, 0x1}, 0x20) 03:27:20 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x0, 0x0, 0x0, {}, {}, @cond}) [ 928.302781][T16455] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 928.673047][T16455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.673075][T16455] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 928.673110][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 928.673133][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.675220][T16455] usb 6-1: config 0 descriptor?? [ 930.892420][ T3734] usb 6-1: USB disconnect, device number 65 03:27:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:23 executing program 0: r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x18, 0x3, &(0x7f0000001140)=@framed, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='rpcgss_createauth\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r2, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) 03:27:23 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x0, 0x4, 0x0, 0x4}, 0x48) 03:27:23 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x14db, 0x3ff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x400, 0x5, 0x0, 0xffffffffffffffff, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xe}, 0x48) 03:27:23 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'macvlan0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x7) close(r0) 03:27:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000440)=""/144, 0x2c, 0x90, 0x1}, 0x20) 03:27:23 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x0, 0x4}, 0x48) 03:27:23 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd607136a65b72000000000000030000000000ff51b9ceebfffe80"], 0x0) [ 931.322878][ T3734] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 931.692885][ T3734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.692923][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 931.692959][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 931.693019][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 931.693112][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.696428][ T3734] usb 6-1: config 0 descriptor?? [ 931.762391][ T3734] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 03:27:26 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @broadcast, @val, {@ipv6}}, 0x0) 03:27:26 executing program 2: socket$inet6(0x18, 0x1, 0x0) select(0x40, &(0x7f0000000140)={0x1d}, 0x0, 0x0, 0x0) [ 933.925561][T16455] usb 6-1: USB disconnect, device number 66 03:27:26 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x14db, 0x3ff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x400, 0x5, 0x0, 0xffffffffffffffff, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xe}, 0x48) 03:27:26 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:26 executing program 2: syz_emit_ethernet(0x4de, &(0x7f0000000140)={@local, @broadcast, @val, {@ipv6}}, 0x0) 03:27:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) 03:27:26 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) 03:27:26 executing program 0: epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000440)) 03:27:26 executing program 2: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)) 03:27:26 executing program 0: r0 = socket(0xa, 0x5, 0x0) getpeername$netlink(r0, 0x0, 0x0) 03:27:26 executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x4, 0x14db, 0x3ff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x1, 0x400, 0x5, 0x0, 0xffffffffffffffff, 0xb8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xe}, 0x48) [ 934.382878][T16455] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 934.762848][T16455] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.762886][T16455] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 934.762921][T16455] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 934.762961][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 934.762987][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.766135][T16455] usb 6-1: config 0 descriptor?? [ 934.816519][T16455] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 03:27:29 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000000500)=""/4098, 0x1002) 03:27:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000002c0), 0x10) 03:27:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:29 executing program 3: socketpair(0x0, 0x80e, 0x0, 0x0) [ 936.988742][T13251] usb 6-1: USB disconnect, device number 67 03:27:29 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 03:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000002c0), 0x10) 03:27:29 executing program 2: r0 = socket(0x29, 0x2, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 03:27:29 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:29 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000002c0), 0x10) [ 937.432900][T13251] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 937.792827][T13251] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.792852][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 937.792875][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 937.792900][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 937.792914][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.794426][T13251] usb 6-1: config 0 descriptor?? [ 937.847782][T13251] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 938.007478][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.007588][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.125903][ C3] hpet: Lost 1 RTC interrupts 03:27:32 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:32 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f00000002c0), 0x10) 03:27:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) [ 940.034291][ T3762] usb 6-1: USB disconnect, device number 68 03:27:32 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:32 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:32 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, 0x0) [ 940.144032][ C3] hpet: Lost 2 RTC interrupts 03:27:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 940.452751][ T3762] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 940.688403][ C3] hpet: Lost 1 RTC interrupts [ 940.874450][ T3762] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.874484][ T3762] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 940.874515][ T3762] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 940.874556][ T3762] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 940.874580][ T3762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.889161][ T3762] usb 6-1: config 0 descriptor?? [ 940.925026][ T3762] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 940.961868][ C3] hpet: Lost 1 RTC interrupts [ 941.138230][ C3] hpet: Lost 1 RTC interrupts 03:27:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:35 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) read$usbfs(r0, &(0x7f0000001500)=""/4104, 0x1008) read$usbfs(r0, 0x0, 0x0) 03:27:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x7fe, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 03:27:35 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x80, 0x0, 0x0, @broadcast}, 0x10) [ 943.076755][T16134] usb 6-1: USB disconnect, device number 69 03:27:35 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x0) 03:27:35 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f00000009c0), 0x40101, 0x0) [ 943.097211][T17323] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 03:27:35 executing program 2: io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000180), &(0x7f0000000140)={&(0x7f0000000100)}) 03:27:35 executing program 0: add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f00000003c0)={0x0, "4ee2dd2da560c55d3b99db1b624d9b775cb1fbc6a8f990811a0a92400341e46ffb10df3d07990ac64dccd98cb2fb5e87fc58d1ed52a206fc84324681246836ef"}, 0x48, r0) [ 943.492804][T16134] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 943.853080][T16134] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.853125][T16134] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 943.853159][T16134] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 943.853192][T16134] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 943.853210][T16134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.855785][T16134] usb 6-1: config 0 descriptor?? [ 943.908367][T16134] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 945.783418][ C3] hpet: Lost 1 RTC interrupts [ 946.132405][ T3762] usb 6-1: USB disconnect, device number 70 03:27:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c}, 0x1c}}, 0x0) 03:27:38 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5c94ff2fae0fa8e4, 0x3, &(0x7f00000003c0)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:27:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xf0ff7f00000000}}, 0x0) 03:27:38 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000880)="56f0d425d598fc624a573ec9837b7747b45764b5ca9404fc2c336396aac2613b8fa2461e8eb4aaaa4d43af", 0x2b}, {&(0x7f0000000900)="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", 0xe96}], 0x2}, 0x0) 03:27:38 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000900)="bf0e0068ee7ebe470cff31a13b6bf695b766e9132d173704ae8aa95e8048c51e697b5aac6be65ab46e54ff8d79f11b402288c4384b271f9fa0374e2f7cb81dbca0df1d9be799671791d6bc1232d51baefce56071f7a28da83f3929fe3009da18b5eb78f1c6f9f195330ae2cfc9e6ea882ca3fb37124ab4cbda90a35d77b9e04d27969f6dc8155df12244bcd1d53b8631b1eaae195cbf71e134329f2df5005dcbc74ad1e1fef48b85ac61f9acfcc813a735fa7580bf379dbc5a1c6d836ad3198f239568ad5b0505d8d04522693a869cc5f4880d3d3d3aa6131adb6e777eb55284da3efdee075336e4595fe897a48ea7c198385949339185a075462d44144044b86f07dc70019d105429c344f4996427745bab7dc624ee21ed05b42f3c09152055c5ccedaf9377522613fe50462b878e465a3318a423a25001135ceb9378657a763ff3f5201fda60dfcc4f620612d1871b4707a3bcb0ba59eac78160baeb09551a7c38da3b9069d00d3f4b5a67514b0a20a54882a7d16d2ae943600b5482c0f2b65d1a1469d15c6004d5a5c9916c4ea82d62e5ff6cf26c32b9bac744d594c98a02fd9557dc0544933cc84d4f241c7dbeb9756cef45072d12b903290a5ad1b0c302ef937ff66695cd06eee84e663f64b82b7c32c35ec8e4c0796315ec8d0a713d3d22797048e5a8ebda91f1c31c110dceef8448b01fc5148f8379b414f5c12a9fec3d5e4fdb319c7d4b6efbefdb85a7bbe9eb55ced9ef48f301284e99dcf1fbae7fb2242ff83e6ca37951ba7fc341054254b85b76af11cf06f56d328d04f0d5d4d2f5442479047672ff817bce0cb160b7b77a60ea9b72066312a6f4fa835dd14746294870923b6e0165eaf9229c25e29e0d80664b0852c86e7f98e9aadaaf1669739c00f5ed8e2b22983d42ed85469d00143e22526090f0fc013c23d546498a0b490c8080e6065983c38f77da76aaaf7887e75e074e7f93edd375f14c7f2ef79673a4ee5eb53ff8c245c3e5f9d441bc39efa5ebca91411a60a7979246c51f1fb2dfc21ba08b7425d5e3be1fe7c2c990a3ee28d092cc085789200d301eb81d6fd9963a5629af14519a3be4726011bdd5d2d4e6b2df0e12ce58d868db7e5aaf9f37df7e54022adef521c4464bb8d3638dc0a307c0616d32e480bd54c032fd7894891d93b6497d0347b3605455c9319398966d0b4e8d580b8a17e845aebfe34cf61927be56d1ec39835a8cd6ebe893e78445a2f1a70f94815c5c071a19352bb2453764d96d16df7fa5ee827ee82fd5613e5dc3a7b4a5198fde2d35f529d666eac11440083342723af1d0c8519f29e717d0a65251b03d31a05f444b44ef31c57fffc9f4bfc29997b84fa02d1fd0599dca38173cbc26962f2369e106a5cf3a7b9434729609ba549ceea21f354d6023b214c84d15c5c18892f8a6de90ab02f47b8b5393a0847fad98119b93516d5c553b36dc294f03299b31dc260a9d65efcd32c280d7c26765a945a3e0d547c1b741bdbe67cbb41241b2ca0e9f6e85da33d9c345a0cbe31c770947151ebe12ae18dc440b47830e6543d50f9292ca2c14694a8b5c3284d3cb5a2abff588d685e3358a458b08df057c8d30c0352d8483db6fc7da8f9604f8c7219f4d0124d6aec29adc7630f49af0bf4f1d27ae859a5bb50bed20aa35105207cb2daa8f02ddafb0c43588c7a1788fa1f3cfb4789d0477bc4b2287b85e16d09bc143789fa2c52f44668c56a71e0c4a5b0bcaec5f27cf3817c9aa08b433acb43cb114245b45021f49935480199548b1b85c1ae48deaa35c5823a76d3d1f115a9545a88eec7b6a6d0885799e2a03da7bff8bce2c2bfe6f0943b9db8432cd50ce3e61dedb299f6bce835ec30feefb707cad32f7eb6004886cd9077d60dd71478dcfb2cd27f0e4832ca5c1f5a253e88ff3b3ae43119f9f3ecc43ccd0fab4e4ddbe648ff3ea612cceaf9f757a07602e076a86aa693d8d4d603f61628f39e5c3e75d597eb70eb556f1cbce93422b684f390bb8288fd23282e12a6ef597550aba112da609cd206e62e6efb07f3c80b840a31ba195243834a7ea235d6fa7827ee0c837e572df0837d32ada62a5df090cfe010877ab56c4d5fca9e0487a923e9cdf82e6b771ea49914eaa4d21469e0c4611f75368e2caa403887af7481ff93e412ed651e5fbcf55d65eb2f4fb820abe3de372620bd27748ee30c7ae5d394bf89ef4f89a3d9822877ccb2c8ed99c57a5bc4a090cf5d49102450ba6109dbdda584361927a3702cfe58d803ad6cdfdba92282b860c4f5844c5cdcf742e2f993d81f5e6891472614655ad32f1ac28980807d7de33e1e700c0d0106cc9339f6da83c8837f06ed02ff00d1d639521f6a2204ea1b077f99f0b49c6ae23dcccfea75788cc33325583c270a4f0f19490434b3aa39d8ec877717c195fb3398ffa58fb0a99b33c146e76cb5419c10a2cce58e8b5338a5ee545c416331535bc56054a2a806e9f10f7c92a17f857e8abaa6c7a25f0c33336d04236d59899cf2caa5f590e6749425764ff1f968c5aa6e0372bbb7da7c0e0babd7744b5af48f3dad56f401d09c31d54b40e234e4b17ebb35f0b15ea90f317ab3e53a5088482ae4c04435784a50bd969fe46bd09f9ec48472befa4f23ef3ee8c134ad751e75ccf30dc93f9746af7b23a851b52f7e63141373c7cb3a8386885d061889f408e72531c3c3565041d3ad427ac7242c6dbea707b3a4d92637c9737f9b49ea1c81b5111a6d06e297403febfe83d47ab6c3339aa3150818ef449aa705b27e604c7d30f442fbdd75d1346ee877b4c2d0664667a8b82e92e70d3026ac7baa79a19df08e267224a8d30e8219af671bc3fc47c25e86c278724998c55e8bed81bb0f2b9e92adacad61961127bfb7d4564774c03f607fbb51c5bde968f1f8ae573059444cfc1019104959b630026a1a9f1a3ea24bde71b1db43814202716c21f5d2cb9791220139594a885a7292dd39a91f6c4905216d0599a268af690eb1cd1bd672888adfc75c23f730f9d308022c4def846a7a7bdba8225d8150433a8db259c90eec93fd56108e69ab6ffa0d75c7d6b9f20c2c70b3e80aa15d2bdaada85dd33a146d3c820f6168cd80b6cbcc0f9c973eba070aea8d24b7c9d6ce3062c2945f58c9ff03200081f5f7f1bcb753f91f96f99484b1c804235dbe670651a1dcdbb5c332dc73476e755b6899c180f8ba1b72978ca09ec2646fc4441305136c34a6d6a5c4a0d42d30c48f386ccf014211cf12e9f72625ed91b6e5a19649bb5188a46bdd5f36562aa418ab07556e82f425c9e53e9d1e95d91cc2e5f5c7d50978a8487eeb6b91d3af3a37123fe63948fc626bae88843b2d1fbccbe010ece766a5c64a3dcc7cc5d2a21427ab8f435f13fd24281d0dcfdb5e254ddadeefbf1b65e113ae03c23aef5ef9a9790f166f51fc851fd9033c0df3ae02b89c114fb8447f2b8839bd111a7a544765842c3029977c883438323f1ab3fc01068210630ca4a60aa4d0c144b3d87cd7ed9afde7512d7dbb967af61478486217338459c13275333fb10f3810fdad7bd709c7e6b41ea8e9fee44792d9efa09b1a5f221a348ec19af47845556ca41e55bfecc166b6eb5344ff5ab88b516c87d47ed045dc9827b159b857d43d832664572a308d946b72daa8a3d93d773c43a5ae0ee2c2bb920485952f7fc04386dc9dacbc4b316bb90449fea8dfc41c6b233de05a61b2b96bc8bb97d4e9f426ada412cddabc5a2d862214972e8a2c81a29cbc26525d75ed5968ac410c9b7b5876420cd76e3e5e142895ff1dd00ba2c8326476bdd0ab74bc905871c368b705abced3af15af4c01d6a99a3ad74c552149296a1fabb14cff2694df92962e55400eb4b7a593c35d3a79515cefbca836e2b055af2e4448700ff87f47a467fb6de033f5011c45b837b1fe05312c82b90797b92a2d1a2e2fbf047933dfe946824cc781b7472c229a8bb7efaaeb5a8d9a811f741f63bef8d2d4949b4d751bc61783aa1155407fa7e500c64dce44df1552c7eeddd217d82c6b4d8e3bfb71c48c857f8ef0ba08b6fd1c844e2b4553958e4f4af257c0377b60112c1f857ece17a6234fb679d11c076b112ee0fb263aca0db9940cde1dd3da006f91a20bc3cfdd662fc2e609e0e8f2d6ca6b087d42b7fba066d680b9f594d7e5e4312453ec0d9f67c6287a9e33d44815f807cda4a2c9a17e35c4559e3ff9f0ced26b2c12c38100e0ad9682fdc5ff4cc1cfe8f88e69e3f39fca56625dde9015cae19e2c1a286cc2d0c0563ab4eb350e17fdc18f1657c1442977c4611c41f8af2efe4458f1b649a0581ae2c4a8c3a4715193b3eb3492db4c718aba8ef6ac7b432d391c9c2afc4f8165226b525427e7e086d66dc28bec6ae2c75c8279be899da286db796a878043881ec652000fcb8f83af262324325a945bc370cd1268e05a93d14c4eae72aa06fe99f684a05f0bde9d2b4ce282c660d2130700ebdb07d668f0763b66fb8912d79472559dc18004822af430fd261d8e9e78813f6d4a124d869701c99d16aa81c84d1b10371a178683419431259cdd5835fc38478a34e5c171b4a287bab1397d6e61765839faf34242b7db8b3c98a234d8283f6ada18358a82159f2f35d641f71635003b35bee89fdb6774093fb254a0278a92dc732e7d2961f2dec3728e1f7ed994acd08d702fffe11e4e6af02af29be120fcad3c3bee12e35022ae92da701435717ac6dac933be420f068a6395ed77dc0c399c152ba803563c2906d65631d390d2ee353cc67ecfa5d36abe9d776fc8bcd631165e1b2a2ce5adb36e2aac681233eaee10385ed9a01c7d3e5d042e496e0484891b05f8bfb2bac7700fe17dc04b8c982a8aaafd20584610e58701b4c9cdf1ece74a446ba397dcae9641cf29119f532afe00ce6df42af483a38607b85c0e27468c66029eda4ef1e352b040ab1bab7fec2f87fdf415f1d8dcd5c168a5e764476c1b0a551818d71c53176d3d386c72123e580240d4091e8d68effa27b31909e2c69bd6bbffa47d77c14bb52d93ae523f8f40bb471162416187fae6812720e92047da71361bb029e0afe0b99702ee83acc1ce93203a01dd5fb5101ba711446407c53bc1392897c3c41ce0a4a68dce5a3aaccc8fd6da06ed116e29fa95fcbe0317ca4ab2a65908676ec4c1af079f2da97904e113db06eedeae374167496f3f435ea565989f3f0b44e339a65ae92f2a98ef69b6f46d6a20a79341adedc26d6a3b3e43f4ad046986be0adcfc5ee199451d5600a3494a4437231b8bd4c9760183b5fb269bcb13274e4ebec5cfe2248a5252fcb14d1106619ab8ec2d303543171bedbe76ed0b5305da7ee25", 0xec1}], 0x1}, 0x0) 03:27:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000180)="fd", 0x1, 0x1, 0x0, 0x0) 03:27:38 executing program 3: munmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 03:27:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00", 0x1c}, {&(0x7f0000000080)="a1a10b9a979fb85511eef05629c3691fd846", 0x12}], 0x2}, 0x0) [ 946.249700][T17354] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.250304][T17354] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.257093][T17354] device bridge0 entered promiscuous mode [ 946.275781][T17354] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 946.276014][T17354] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.276069][T17354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.276229][T17354] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.276277][T17354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.276850][T17354] device bridge0 left promiscuous mode [ 946.562829][ T3762] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 946.952875][ T3762] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.952910][ T3762] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 946.952939][ T3762] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 946.952977][ T3762] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 946.952999][ T3762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.955397][ T3762] usb 6-1: config 0 descriptor?? [ 947.010830][ T3762] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 947.353028][T16454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 03:27:41 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:41 executing program 0: pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$keyring(&(0x7f0000002680), &(0x7f00000026c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000001540), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0xffffffff) 03:27:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="0e1cc8120518ef8d56dc156b25beff6bee"]}]}, 0x34}}, 0x0) 03:27:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00", 0x1c}, {&(0x7f0000000080)="a1a10b9a979fb85511eef05629c3691fd846", 0x12}], 0x2}, 0x0) [ 949.170339][T16455] usb 6-1: USB disconnect, device number 71 03:27:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1=0xe0000306, @dev={0xac, 0x14, 0x14, 0xc}}, 0xc) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d00000009000e00", 0x1c}, {&(0x7f0000000080)="a1a10b9a979fb85511eef05629c3691fd846", 0x12}], 0x2}, 0x0) [ 949.183119][T17360] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:27:41 executing program 0: syz_usb_connect$uac1(0x0, 0xdb, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "3392b857"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x0, 0x7f, "45f70acb9081"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "a1"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "88eced"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "92e6"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x0, 0x0, 0x77, "6d9b80c71022476b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, "e7ea5b8bb0c7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0x0, 0x0, "ee6c6dadb48acae27a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x4, 0x0, {0x7}}}}}}}]}}, 0x0) [ 949.203687][T17362] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.203849][T17362] bridge0: port 1(bridge_slave_0) entered disabled state 03:27:41 executing program 2: syz_usb_connect$uac1(0x0, 0x89, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0x0, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x5}, [@processing_unit={0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}, @format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x5, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x35, 0x1000}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@string={0x4, 0x3, "26ff"}}]}) [ 949.204175][T17362] device bridge0 entered promiscuous mode [ 949.220090][T17362] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 949.220280][T17362] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.220349][T17362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.220566][T17362] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.220640][T17362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.221886][T17362] device bridge0 left promiscuous mode [ 949.268431][T17368] bridge0: port 2(bridge_slave_1) entered disabled state 03:27:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x4, 0x8}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="0e1cc8120518ef8d56dc156b25beff6bee"]}]}, 0x34}}, 0x0) [ 949.268682][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.269947][T17368] device bridge0 entered promiscuous mode [ 949.296450][T17368] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 949.296652][T17368] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.296713][T17368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.297094][T17368] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.297183][T17368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.297575][T17368] device bridge0 left promiscuous mode [ 949.347405][T17372] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 949.492832][ T3762] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 949.533319][ T6] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 949.586144][T16455] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 949.732739][ T3762] usb 5-1: Using ep0 maxpacket: 16 [ 949.772831][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 949.853033][ T3762] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 949.853056][ T3762] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 949.853071][ T3762] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.902707][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 949.902754][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 950.017920][T16455] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 950.017962][T16455] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 950.018001][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 950.018025][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.020354][T16455] usb 6-1: config 0 descriptor?? [ 950.056630][ T3762] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.056658][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.056678][ T3762] usb 5-1: Product: syz [ 950.056690][ T3762] usb 5-1: Manufacturer: syz [ 950.056703][ T3762] usb 5-1: SerialNumber: syz [ 950.059778][T16455] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 950.232925][ T1257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.313751][ T6] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 950.313774][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.313822][ T6] usb 7-1: SerialNumber: F [ 950.403406][ T3762] usb 5-1: 0:2 : does not exist [ 950.439692][ T3762] usb 5-1: USB disconnect, device number 22 [ 950.663315][ T6] usb 7-1: 0:2 : does not exist [ 950.688522][ T6] usb 7-1: USB disconnect, device number 31 [ 950.732244][T16595] udevd[16595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 03:27:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@private}]}, @typed={0x8, 0x9, 0x0, 0x0, @binary="c10a2ab0"}]}, 0x34}}, 0x0) 03:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, 0x39, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x89O'}, @typed={0x4, 0x1c}]}]}, 0x28}}, 0x0) 03:27:44 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup3(r0, r1, 0x0) listen(r2, 0x286) sendmsg$inet_sctp(r2, &(0x7f00000007c0)={&(0x7f0000000e00)=@in6={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@init={0x18}], 0x18}, 0x0) [ 952.217764][ T3734] usb 6-1: USB disconnect, device number 72 03:27:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, 0x39, 0x1, 0x0, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x88G'}]}, @typed={0xc, 0x7, 0x0, 0x0, @u64}]}, 0x30}}, 0x0) [ 952.230906][T17378] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:27:44 executing program 3: io_uring_setup(0x43dbd, &(0x7f0000000440)) [ 952.237358][T17379] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 952.267355][T17383] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 03:27:44 executing program 0: syz_usb_connect$uac1(0x0, 0x92, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xb, 0x24, 0x7, 0x0, 0x0, 0x0, "3392b857"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x0, 0x6, "fc38017202"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:27:44 executing program 3: syz_usb_connect$uac1(0x0, 0x79, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x0, 0x2, {0x7, 0x25, 0x1, 0x0, 0x0, 0x1000}}}}}}}]}}, 0x0) [ 952.582713][ T6] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 952.582834][T16134] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 952.673374][ T3734] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 952.822669][T16134] usb 8-1: Using ep0 maxpacket: 16 [ 952.853297][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 952.942896][T16134] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 952.942922][T16134] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 952.942957][T16134] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 952.993086][ T6] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 952.993120][ T6] usb 5-1: config 1 has no interface number 1 [ 952.993152][ T6] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 953.033003][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 953.033084][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 953.033129][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 953.033152][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.035411][ T3734] usb 6-1: config 0 descriptor?? [ 953.074202][ T3734] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 953.102960][T16134] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 953.102992][T16134] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.103011][T16134] usb 8-1: Product: syz [ 953.103024][T16134] usb 8-1: Manufacturer: syz [ 953.103050][T16134] usb 8-1: SerialNumber: syz [ 953.172981][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 953.173014][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.173031][ T6] usb 5-1: Product: syz [ 953.173043][ T6] usb 5-1: Manufacturer: syz [ 953.173056][ T6] usb 5-1: SerialNumber: syz [ 953.423137][T16134] usb 8-1: 0:2 : does not exist [ 953.438031][T16134] usb 8-1: USB disconnect, device number 16 [ 953.503303][ T6] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 953.544152][ T6] usb 5-1: USB disconnect, device number 23 [ 953.593305][T16549] udevd[16549]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory 03:27:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_TABLE={0x8}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) 03:27:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000039000100000000000000000004000000040000000c00018006000600884700000c0007000500ea"], 0x30}}, 0x0) 03:27:47 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:47 executing program 0: r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000d80)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000000010902240001010000000904000002ccb8280009050b02000000000009058a02"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) [ 955.279855][T16128] usb 6-1: USB disconnect, device number 73 03:27:47 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x1f, 0x2d, 0xe6, 0x40, 0xeb1, 0x7007, 0x205, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}}]}}]}}, 0x0) [ 955.294440][T17401] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:27:47 executing program 2: syz_usb_connect$uac1(0x0, 0xed, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x6, 0x20, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x5}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x1, 0x3, "3392b857"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6, 0x7, 0x6, "fc38017202254f9478"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x7, 0x3, 0x7f, "45f70acb9081"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x36, 0x1a, 0x43, {0x7, 0x25, 0x1, 0x2, 0x5a, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0x7, 0x3, "a1"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0x6, 0x3, "88eced"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x4a, 0x0, "92e6"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x54d6, 0x77, "6d9b80c71022476b"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xfa, 0x3, 0x5, 0x9, "e7ea5b8bb0c7"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x3, 0x37, 0x7, "ee6c6dadb48acae27a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x4, 0x2, {0x7, 0x25, 0x1, 0x80, 0x35, 0x1000}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xb9, 0x39, 0x3f, 0x10}, 0x38, &(0x7f0000000080)={0x5, 0xf, 0x38, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x9, 0x9, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x3, 0x81, 0x1, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x9, 0xf}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x0, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xf9, 0x40, 0x81}, @ptm_cap={0x3}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x814}}, {0x1e, &(0x7f0000000280)=@string={0x1e, 0x3, "512c7a1b0cbcd8e1084d968f71a75b9f00ba3758a378a642e2152194"}}, {0x8, &(0x7f00000002c0)=@string={0x8, 0x3, "47b84720c004"}}, {0x73, &(0x7f0000000300)=@string={0x73, 0x3, "26ff05a0ed6d73d377fabe8b5027f2fb305edac056c35f66e734c11e0b11dfb9dd34c2a43245d30f992176078e010bc3bd4a2b9e832c51e8c17f02da3d2fbcee56954bf1830da991e5b841ced23d47bf419bc2a38a0d998a5af22e5fb0b16c56f97edb6eb98a3d6354788d5d6ab9353b0c"}}]}) [ 955.563016][ T1257] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 955.584001][T13251] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 955.602915][ T6] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 955.712739][T16128] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 955.812918][ T1257] usb 5-1: Using ep0 maxpacket: 16 [ 955.842689][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 955.953289][ T1257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 955.953326][ T1257] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 955.953353][ T1257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 955.953443][ T1257] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 955.953496][ T1257] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 955.953522][ T1257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.976611][T13251] usb 8-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 955.976632][T13251] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.978249][T13251] usb 8-1: config 0 descriptor?? [ 955.994220][ T1257] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 956.015678][T13251] go7007: probe of 8-1:0.0 failed with error -12 [ 956.083474][ T6] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.083499][ T6] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 956.107548][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 956.107592][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 956.107618][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 956.107632][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.110724][T16128] usb 6-1: config 0 descriptor?? [ 956.146804][T16128] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 956.216837][T16452] usb 8-1: USB disconnect, device number 17 [ 956.253248][ T6] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.253278][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.253294][ T6] usb 7-1: Product: 롇â‡Ó€ [ 956.253306][ T6] usb 7-1: Manufacturer: ⱑ᭺밌䴈辖ê±é½›ë¨€å ·ç¢£äŠ¦á—¢é¡ [ 956.253321][ T6] usb 7-1: SerialNumber: Fꀅ淭í³ï©·è®¾âﯲ帰샚ì–晟㓧á»á„‹ë§Ÿã“꓂䔲࿓↙ݶƎ쌋䪽鸫ⲃç¿â¼½îº¼é•–ඃ醩룥ì¹ã·’뽇é­ê‚ඊ誙弮놰噬绹滛誹挽硔å¶ë¥ªã¬µ [ 956.467341][ T1257] ums-sddr09: probe of 5-1:1.0 failed with error -5 [ 956.605005][ T6] usb 7-1: 0:2 : does not exist [ 956.620595][ T6] usb 7-1: USB disconnect, device number 32 [ 956.624642][T16427] usb 5-1: USB disconnect, device number 24 [ 956.661834][T16595] udevd[16595]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, 0x39, 0x1, 0x0, 0x0, {0x3}, [@typed={0x4}, @nested={0x4, 0x1}, @nested={0x15, 0x9, 0x0, 0x1, [@generic="0e1cc8120518ef8d56dc156b25beff6bee"]}]}, 0x34}}, 0x0) [ 956.740244][T17414] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 03:27:48 executing program 3: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb}]}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x814}}, {0x0, 0x0}, {0x68, &(0x7f0000000300)=@string={0x68, 0x3, "26ff05a0ed6d73d377fabe8b5027f2fb305edac056c35f66e734c11e0b11dfb9dd34c2a43245d30f992176078e010bc3bd4a2b9e832c51e8c17f02da3d2fbcee56954bf1830da991e5b841ced23d47bf419bc2a38a0d998a5af22e5fb0b16c56f97edb6eb98a"}}]}) 03:27:49 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000980)={&(0x7f00000003c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)='u', 0x1}], 0x1}, 0x0) [ 957.054515][T16128] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 957.313006][T16128] usb 8-1: Using ep0 maxpacket: 16 [ 957.533092][T16128] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 957.533111][T16128] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 957.533124][T16128] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 957.923011][T16128] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.923042][T16128] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.923063][T16128] usb 8-1: Product: Fꀅ淭í³ï©·è®¾âﯲ帰샚ì–晟㓧á»á„‹ë§Ÿã“꓂䔲࿓↙ݶƎ쌋䪽鸫ⲃç¿â¼½îº¼é•–ඃ醩룥ì¹ã·’뽇é­ê‚ඊ誙弮놰噬绹滛誹 [ 957.923105][T16128] usb 8-1: SerialNumber: syz [ 958.242783][T16128] usb 8-1: 0:2 : does not exist [ 958.249453][T16128] usb 8-1: USB disconnect, device number 18 [ 958.270892][T16595] udevd[16595]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory 03:27:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03810000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000100)) 03:27:50 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) [ 958.319172][T16455] usb 6-1: USB disconnect, device number 74 03:27:50 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x3, &(0x7f0000001d80)=@framed={{}, [], {0x95, 0x2}}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:27:50 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}]}, 0x44}}, 0x0) 03:27:50 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x4c, &(0x7f0000000100), 0x4) 03:27:50 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:27:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) [ 958.752951][T16455] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 959.153080][T16455] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 959.153141][T16455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.153166][T16455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 959.153208][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 959.153231][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.155239][T16455] usb 6-1: config 0 descriptor?? [ 959.215575][T16455] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 961.342090][T16452] usb 6-1: USB disconnect, device number 75 03:27:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netpci0\x00'}]}, 0x44}}, 0x0) 03:27:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x19, 0x0, &(0x7f00000000c0)) 03:27:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03810000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000100)="9b7c6e1b92abf8413679e0a1101d4684a671b9a8b3f56a019cfeff096acac83be5bfaa55b0ba3d6b457d61d58c6dabff0ace1c4d36c8112a3836027354cc7df770df0a6ce749722f5c7f4b3d34b5496e642d53dc25ab554c59e8d43c52202524e6fa02079decd0e1cc51f27a73fab3a4c9f3e4ac840888e1318dce6fdbf69ad9c05f1dfc152d04eda41b8c33aea363947e143e4aab73544d4d875ad460f0e9bd7849a60638cfc45770693460dd0fa6e20ed5b2680146f63cf27c7c5662e90fd88ca8a6d412415df8fdf8106f8ebaa31a1429d7bf49494bf0acbf9bd5068894305e2109", 0xe3}, {&(0x7f0000000200)="36d484663fb1dff1989378a666103505da1593dce7797bf37cdc6dde3750ade1c3c5a00fa2827de278b53c96f1c7d71e3428e6bbf748d21e042cf286d4761f283c8a", 0x42}, {&(0x7f0000000280)="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", 0xd9c}], 0x3}}], 0x1, 0x0) 03:27:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x300}, 0x0) 03:27:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 03:27:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$ax25(r0, 0x0, 0x0) 03:27:53 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x7, 0x0, &(0x7f0000000100)) 03:27:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5421, &(0x7f0000000000)) [ 961.753080][T16452] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 962.133898][T16452] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 962.133943][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.133967][T16452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 962.134007][T16452] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 962.134031][T16452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.135791][T16452] usb 6-1: config 0 descriptor?? [ 962.175291][T16452] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 03:27:56 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="1e", 0x1}], 0x1, 0x0, 0x803e}}, {{&(0x7f00000009c0)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "dbe84cf59a405c34a3ef7f1f9b7e19cffbb9153ddaad537475977328a04411018e664cf4c67ce036589fa459f6b06fb445649fdf20c0412a3988e51495eb8f"}, 0x80, 0x0}}], 0x2, 0x40) 03:27:56 executing program 0: pipe(&(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 03:27:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd03810000092100000001220100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x7ffffffff000}}, 0x0) [ 964.363499][T13251] usb 6-1: USB disconnect, device number 76 03:27:56 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c000010"], &(0x7f0000000080)=""/161, 0x2a, 0xa1, 0x1}, 0x20) 03:27:56 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 03:27:56 executing program 3: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x8000) 03:27:56 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)="d28a71369841ad8cf3", 0x9}}, 0x4000050) 03:27:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) 03:27:56 executing program 3: shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x8000) [ 964.441061][T17473] ieee802154 phy0 wpan0: encryption failed: -22 [ 964.782778][T13251] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 965.162969][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 965.163001][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.163016][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 965.163042][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 965.163056][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.172352][T13251] usb 6-1: config 0 descriptor?? [ 965.217451][T13251] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 03:27:59 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)="d28a71369841ad8cf3", 0x9}}, 0x4000050) 03:27:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x16, 0x0, 0x0) 03:27:59 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:27:59 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000040)=@bloom_filter, 0x48) [ 967.405674][T13251] usb 6-1: USB disconnect, device number 77 [ 967.422203][T17485] ieee802154 phy0 wpan0: encryption failed: -22 03:27:59 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140), 0x8) 03:27:59 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5452, &(0x7f0000000000)) 03:27:59 executing program 2: bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f00000000c0)) 03:27:59 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 03:27:59 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x3, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0xf803}}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:27:59 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x3, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0xff00}}, &(0x7f0000001e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 967.482428][T17493] can: request_module (can-proto-0) failed. [ 967.821468][ C3] hpet: Lost 1 RTC interrupts [ 967.828555][T13251] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 968.222966][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 968.222995][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.223012][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 968.223043][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 968.223067][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 968.223082][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.225433][T13251] usb 6-1: config 0 descriptor?? [ 968.762913][T13251] usbhid 6-1:0.0: can't add hid device: -71 [ 968.763019][T13251] usbhid: probe of 6-1:0.0 failed with error -71 [ 968.768610][T13251] usb 6-1: USB disconnect, device number 78 03:28:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) 03:28:01 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x42, &(0x7f0000000100), 0x4) 03:28:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000100)={'IDLETIMER\x00'}, &(0x7f00000000c0)=0x1e) 03:28:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x6, 0x21, 0x0, 0x0) 03:28:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x28) 03:28:01 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x180000000) 03:28:01 executing program 3: r0 = socket(0x10, 0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 03:28:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x72, 0x0, &(0x7f0000000100)) [ 969.492727][T16454] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 969.882858][T16454] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 969.882902][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.882932][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.882956][T16454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 969.882997][T16454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 969.883022][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.884807][T16454] usb 6-1: config 0 descriptor?? [ 970.402921][T16454] usbhid 6-1:0.0: can't add hid device: -71 [ 970.403011][T16454] usbhid: probe of 6-1:0.0 failed with error -71 [ 970.407785][T16454] usb 6-1: USB disconnect, device number 79 03:28:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:02 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000ac0)=""/224, 0x2e, 0xe0, 0x1}, 0x20) 03:28:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x1a, 0x0, &(0x7f00000000c0)) 03:28:02 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, 0x7800}}) 03:28:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x3, 0x0, &(0x7f00000001c0)) 03:28:03 executing program 2: socketpair(0x2, 0x2, 0x101, &(0x7f0000000140)) 03:28:03 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x9, 0x0, &(0x7f0000000100)) 03:28:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x8, 0x0, &(0x7f00000000c0)) [ 971.132731][T13251] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 971.503129][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 971.503158][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.503175][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.503188][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 971.503214][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 971.503228][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.506325][T13251] usb 6-1: config 0 descriptor?? [ 971.551685][ C3] hpet: Lost 1 RTC interrupts [ 972.043314][T13251] usbhid 6-1:0.0: can't add hid device: -71 [ 972.043411][T13251] usbhid: probe of 6-1:0.0 failed with error -71 [ 972.052154][T13251] usb 6-1: USB disconnect, device number 80 03:28:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) 03:28:04 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x700}}) 03:28:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x12, 0x0, &(0x7f00000001c0)) 03:28:04 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}], 0x1, 0x0) 03:28:04 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x18, 0x0, 0x0) 03:28:04 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:04 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x700) [ 972.812720][T16134] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 973.193983][T16134] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 973.194014][T16134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.194038][T16134] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.194074][T16134] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 973.194104][T16134] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 973.194125][T16134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.199524][T16134] usb 6-1: config 0 descriptor?? [ 973.763136][T16134] usbhid 6-1:0.0: can't add hid device: -71 [ 973.763260][T16134] usbhid: probe of 6-1:0.0 failed with error -71 [ 973.773670][T16134] usb 6-1: USB disconnect, device number 81 03:28:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x19, 0x0, 0x0) 03:28:06 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:06 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x11, 0x0, &(0x7f00000000c0)) 03:28:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x30, 0x0, &(0x7f00000000c0)) 03:28:06 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x43, 0x0, 0x0) 03:28:06 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:06 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 03:28:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x49, 0x0, 0x0) [ 974.512919][ T3737] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 974.903184][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 974.903263][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.903312][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.903359][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 974.903438][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 974.903483][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.907026][ T3737] usb 6-1: config 0 descriptor?? [ 975.443270][ T3737] usbhid 6-1:0.0: can't add hid device: -71 [ 975.443441][ T3737] usbhid: probe of 6-1:0.0 failed with error -71 [ 975.446110][ T3737] usb 6-1: USB disconnect, device number 82 03:28:08 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:08 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x13, 0x0, &(0x7f00000000c0)) 03:28:08 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x9, &(0x7f00000000c0)=@raw=[@func, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @call, @btf_id, @map_idx, @alu], &(0x7f0000000000)='GPL\x00', 0x1, 0xe5, &(0x7f0000000140)=""/229, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:28:08 executing program 0: bpf$MAP_CREATE(0xe, &(0x7f0000000040)=@bloom_filter, 0x48) 03:28:08 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:08 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x2c}}, 0x0) 03:28:08 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x5460, 0x0) [ 975.993513][T17584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 976.021170][ C3] hpet: Lost 1 RTC interrupts [ 976.212792][T16427] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 976.624801][T16427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 976.624845][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.624885][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.624910][T16427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 976.624973][T16427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 976.625003][T16427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.629280][T16427] usb 6-1: config 0 descriptor?? [ 977.163137][T16427] usbhid 6-1:0.0: can't add hid device: -71 [ 977.163356][T16427] usbhid: probe of 6-1:0.0 failed with error -71 [ 977.166006][T16427] usb 6-1: USB disconnect, device number 83 03:28:09 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:09 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005"], 0x2c}}, 0x0) 03:28:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev}]}, 0x24}}, 0x0) 03:28:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:09 executing program 3: sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x13, &(0x7f0000000100), 0x4) [ 977.642884][T17597] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:28:09 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x1a, 0x0, &(0x7f00000001c0)) 03:28:09 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0xa, 0x6, 0x5}, 0x14}}, 0x0) 03:28:09 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) [ 977.922913][T16427] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 978.284759][T16427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 978.284839][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.284874][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.284899][T16427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 978.284967][T16427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 978.285007][T16427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.289199][T16427] usb 6-1: config 0 descriptor?? [ 978.833360][T16427] usbhid 6-1:0.0: can't add hid device: -71 [ 978.833475][T16427] usbhid: probe of 6-1:0.0 failed with error -71 [ 978.836766][T16427] usb 6-1: USB disconnect, device number 84 03:28:11 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:11 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x46, 0x0, 0x0) 03:28:11 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x10, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 03:28:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x6d, 0x0, &(0x7f0000000100)) 03:28:11 executing program 3: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:11 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 03:28:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x3, 0x0, &(0x7f0000000100)) [ 979.612937][ T3734] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 979.995220][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 979.995380][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.995418][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.995440][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 979.995504][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 979.995561][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.000826][ T3734] usb 6-1: config 0 descriptor?? [ 980.020983][ C3] hpet: Lost 1 RTC interrupts [ 980.083140][ C3] hpet: Lost 1 RTC interrupts [ 980.523943][ T3734] usbhid 6-1:0.0: can't add hid device: -71 [ 980.524085][ T3734] usbhid: probe of 6-1:0.0 failed with error -71 [ 980.526556][ T3734] usb 6-1: USB disconnect, device number 85 03:28:13 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 03:28:13 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x4c, 0x0, &(0x7f00000001c0)) 03:28:13 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x10, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 03:28:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8953, &(0x7f0000000000)) 03:28:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 03:28:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100990000b0639d85685a026f00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x700}, 0x0) pread64(r0, &(0x7f0000000240)=""/160, 0xa0, 0x7) 03:28:13 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}], 0x1, 0x0) [ 981.117451][T17644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 981.142094][T17644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.154818][T17644] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 981.284145][T16454] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 981.663228][T16454] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 981.663278][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.663369][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.663393][T16454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 981.663436][T16454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 981.663461][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.675442][T16454] usb 6-1: config 0 descriptor?? [ 982.218672][ C3] hpet: Lost 1 RTC interrupts [ 982.232755][T16454] usbhid 6-1:0.0: can't add hid device: -71 [ 982.232822][T16454] usbhid: probe of 6-1:0.0 failed with error -71 [ 982.234056][T16454] usb 6-1: USB disconnect, device number 86 03:28:14 executing program 2: set_robust_list(&(0x7f0000000340), 0x18) 03:28:14 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}], 0x1, 0x0) 03:28:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100990000b0639d85685a026f00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x700}, 0x0) pread64(r0, &(0x7f0000000240)=""/160, 0xa0, 0x7) 03:28:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{&(0x7f0000000040)=@llc, 0x80, 0x0}}], 0x1, 0x0) 03:28:14 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x50}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) [ 982.668616][T17649] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.671320][T17649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 982.671523][T17649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:28:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:28:14 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100990000b0639d85685a026f00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x700}, 0x0) pread64(r0, &(0x7f0000000240)=""/160, 0xa0, 0x7) 03:28:14 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 982.741874][T17661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.743773][T17661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 982.743860][T17661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 982.972935][ T1257] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 983.062900][T16128] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 983.213332][ T1257] usb 7-1: Using ep0 maxpacket: 8 [ 983.343220][ T1257] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 983.443971][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 983.444014][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.444043][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.444067][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 983.444108][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 983.444133][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.446648][T16128] usb 6-1: config 0 descriptor?? [ 983.537856][ T1257] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 983.537877][ T1257] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.537890][ T1257] usb 7-1: Product: syz [ 983.537898][ T1257] usb 7-1: Manufacturer: syz [ 983.537907][ T1257] usb 7-1: SerialNumber: syz [ 983.808082][ T1257] usb 7-1: USB disconnect, device number 33 [ 984.003268][T16128] usbhid 6-1:0.0: can't add hid device: -71 [ 984.003416][T16128] usbhid: probe of 6-1:0.0 failed with error -71 [ 984.004685][T16128] usb 6-1: USB disconnect, device number 87 03:28:16 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:16 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 03:28:16 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100990000b0639d85685a026f00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x700}, 0x0) pread64(r0, &(0x7f0000000240)=""/160, 0xa0, 0x7) 03:28:16 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x50}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:28:16 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 984.448840][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 984.450043][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 03:28:16 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 984.450635][T17668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 03:28:16 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000ad80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 03:28:16 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x3ff, 0x6, 0x4}) chdir(&(0x7f0000000040)='./file0\x00') ftruncate(r1, 0x1) lseek(r1, 0xffff, 0x0) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8400fffffffa) creat(&(0x7f0000000240)='./bus\x00', 0x0) [ 984.576585][ C3] hpet: Lost 2 RTC interrupts [ 984.621606][ T40] audit: type=1804 audit(1653794896.733:24): pid=17679 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1468/file0/bus" dev="ramfs" ino=92208 res=1 errno=0 [ 984.679485][ T40] audit: type=1804 audit(1653794896.793:25): pid=17680 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/syzkaller-testdir3069490491/syzkaller.5DDRbh/1468/file0/bus" dev="ramfs" ino=92208 res=1 errno=0 [ 984.732744][ T6] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 984.732814][T16452] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 984.982658][ T6] usb 7-1: Using ep0 maxpacket: 8 [ 985.093050][T16452] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 985.093104][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.093131][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.093188][T16452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 985.093230][T16452] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 985.093254][T16452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.095480][T16452] usb 6-1: config 0 descriptor?? [ 985.113017][ T6] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 985.312909][ T6] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 985.312931][ T6] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.312944][ T6] usb 7-1: Product: syz [ 985.312953][ T6] usb 7-1: Manufacturer: syz [ 985.312961][ T6] usb 7-1: SerialNumber: syz [ 985.632198][ T6] usb 7-1: USB disconnect, device number 34 [ 985.642722][T16452] usbhid 6-1:0.0: can't add hid device: -71 [ 985.642786][T16452] usbhid: probe of 6-1:0.0 failed with error -71 [ 985.650511][T16452] usb 6-1: USB disconnect, device number 88 03:28:18 executing program 3: syz_open_dev$rtc(&(0x7f00000002c0), 0x0, 0x44140) 03:28:18 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="050f1900030710"]}) 03:28:18 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:18 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x50}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:28:18 executing program 3: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x2, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) [ 986.372757][ T3762] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 986.382716][T16452] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 986.402815][ T3737] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 986.412678][T16454] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 986.632837][ T3762] usb 5-1: Using ep0 maxpacket: 8 [ 986.663807][T16454] usb 8-1: Using ep0 maxpacket: 8 [ 986.683839][ T3737] usb 7-1: Using ep0 maxpacket: 8 [ 986.762822][ T3762] usb 5-1: descriptor type invalid, skip [ 986.762835][ T3762] usb 5-1: descriptor type invalid, skip [ 986.783378][T16452] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 986.783439][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.783468][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.783491][T16452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 986.783531][T16452] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 986.783556][T16452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.786073][T16452] usb 6-1: config 0 descriptor?? [ 986.808558][T16454] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 986.828807][ T3737] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 986.842995][ T3762] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 986.983698][T16454] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 986.983728][T16454] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.983748][T16454] usb 8-1: Product: syz [ 986.983764][T16454] usb 8-1: Manufacturer: syz [ 986.983779][T16454] usb 8-1: SerialNumber: syz [ 987.002854][ T3762] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 987.002875][ T3762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.002887][ T3762] usb 5-1: Product: syz [ 987.002896][ T3762] usb 5-1: Manufacturer: syz [ 987.002904][ T3762] usb 5-1: SerialNumber: syz [ 987.005594][ T3737] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 987.005613][ T3737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.005632][ T3737] usb 7-1: Product: syz [ 987.005656][ T3737] usb 7-1: Manufacturer: syz [ 987.005665][ T3737] usb 7-1: SerialNumber: syz [ 987.231178][ T3734] usb 8-1: USB disconnect, device number 19 [ 987.249072][ T3762] usb 5-1: USB disconnect, device number 25 [ 987.320639][ T3737] usb 7-1: USB disconnect, device number 35 [ 987.343449][T16452] usbhid 6-1:0.0: can't add hid device: -71 [ 987.343518][T16452] usbhid: probe of 6-1:0.0 failed with error -71 [ 987.344551][T16452] usb 6-1: USB disconnect, device number 89 03:28:19 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x5) 03:28:19 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:19 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x3, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x0, 0x0}, {0x0, 0x0}]}) 03:28:19 executing program 2: r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x50}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 03:28:19 executing program 3: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) signalfd4(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='sys_enter\x00'}, 0x10) pidfd_open(r0, 0x0) 03:28:19 executing program 3: syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf9, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2d}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0x3, 0x5d}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x7}, 0x19, &(0x7f0000000180)=ANY=[], 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) [ 988.042800][ T3737] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 988.052830][ T3734] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 988.072888][ T3762] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 988.092914][T16128] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 988.303467][ T3734] usb 5-1: Using ep0 maxpacket: 8 [ 988.342733][ T3762] usb 7-1: Using ep0 maxpacket: 8 [ 988.412901][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 988.412940][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.412965][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.412986][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 988.413022][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 988.413044][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.415731][ T3737] usb 6-1: config 0 descriptor?? [ 988.423444][ T3734] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 988.423463][ T3734] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 988.472967][T16128] usb 8-1: config 1 interface 0 altsetting 249 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 988.472991][T16128] usb 8-1: config 1 interface 0 has no altsetting 0 [ 988.477942][ T3762] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 988.663030][ T3762] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 988.663066][ T3762] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.663088][ T3762] usb 7-1: Product: syz [ 988.663104][ T3762] usb 7-1: Manufacturer: syz [ 988.663120][ T3762] usb 7-1: SerialNumber: syz [ 988.712800][T16128] usb 8-1: string descriptor 0 read error: -22 [ 988.712866][T16128] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 988.712882][T16128] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.734284][T17705] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 988.887127][ T3737] appleir 0003:05AC:8243.0013: item fetching failed at offset 0/1 [ 988.887634][ T3737] appleir 0003:05AC:8243.0013: parse failed [ 988.887740][ T3737] appleir: probe of 0003:05AC:8243.0013 failed with error -22 [ 988.955056][ T3762] usb 7-1: USB disconnect, device number 36 [ 988.971938][ T6] usb 8-1: USB disconnect, device number 20 [ 989.003115][ T3734] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 989.003150][ T3734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.003170][ T3734] usb 5-1: SerialNumber: syz [ 989.085204][ T3737] usb 6-1: USB disconnect, device number 90 [ 989.245645][T16454] usb 5-1: USB disconnect, device number 26 03:28:21 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2d}}, [{}]}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "db8e"}}, {0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "b067"}}, {0x0, 0x0}]}) 03:28:21 executing program 3: syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x1, [{0x0, 0x0}]}) 03:28:21 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:21 executing program 0: get_robust_list(0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) [ 989.754346][ T3737] usb 7-1: new high-speed USB device number 37 using dummy_hcd 03:28:21 executing program 0: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, &(0x7f0000000180)=ANY=[@ANYBLOB="050f"]}) [ 989.792853][T13251] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 989.882956][T16454] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 990.022839][ T3737] usb 7-1: Using ep0 maxpacket: 8 [ 990.072888][ T3734] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 990.183012][ T3737] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 990.203179][T13251] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 990.203199][T13251] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 990.272833][T16454] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 990.272907][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.272946][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.272960][T16454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 990.272989][T16454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 990.273003][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.274822][T16454] usb 6-1: config 0 descriptor?? [ 990.328551][ T3734] usb 5-1: Using ep0 maxpacket: 8 [ 990.493581][ T3734] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 990.504520][T13251] usb 8-1: string descriptor 0 read error: -22 [ 990.504604][T13251] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 990.504620][T13251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.602879][ T3737] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 990.602903][ T3737] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.602916][ T3737] usb 7-1: Product: æž° [ 990.602925][ T3737] usb 7-1: Manufacturer: è»› [ 990.662857][ T3734] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 990.662888][ T3734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.662931][ T3734] usb 5-1: Product: syz [ 990.662946][ T3734] usb 5-1: Manufacturer: syz [ 990.662960][ T3734] usb 5-1: SerialNumber: syz [ 990.744454][T16454] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1 [ 990.744762][T16454] appleir 0003:05AC:8243.0014: parse failed [ 990.744792][T16454] appleir: probe of 0003:05AC:8243.0014 failed with error -22 [ 990.749968][ T3737] usb 8-1: USB disconnect, device number 21 [ 990.857995][ T3762] usb 7-1: USB disconnect, device number 37 [ 990.909953][ T6] usb 5-1: USB disconnect, device number 27 [ 990.945350][T16427] usb 6-1: USB disconnect, device number 91 03:28:23 executing program 3: socketpair(0x10, 0x0, 0x0, &(0x7f00000003c0)) 03:28:23 executing program 3: syz_clone(0xc8001000, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 03:28:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES16], 0x20}}, 0x0) 03:28:23 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2d}}, [{}]}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "db8e"}}, {0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "b067"}}, {0x0, 0x0}]}) 03:28:23 executing program 3: socketpair(0x2, 0x2, 0x0, &(0x7f00000003c0)) 03:28:23 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:23 executing program 3: syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x86801) 03:28:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 03:28:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x127f, 0x0) 03:28:23 executing program 0: syz_clone(0x20841200, 0x0, 0x0, 0x0, 0x0, 0x0) 03:28:23 executing program 3: keyctl$reject(0x13, 0x0, 0x0, 0x0, 0xfffffffffffffffb) [ 991.692889][T16427] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 991.752684][ T3734] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 991.952758][T16427] usb 7-1: Using ep0 maxpacket: 8 [ 992.072957][T16427] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 992.163370][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 992.163399][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.163415][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.163429][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 992.163452][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 992.163467][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.167933][ T3734] usb 6-1: config 0 descriptor?? [ 992.493048][T16427] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 992.493091][T16427] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.493110][T16427] usb 7-1: Product: æž° [ 992.493122][T16427] usb 7-1: Manufacturer: è»› [ 992.644308][ T3734] appleir 0003:05AC:8243.0015: item fetching failed at offset 0/1 [ 992.644622][ T3734] appleir 0003:05AC:8243.0015: parse failed [ 992.644681][ T3734] appleir: probe of 0003:05AC:8243.0015 failed with error -22 [ 992.741938][ T3734] usb 7-1: USB disconnect, device number 38 [ 992.846274][T16427] usb 6-1: USB disconnect, device number 92 03:28:25 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002080)={'sit0\x00', &(0x7f0000002000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 03:28:25 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2d}}, [{}]}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "db8e"}}, {0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "b067"}}, {0x0, 0x0}]}) 03:28:25 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x5, {0x5, 0x0, "c11209"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0xc0a012ea, 0x0) 03:28:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg2\x00'}) 03:28:25 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x800812e5, 0x0) 03:28:25 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x5451, 0x0) 03:28:25 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x0, 0x0, 0xffffffff}, 0x48) 03:28:25 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@jmp]}, &(0x7f00000000c0)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 993.552964][ T3089] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 993.590858][ C3] hpet: Lost 1 RTC interrupts [ 993.672789][T16427] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 993.832884][ T3089] usb 7-1: Using ep0 maxpacket: 8 [ 993.982830][ T3089] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 994.063736][T16427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 994.063777][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.063794][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.063808][T16427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 994.063846][T16427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 994.063860][T16427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.065713][T16427] usb 6-1: config 0 descriptor?? [ 994.382956][ T3089] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 994.382976][ T3089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.382989][ T3089] usb 7-1: Product: æž° [ 994.382997][ T3089] usb 7-1: Manufacturer: è»› [ 994.555962][T16427] appleir 0003:05AC:8243.0016: item fetching failed at offset 0/1 [ 994.556318][T16427] appleir 0003:05AC:8243.0016: parse failed [ 994.556358][T16427] appleir: probe of 0003:05AC:8243.0016 failed with error -22 [ 994.641177][ T30] usb 7-1: USB disconnect, device number 39 [ 994.755124][ T3089] usb 6-1: USB disconnect, device number 93 03:28:27 executing program 2: syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2d}}, [{}]}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x19, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4}}, {0x4, &(0x7f0000000200)=@string={0x4, 0x3, "db8e"}}, {0x4, &(0x7f00000002c0)=@string={0x4, 0x3, "b067"}}, {0x0, 0x0}]}) 03:28:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x5, {0x5, 0x0, "c11209"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:27 executing program 0: syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_cache\x00') 03:28:27 executing program 3: openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) 03:28:27 executing program 3: r0 = openat$vsock(0xffffff9c, &(0x7f0000000c40), 0x0, 0x0) io_uring_setup(0x212e, &(0x7f00000000c0)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 03:28:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) 03:28:27 executing program 3: mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000080)=[@release], 0x0, 0x0, &(0x7f00000000c0)}) r0 = openat$null(0xffffff9c, &(0x7f0000000200), 0x2000, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000500), r0) 03:28:27 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0xc01812f4, 0x0) [ 995.453532][T13251] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 995.572936][ T3089] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 995.712736][T13251] usb 7-1: Using ep0 maxpacket: 8 [ 995.828764][T13251] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 995.953596][ T3089] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 995.953717][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.953746][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.953770][ T3089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 995.953812][ T3089] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 995.953836][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.959105][ T3089] usb 6-1: config 0 descriptor?? [ 996.222950][T13251] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 996.222979][T13251] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.222996][T13251] usb 7-1: Product: æž° [ 996.223010][T13251] usb 7-1: Manufacturer: è»› [ 996.414952][ T3089] appleir 0003:05AC:8243.0017: item fetching failed at offset 0/1 [ 996.415207][ T3089] appleir 0003:05AC:8243.0017: parse failed [ 996.415249][ T3089] appleir: probe of 0003:05AC:8243.0017 failed with error -22 [ 996.487330][ T3734] usb 7-1: USB disconnect, device number 40 [ 996.614999][ T3089] usb 6-1: USB disconnect, device number 94 03:28:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)) 03:28:29 executing program 0: openat$hwrng(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) 03:28:29 executing program 3: socketpair(0x0, 0xb, 0x0, &(0x7f0000000780)) 03:28:29 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x5, {0x5, 0x0, "c11209"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:29 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f00000001c0)=0x1, 0x4) 03:28:29 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$sock(r0, &(0x7f00000006c0)={&(0x7f00000001c0)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000680)=[@txtime={{0x18, 0x1, 0x2}}], 0x18}, 0x0) 03:28:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x3, 0x4) 03:28:29 executing program 0: syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x145000) 03:28:29 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) 03:28:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x19, &(0x7f0000000100), 0x4) [ 997.432736][T16455] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 997.832862][T16455] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 997.832909][T16455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.832926][T16455] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.832940][T16455] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 997.832965][T16455] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 997.832980][T16455] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.834540][T16455] usb 6-1: config 0 descriptor?? [ 998.334458][T16455] appleir 0003:05AC:8243.0018: item fetching failed at offset 0/1 [ 998.334851][T16455] appleir 0003:05AC:8243.0018: parse failed [ 998.334896][T16455] appleir: probe of 0003:05AC:8243.0018 failed with error -22 [ 998.537079][ T3089] usb 6-1: USB disconnect, device number 95 03:28:31 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x7, {0x7, 0x0, "c112090707"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:31 executing program 0: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', 0x0}) getitimer(0x0, &(0x7f0000000380)) 03:28:31 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 03:28:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:31 executing program 0: unshare(0x400) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5393, 0x0) 03:28:31 executing program 2: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=0xffffffffffffffff}, 0x0) 03:28:31 executing program 2: socketpair(0x18, 0x0, 0x2, &(0x7f00000000c0)) 03:28:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 999.262970][ C3] hpet: Lost 1 RTC interrupts [ 999.382732][T16454] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 999.439521][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.439622][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.783012][T16454] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 999.783075][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.783103][T16454] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.783127][T16454] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 999.783241][T16454] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 999.783267][T16454] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.786646][T16454] usb 6-1: config 0 descriptor?? [ 1000.256957][T16454] appleir 0003:05AC:8243.0019: item fetching failed at offset 0/1 [ 1000.257389][T16454] appleir 0003:05AC:8243.0019: parse failed [ 1000.257419][T16454] appleir: probe of 0003:05AC:8243.0019 failed with error -22 [ 1000.458144][ T3734] usb 6-1: USB disconnect, device number 96 03:28:33 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x7, {0x7, 0x0, "c112090707"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:33 executing program 2: nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) 03:28:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 03:28:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:33 executing program 0: set_mempolicy(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000080)={[{@hide}]}) 03:28:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x17, &(0x7f0000000000)={0x0, 0x1}, 0x4) 03:28:33 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x17, 0x0, &(0x7f0000000080)) 03:28:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x5, 0x0, 0x0) [ 1001.323151][T13251] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1001.733193][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1001.733224][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.733241][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.733255][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1001.733296][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1001.733311][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.735337][T13251] usb 6-1: config 0 descriptor?? [ 1002.224657][T13251] appleir 0003:05AC:8243.001A: item fetching failed at offset 0/1 [ 1002.224956][T13251] appleir 0003:05AC:8243.001A: parse failed [ 1002.225004][T13251] appleir: probe of 0003:05AC:8243.001A failed with error -22 [ 1002.428459][T16128] usb 6-1: USB disconnect, device number 97 03:28:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x18, &(0x7f00000004c0)={0x0, 0x0, 0x7, {0x7, 0x0, "c112090707"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:35 executing program 2: shmget(0x3, 0x2000, 0x3d95e23a49bdeb0b, &(0x7f0000ffb000/0x2000)=nil) 03:28:35 executing program 0: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x6) 03:28:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:35 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getdents(r0, 0x0, 0x0) 03:28:35 executing program 0: setrlimit(0x0, &(0x7f0000000200)) 03:28:35 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0xbed40edcfe3ada5d, 0x0) 03:28:35 executing program 0: setrlimit(0x0, &(0x7f0000000200)) [ 1003.242976][ T3737] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1003.635769][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1003.635907][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.635932][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.635956][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1003.635999][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1003.636021][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.638431][ T3737] usb 6-1: config 0 descriptor?? [ 1004.104635][ T3737] appleir 0003:05AC:8243.001B: item fetching failed at offset 0/1 [ 1004.104901][ T3737] appleir 0003:05AC:8243.001B: parse failed [ 1004.104927][ T3737] appleir: probe of 0003:05AC:8243.001B failed with error -22 [ 1004.304154][T16427] usb 6-1: USB disconnect, device number 98 03:28:36 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:36 executing program 0: setrlimit(0x0, &(0x7f0000000200)) 03:28:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000001400), 0x4) 03:28:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:36 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 03:28:36 executing program 0: setrlimit(0x0, &(0x7f0000000200)) 03:28:36 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)=@in={0x2, 0x3}, 0xc) 03:28:37 executing program 0: openat$zero(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) [ 1005.113397][ T3737] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1005.493689][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1005.493759][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.493873][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.493889][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1005.493918][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1005.493932][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.495574][ T3737] usb 6-1: config 0 descriptor?? [ 1005.965958][ T3737] appleir 0003:05AC:8243.001C: No inputs registered, leaving [ 1005.974896][ T3737] appleir 0003:05AC:8243.001C: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1006.168146][ T3734] usb 6-1: USB disconnect, device number 99 03:28:38 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:38 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x2) 03:28:38 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000)={0x0, 0x8f59}, 0x8) 03:28:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:38 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x10202, 0x0) 03:28:38 executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000600), 0x10) 03:28:38 executing program 0: recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x10001, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)) 03:28:38 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) [ 1006.972670][ T3734] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1007.332969][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1007.333001][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.333017][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.333066][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1007.333096][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1007.333110][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.340202][ T3734] usb 6-1: config 0 descriptor?? [ 1007.805451][ T3734] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 1007.807713][ T3734] appleir 0003:05AC:8243.001D: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1008.010780][T13251] usb 6-1: USB disconnect, device number 100 03:28:40 executing program 0: syz_mount_image$adfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1, 0x1745}], 0x0, &(0x7f0000000640)) 03:28:40 executing program 2: openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) 03:28:40 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:40 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$omfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x10001, 0x0, &(0x7f0000000f00), 0x0, &(0x7f0000000f80)={[], [{@euid_lt={'euid<', 0xee01}}]}) 03:28:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:40 executing program 0: syz_mount_image$omfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0x4, &(0x7f00000002c0)) [ 1008.562162][T17913] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:28:40 executing program 0: syz_mount_image$adfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000640)) 03:28:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:40 executing program 0: syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) sched_getattr(0x0, &(0x7f0000000580)={0x38}, 0x38, 0x0) [ 1008.615141][T17919] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1008.830833][T16452] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1009.193131][T16452] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1009.193190][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.193214][T16452] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.193235][T16452] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1009.193273][T16452] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1009.193311][T16452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.195128][T16452] usb 6-1: config 0 descriptor?? [ 1009.676434][T16452] appleir 0003:05AC:8243.001E: No inputs registered, leaving [ 1009.683396][T16452] appleir 0003:05AC:8243.001E: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1009.881557][ T3737] usb 6-1: USB disconnect, device number 101 03:28:42 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:42 executing program 0: syz_mount_image$omfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$adfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000100)="d8", 0x1, 0xfffffffffffffc01}], 0x4, &(0x7f00000002c0)) 03:28:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:42 executing program 0: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a001269, 0x2759, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000727, 0x1000000}]) [ 1010.395431][T17928] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:28:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1010.428439][T17936] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:28:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1010.682828][T16427] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1011.072922][T16427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1011.072963][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.072980][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.072994][T16427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1011.073020][T16427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1011.073046][T16427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.074915][T16427] usb 6-1: config 0 descriptor?? [ 1011.555386][T16427] appleir 0003:05AC:8243.001F: No inputs registered, leaving [ 1011.559810][T16427] appleir 0003:05AC:8243.001F: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1011.824915][ T3089] usb 6-1: USB disconnect, device number 102 03:28:44 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:44 executing program 0: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a001269, 0x2759, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000727, 0x1000000}]) 03:28:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:44 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1012.642708][ T3734] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1013.002891][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1013.002920][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1013.002937][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1013.002951][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1013.002980][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1013.002994][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.004368][ T3734] usb 6-1: config 0 descriptor?? [ 1013.485569][ T3734] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 1013.488293][ T3734] appleir 0003:05AC:8243.0020: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1013.755313][ T6] usb 6-1: USB disconnect, device number 103 03:28:46 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:46 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:46 executing program 0: set_mempolicy(0x4005, &(0x7f0000000080)=0x5, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a001269, 0x2759, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000727, 0x1000000}]) 03:28:46 executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1014.563705][ T3089] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1014.923189][ T3089] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1014.923230][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.923257][ T3089] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.923296][ T3089] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1014.923349][ T3089] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1014.923373][ T3089] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.924876][ T3089] usb 6-1: config 0 descriptor?? [ 1015.407540][ T3089] appleir 0003:05AC:8243.0021: No inputs registered, leaving [ 1015.410736][ T3089] appleir 0003:05AC:8243.0021: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1015.685414][ T6] usb 6-1: USB disconnect, device number 104 03:28:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:48 executing program 0: syz_mount_image$adfs(&(0x7f0000000180), 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1, 0x1745}], 0x0, &(0x7f0000000640)) 03:28:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:28:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:48 executing program 0: syz_mount_image$adfs(&(0x7f0000000180), 0x0, 0x0, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1, 0x1745}], 0x0, &(0x7f0000000640)) 03:28:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:48 executing program 0: syz_mount_image$omfs(&(0x7f0000000cc0), &(0x7f0000000d00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)) 03:28:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:28:48 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) 03:28:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040), 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1016.513683][ T3734] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1016.872979][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1016.873044][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.873071][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.873093][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1016.873129][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1016.873143][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.875071][ T3734] usb 6-1: config 0 descriptor?? [ 1017.357103][ T3734] appleir 0003:05AC:8243.0022: No inputs registered, leaving [ 1017.359774][ T3734] appleir 0003:05AC:8243.0022: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1017.636562][ T3089] usb 6-1: USB disconnect, device number 105 03:28:50 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:50 executing program 0: prctl$PR_SET_MM_MAP(0x36, 0xe, 0x0, 0x0) 03:28:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:28:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:50 executing program 0: r0 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r0) 03:28:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:50 executing program 0: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x9, 0x24, 0x6, 0x0, 0x0, 0x1, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x80, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:28:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) [ 1018.442789][T16427] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1018.482716][T16128] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1018.732886][T16128] usb 5-1: Using ep0 maxpacket: 16 [ 1018.812836][T16427] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1018.812864][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.812881][T16427] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.812894][T16427] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1018.812919][T16427] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1018.812933][T16427] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.825091][T16427] usb 6-1: config 0 descriptor?? [ 1018.863011][T16128] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1018.863036][T16128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.863054][T16128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1019.042898][T16128] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1019.042928][T16128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.042948][T16128] usb 5-1: Product: syz [ 1019.042962][T16128] usb 5-1: Manufacturer: syz [ 1019.042975][T16128] usb 5-1: SerialNumber: syz [ 1019.304935][T16427] appleir 0003:05AC:8243.0023: No inputs registered, leaving [ 1019.308812][T16427] appleir 0003:05AC:8243.0023: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1019.373090][T16128] usb 5-1: 0:2 : does not exist [ 1019.378810][T16128] usb 5-1: USB disconnect, device number 28 [ 1019.408261][T16595] udevd[16595]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1019.573629][ T3734] usb 6-1: USB disconnect, device number 106 03:28:52 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000040)={0x3, 0xfc47492f5ff76a80}) 03:28:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 03:28:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:52 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040)="0f", 0x1}, 0x68) 03:28:52 executing program 0: prctl$PR_SET_MM_MAP(0x3a, 0xe, 0x0, 0x0) 03:28:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 03:28:52 executing program 0: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) pipe(&(0x7f0000000d80)) 03:28:52 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) [ 1020.382726][ T6] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1020.742874][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1020.742901][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.742917][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.742930][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1020.742955][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1020.743007][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.744775][ T6] usb 6-1: config 0 descriptor?? [ 1021.224293][ T6] appleir 0003:05AC:8243.0024: No inputs registered, leaving [ 1021.228033][ T6] appleir 0003:05AC:8243.0024: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1021.495346][T13251] usb 6-1: USB disconnect, device number 107 03:28:54 executing program 0: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 03:28:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:54 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 03:28:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 03:28:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:28:54 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 1022.292733][ T6] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1022.312782][T16128] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1022.542702][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 1022.663031][ T6] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1022.663058][ T6] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1022.663076][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.733321][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1022.733361][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.733396][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.733416][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1022.733456][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1022.733479][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.735041][T16128] usb 6-1: config 0 descriptor?? [ 1022.853010][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1022.853034][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.853049][ T6] usb 5-1: Product: syz [ 1022.853058][ T6] usb 5-1: Manufacturer: syz [ 1022.853067][ T6] usb 5-1: SerialNumber: syz [ 1023.203018][ T6] usb 5-1: 0:2 : does not exist [ 1023.206164][T16128] appleir 0003:05AC:8243.0025: No inputs registered, leaving [ 1023.216016][T16128] appleir 0003:05AC:8243.0025: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1023.217902][ T6] usb 5-1: USB disconnect, device number 29 [ 1023.474678][T16128] usb 6-1: USB disconnect, device number 108 03:28:55 executing program 0: prctl$PR_SET_MM_MAP(0x2b, 0xe, 0x0, 0x0) 03:28:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e9b2f2", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 03:28:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 03:28:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:56 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 03:28:56 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 03:28:56 executing program 0: sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x0) 03:28:56 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)='V1', 0x2, 0xea}], 0x1080860, &(0x7f00000001c0)={[], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@appraise}]}) 03:28:56 executing program 0: openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) [ 1024.083136][T18075] ISOFS: Unable to identify CD-ROM format. 03:28:56 executing program 0: openat$full(0xffffff9c, &(0x7f0000001000), 0x0, 0x0) openat$vhost_vsock(0xffffff9c, &(0x7f0000001440), 0x2, 0x0) [ 1024.313557][ T3737] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1024.703693][ T3737] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1024.703764][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.703790][ T3737] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.703814][ T3737] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1024.703852][ T3737] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1024.703875][ T3737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.707764][ T3737] usb 6-1: config 0 descriptor?? [ 1024.735243][ C3] hpet: Lost 1 RTC interrupts [ 1025.194743][ T3737] appleir 0003:05AC:8243.0026: No inputs registered, leaving [ 1025.200165][ T3737] appleir 0003:05AC:8243.0026: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1025.467229][ T3734] usb 6-1: USB disconnect, device number 109 03:28:58 executing program 2: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002580)=0xffffffffffffffff, 0x4) 03:28:58 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 03:28:58 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) 03:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:58 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f000000db40)=[{{&(0x7f0000000080)={0x2, 0x4e20, @dev}, 0x10, 0x0}}], 0x1, 0x20048000) sendto(r0, 0x0, 0x0, 0x4000010, 0x0, 0x0) 03:28:58 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1026.060967][T18104] loop2: detected capacity change from 0 to 264192 [ 1026.070782][T18104] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1026.070821][T18104] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1026.088401][T18104] F2FS-fs (loop2): invalid crc_offset: 0 [ 1026.129685][T18104] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:28:58 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1026.191538][T18104] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1026.191623][T18104] F2FS-fs (loop2): Mounted with checkpoint version = 15213551 [ 1026.283661][ T3734] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1026.380506][T18117] loop2: detected capacity change from 0 to 264192 [ 1026.407146][T18117] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1026.407213][T18117] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1026.410830][T18117] F2FS-fs (loop2): invalid crc_offset: 0 [ 1026.427826][T18117] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1026.484522][T18117] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1026.484543][T18117] F2FS-fs (loop2): Mounted with checkpoint version = 15213551 [ 1026.703081][ T3734] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1026.703127][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.703197][ T3734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.703221][ T3734] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1026.703272][ T3734] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1026.703297][ T3734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.706147][ T3734] usb 6-1: config 0 descriptor?? [ 1027.185544][ T3734] appleir 0003:05AC:8243.0027: No inputs registered, leaving [ 1027.187774][ T3734] appleir 0003:05AC:8243.0027: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1027.456364][ T6] usb 6-1: USB disconnect, device number 110 03:29:00 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x0, 0xfc47492f5ff76a80}) 03:29:00 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:00 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) [ 1027.985091][T18129] loop2: detected capacity change from 0 to 264192 [ 1027.988485][T18129] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1027.988512][T18129] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1027.991674][T18129] F2FS-fs (loop2): invalid crc_offset: 0 [ 1028.017624][T18129] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1028.072257][T18129] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1028.072302][T18129] F2FS-fs (loop2): Mounted with checkpoint version = 15213551 03:29:00 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1028.205389][T18145] loop2: detected capacity change from 0 to 264192 [ 1028.206923][T18145] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1028.206948][T18145] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1028.208731][T18145] F2FS-fs (loop2): invalid crc_offset: 0 [ 1028.236929][T18145] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1028.292912][T16453] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1028.298069][T18145] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1028.298092][T18145] F2FS-fs (loop2): Mounted with checkpoint version = 15213551 03:29:00 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1028.453310][T18157] loop2: detected capacity change from 0 to 264192 03:29:00 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1028.652850][T16453] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1028.652882][T16453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.652898][T16453] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.652912][T16453] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1028.652938][T16453] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1028.652952][T16453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.654563][T16453] usb 6-1: config 0 descriptor?? [ 1029.135347][T16453] appleir 0003:05AC:8243.0028: No inputs registered, leaving [ 1029.139224][T16453] appleir 0003:05AC:8243.0028: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1029.408830][ T3089] usb 6-1: USB disconnect, device number 111 03:29:02 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x0, 0xfc47492f5ff76a80}) 03:29:02 executing program 2: syz_mount_image$f2fs(0x0, &(0x7f0000000100)='./file0\x00', 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) [ 1029.952213][ C3] hpet: Lost 1 RTC interrupts 03:29:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1029.963144][T18167] loop2: detected capacity change from 0 to 264192 [ 1030.026032][T16549] I/O error, dev loop2, sector 264064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 03:29:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1030.049441][T18173] loop2: detected capacity change from 0 to 264192 [ 1030.079137][T18176] loop2: detected capacity change from 0 to 264192 03:29:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), 0x0, 0x513521152c1b39b8, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1030.121981][T18180] loop2: detected capacity change from 0 to 264192 03:29:02 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1030.203787][T18183] loop2: detected capacity change from 0 to 65567 [ 1030.206178][T18183] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1030.206205][T18183] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1030.210322][T18183] F2FS-fs (loop2): invalid crc_offset: 0 [ 1030.258238][ T6] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1030.259120][T18183] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1030.328148][T18183] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1030.328179][T18183] F2FS-fs (loop2): Mounted with checkpoint version = 15213551 [ 1030.662849][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1030.662878][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.662895][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.662909][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1030.662934][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1030.662948][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.669703][ T6] usb 6-1: config 0 descriptor?? [ 1031.175547][ T6] appleir 0003:05AC:8243.0029: No inputs registered, leaving [ 1031.178233][ T6] appleir 0003:05AC:8243.0029: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1031.444084][T13251] usb 6-1: USB disconnect, device number 112 03:29:04 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014500)) 03:29:04 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x0, 0xfc47492f5ff76a80}) 03:29:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:29:04 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) 03:29:04 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014500)) 03:29:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:29:04 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000014500)) 03:29:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:29:04 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}], 0x0, &(0x7f0000014500)) [ 1032.077842][T18207] loop2: detected capacity change from 0 to 65552 [ 1032.080911][T18207] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1032.080940][T18207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1032.087111][T18207] F2FS-fs (loop2): invalid crc_offset: 0 [ 1032.098230][T18207] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1032.133344][T18207] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1032.133695][T18207] F2FS-fs (loop2): Failed to read root inode [ 1032.252767][T13251] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1032.617079][T13251] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1032.617131][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1032.617160][T13251] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.617183][T13251] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1032.617224][T13251] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1032.617250][T13251] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.619802][T13251] usb 6-1: config 0 descriptor?? [ 1033.075631][T13251] appleir 0003:05AC:8243.002A: No inputs registered, leaving [ 1033.083311][T13251] appleir 0003:05AC:8243.002A: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1033.348861][T13251] usb 6-1: USB disconnect, device number 113 03:29:05 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:29:05 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3}) 03:29:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) 03:29:05 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}], 0x0, &(0x7f0000014500)) [ 1033.879257][T18215] loop2: detected capacity change from 0 to 65552 [ 1033.883019][T18215] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1033.883047][T18215] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1033.886813][T18215] F2FS-fs (loop2): invalid crc_offset: 0 03:29:06 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1033.899760][T18215] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1033.936616][T18215] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 03:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1033.936785][T18215] F2FS-fs (loop2): Failed to read root inode [ 1033.955855][ C3] hpet: Lost 1 RTC interrupts 03:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1034.192913][T16128] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1034.573849][T16128] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1034.573897][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.573925][T16128] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.573949][T16128] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1034.573991][T16128] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1034.574016][T16128] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.576838][T16128] usb 6-1: config 0 descriptor?? [ 1035.074538][T16128] appleir 0003:05AC:8243.002B: No inputs registered, leaving [ 1035.078279][T16128] appleir 0003:05AC:8243.002B: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1035.345164][T16454] usb 6-1: USB disconnect, device number 114 03:29:07 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3}) 03:29:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:29:07 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}], 0x0, &(0x7f0000014500)) 03:29:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) [ 1035.867973][T18240] loop2: detected capacity change from 0 to 65552 03:29:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1035.869956][T18240] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1035.869991][T18240] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 1035.874662][T18240] F2FS-fs (loop2): invalid crc_offset: 0 [ 1035.879729][T18240] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1035.921056][T18240] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1035.921200][T18240] F2FS-fs (loop2): Failed to read root inode 03:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x0) read(r2, &(0x7f0000000280)=""/203, 0x1001) writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000240)="17", 0x1}], 0x1) dup2(r0, r1) [ 1036.172853][ T6] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1036.533849][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1036.533915][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.533943][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.533965][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1036.534005][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1036.534027][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.536443][ T6] usb 6-1: config 0 descriptor?? [ 1037.015120][ T6] appleir 0003:05AC:8243.002C: No inputs registered, leaving [ 1037.017764][ T6] appleir 0003:05AC:8243.002C: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1037.284555][T16453] usb 6-1: USB disconnect, device number 115 03:29:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0381000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x8, {0x8, 0x0, "c11209070793"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000cc0), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x3}) 03:29:09 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {0x0, 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:09 executing program 0: open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(0x0, 0x0, &(0x7f0000000f00)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 03:29:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1037.812011][T18267] loop2: detected capacity change from 0 to 65567 [ 1037.820724][T18267] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1037.820742][T18267] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1037.822400][T18267] F2FS-fs (loop2): invalid crc_offset: 0 [ 1037.843457][T18267] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1037.886324][T18267] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1037.886467][T18267] F2FS-fs (loop2): Failed to read root inode 03:29:10 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {0x0, 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1038.038203][T18280] loop2: detected capacity change from 0 to 65567 [ 1038.041545][T18280] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1038.041578][T18280] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1038.049118][T18280] F2FS-fs (loop2): invalid crc_offset: 0 [ 1038.060411][T18280] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1038.092740][ T6] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1038.112859][T18280] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1038.113242][T18280] F2FS-fs (loop2): Failed to read root inode [ 1038.171076][ C3] hpet: Lost 1 RTC interrupts 03:29:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:10 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {0x0, 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1038.249971][T18289] loop2: detected capacity change from 0 to 65567 [ 1038.254399][T18289] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1038.254420][T18289] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1038.256394][T18289] F2FS-fs (loop2): invalid crc_offset: 0 [ 1038.261925][T18289] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1038.320024][T18289] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1038.320206][T18289] F2FS-fs (loop2): Failed to read root inode 03:29:10 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00), 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1038.444460][T18295] loop2: detected capacity change from 0 to 65567 [ 1038.445892][T18295] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1038.445909][T18295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1038.448342][T18295] F2FS-fs (loop2): invalid crc_offset: 0 [ 1038.455527][T18295] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1038.492925][ T6] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1038.492968][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.492997][ T6] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.493037][ T6] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1038.493454][ T6] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 1038.493481][ T6] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.494852][T18295] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1038.495005][T18295] F2FS-fs (loop2): Failed to read root inode [ 1038.496144][ T6] usb 6-1: config 0 descriptor?? [ 1038.965986][ T6] appleir 0003:05AC:8243.002D: No inputs registered, leaving [ 1038.968782][ T6] appleir 0003:05AC:8243.002D: hiddev0,hidraw1: USB HID v0.00 Device [HID 05ac:8243] on usb-dummy_hcd.1-1/input0 [ 1039.241330][T16128] usb 6-1: USB disconnect, device number 116 [ 1039.596170][T18268] 9pnet: bogus RWRITE count (2 > 1) 03:29:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:11 executing program 0: open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(0x0, 0x0, &(0x7f0000000f00)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 03:29:11 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00), 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:11 executing program 1: io_setup(0x8, &(0x7f0000000040)=0x0) io_pgetevents(r0, 0xfffffff000000000, 0x0, 0x0, 0x0, 0x0) [ 1039.771838][T18304] loop2: detected capacity change from 0 to 65567 [ 1039.782996][T18304] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1039.783014][T18304] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1039.784521][T18304] F2FS-fs (loop2): invalid crc_offset: 0 [ 1039.797575][T18304] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1039.826005][T18304] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1039.826132][T18304] F2FS-fs (loop2): Failed to read root inode 03:29:12 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1039.916534][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:12 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00), 0x0, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1039.917576][T18315] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1039.984202][T18317] loop2: detected capacity change from 0 to 65567 03:29:12 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1039.987097][T18317] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1039.987122][T18317] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1039.990425][T18317] F2FS-fs (loop2): invalid crc_offset: 0 [ 1040.024284][T18317] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1040.037662][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1040.038598][T18322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1040.077306][T18317] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1040.077451][T18317] F2FS-fs (loop2): Failed to read root inode 03:29:12 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1040.147771][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1040.148317][T18324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1040.822584][ C3] hpet: Lost 1 RTC interrupts [ 1041.140141][T18303] 9pnet: bogus RWRITE count (2 > 1) 03:29:13 executing program 0: open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(0x0, 0x0, &(0x7f0000000f00)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 03:29:13 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:13 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1041.161940][T18334] loop2: detected capacity change from 0 to 65567 [ 1041.163792][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.164745][T18335] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.168040][T18334] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:13 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1041.168061][T18334] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1041.232355][T18340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:13 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1041.233035][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1041.235144][T18334] F2FS-fs (loop2): invalid crc_offset: 0 [ 1041.256453][T18334] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1041.282124][T18334] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 03:29:13 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1041.282227][T18334] F2FS-fs (loop2): Failed to read root inode 03:29:13 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1041.422816][T18352] loop2: detected capacity change from 0 to 65567 [ 1041.424682][T18352] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1041.424708][T18352] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1041.427309][T18352] F2FS-fs (loop2): invalid crc_offset: 0 [ 1041.432202][T18352] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1041.495920][T18352] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1041.496076][T18352] F2FS-fs (loop2): Failed to read root inode [ 1042.607420][T18345] 9pnet: bogus RWRITE count (2 > 1) 03:29:14 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:14 executing program 0: open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(0x0, 0x0, &(0x7f0000000f00)) write$P9_RVERSION(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000e5ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[], 0x2000, 0x0) 03:29:14 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)='\x00\x00\x00\x00\x00\x00\x00', 0x7, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:14 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1042.639320][T18361] loop2: detected capacity change from 0 to 65567 [ 1042.641407][T18361] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1042.641431][T18361] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:14 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1042.680011][T18361] F2FS-fs (loop2): invalid crc_offset: 0 [ 1042.702392][T18361] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:14 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1042.757865][T18361] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1042.758069][T18361] F2FS-fs (loop2): Failed to read root inode 03:29:14 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1042.781832][ C3] hpet: Lost 1 RTC interrupts [ 1043.891210][T18365] 9pnet: bogus RWRITE count (2 > 1) 03:29:16 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300", 0xa, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:16 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x2c0, 0x0) [ 1043.927267][T18385] loop2: detected capacity change from 0 to 65567 [ 1043.929610][T18385] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1043.929636][T18385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1043.968530][T18385] F2FS-fs (loop2): invalid crc_offset: 0 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:16 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x76, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x55, 0x0, 0x81}, [@ncm={0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x440, 0x0, 0x4, 0x7}}}}}]}}]}}, 0x0) [ 1043.993236][T18385] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1044.027256][T18385] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 1044.027408][T18385] F2FS-fs (loop2): Failed to read root inode 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:16 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300", 0xa, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1044.176525][T18404] loop2: detected capacity change from 0 to 65567 [ 1044.179041][T18404] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1044.179067][T18404] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1044.184002][T18404] F2FS-fs (loop2): invalid crc_offset: 0 [ 1044.215671][T18404] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1044.256452][T18404] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 1044.256562][T18404] F2FS-fs (loop2): Failed to read root inode 03:29:16 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1044.312757][ T1257] usb 5-1: new high-speed USB device number 30 using dummy_hcd 03:29:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1044.602833][ T1257] usb 5-1: Using ep0 maxpacket: 32 [ 1044.733069][ T1257] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1044.733131][ T1257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1088, setting to 1024 [ 1044.733157][ T1257] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1044.923397][ T1257] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.923430][ T1257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.923448][ T1257] usb 5-1: Product: syz [ 1044.923460][ T1257] usb 5-1: Manufacturer: syz [ 1044.923475][ T1257] usb 5-1: SerialNumber: syz [ 1044.956729][T18394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1044.956866][T18394] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1045.243063][ T1257] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 1045.254028][ T1257] usb 5-1: USB disconnect, device number 30 03:29:17 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:17 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300", 0xa, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:17 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1045.695911][T18421] loop2: detected capacity change from 0 to 65567 [ 1045.698429][T18421] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1045.698456][T18421] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1045.700588][T18421] F2FS-fs (loop2): invalid crc_offset: 0 [ 1045.703663][T18421] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1045.707625][T18427] __nla_validate_parse: 18 callbacks suppressed 03:29:17 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1045.707643][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1045.766215][T18421] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. 03:29:17 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1045.766293][T18421] F2FS-fs (loop2): Failed to read root inode 03:29:17 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1045.834474][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:17 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="000000000000000003000000", 0xc, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1045.905496][T18442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:18 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1045.945765][T18448] loop2: detected capacity change from 0 to 65567 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1045.951549][T18448] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:18 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1045.951755][T18448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1045.967642][T18448] F2FS-fs (loop2): invalid crc_offset: 0 [ 1045.970610][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.007937][T18457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.008250][T18457] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:18 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1046.015277][T18448] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1046.045957][T18448] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 1046.046081][T18448] F2FS-fs (loop2): Failed to read root inode [ 1046.072075][T18464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.073184][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:18 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="000000000000000003000000", 0xc, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.214597][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1046.216176][T18467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1046.228749][T18471] loop2: detected capacity change from 0 to 65567 [ 1046.231904][T18471] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.231932][T18471] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1046.239743][T18471] F2FS-fs (loop2): invalid crc_offset: 0 03:29:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1046.260878][T18479] fuse: Bad value for 'fd' [ 1046.276204][T18471] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1046.308359][T18484] fuse: Bad value for 'fd' [ 1046.331988][T18471] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 1046.332167][T18471] F2FS-fs (loop2): Failed to read root inode 03:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:18 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:18 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:18 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="000000000000000003000000", 0xc, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1046.448785][T18490] fuse: Bad value for 'fd' 03:29:18 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.450340][T18492] loop2: detected capacity change from 0 to 65567 [ 1046.469686][T18492] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:18 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1046.469718][T18492] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:18 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.472198][T18492] F2FS-fs (loop2): invalid crc_offset: 0 [ 1046.519963][T18492] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:18 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1046.547444][T18492] F2FS-fs (loop2): sanity_check_inode: corrupted inode footer i_ino=3, ino,nid: [0, 3] run fsck to fix. [ 1046.547656][T18492] F2FS-fs (loop2): Failed to read root inode 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:19 executing program 0: open$dir(0x0, 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:19 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000014500)) [ 1046.995452][T18509] loop2: detected capacity change from 0 to 65552 [ 1047.001822][T18509] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:19 executing program 0: open$dir(0x0, 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.001849][T18509] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1047.005776][T18509] F2FS-fs (loop2): invalid crc_offset: 0 [ 1047.030621][T18509] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:19 executing program 0: open$dir(0x0, 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.122451][T18509] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1047.124027][T18509] F2FS-fs (loop2): Failed to read root inode 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:19 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000014500)) 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.295129][T18538] loop2: detected capacity change from 0 to 65552 [ 1047.297744][T18538] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1047.297772][T18538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1047.302785][T18538] F2FS-fs (loop2): invalid crc_offset: 0 [ 1047.343402][T18548] fuse: Bad value for 'fd' 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.350780][T18538] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1047.399118][T18538] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] 03:29:19 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.399254][T18538] F2FS-fs (loop2): Failed to read root inode [ 1047.411804][T18550] fuse: Bad value for 'fd' [ 1047.451423][T18554] fuse: Bad value for 'fd' [ 1047.514035][ C3] hpet: Lost 3 RTC interrupts 03:29:19 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd}], 0x0, &(0x7f0000014500)) 03:29:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:20 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1047.968577][T18561] loop2: detected capacity change from 0 to 65552 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1047.987727][T18561] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:20 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1047.987777][T18561] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1048.027318][T18561] F2FS-fs (loop2): invalid crc_offset: 0 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1048.033582][T18561] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:20 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', 0x0, 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1048.087958][T18561] F2FS-fs (loop2): inconsistent node block, nid:3, node_footer[nid:0,ino:0,ofs:0,cpver:0,blkaddr:0] [ 1048.088392][T18561] F2FS-fs (loop2): Failed to read root inode [ 1048.158145][ C3] hpet: Lost 1 RTC interrupts 03:29:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1048.534055][T18588] loop2: detected capacity change from 0 to 65567 [ 1048.544795][T18588] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1048.544848][T18588] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1048.548777][T18588] F2FS-fs (loop2): invalid crc_offset: 0 [ 1048.554978][T18588] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1048.600273][T18588] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1048.600672][T18588] F2FS-fs (loop2): Failed to read root inode 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', 0x0, 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:20 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', 0x0, 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:20 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x0, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:20 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1048.763470][T18608] loop2: detected capacity change from 0 to 65567 [ 1048.770160][T18608] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1048.770186][T18608] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1048.779284][T18608] F2FS-fs (loop2): invalid crc_offset: 0 [ 1048.814291][T18608] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:20 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1048.869459][T18608] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1048.869786][T18608] F2FS-fs (loop2): Failed to read root inode 03:29:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.045831][T18623] loop2: detected capacity change from 0 to 65567 [ 1049.065518][T18623] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1049.065553][T18623] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1049.068382][T18623] F2FS-fs (loop2): invalid crc_offset: 0 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.093979][T18623] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1049.103152][T18631] fuse: Bad value for 'fd' [ 1049.107553][ C3] hpet: Lost 1 RTC interrupts 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.170505][T18638] fuse: Bad value for 'fd' [ 1049.172430][T18623] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1049.172806][T18623] F2FS-fs (loop2): Failed to read root inode [ 1049.210758][T18640] fuse: Bad value for 'fd' 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.256306][T18644] fuse: Invalid rootmode 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {0x0, 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1049.334062][T18654] fuse: Invalid rootmode [ 1049.339972][T18655] loop2: detected capacity change from 0 to 65567 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.367155][T18655] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1049.367185][T18655] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) [ 1049.371092][T18655] F2FS-fs (loop2): invalid crc_offset: 0 [ 1049.376508][T18655] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1049.401421][T18662] fuse: Invalid rootmode [ 1049.430574][T18655] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1049.430732][T18655] F2FS-fs (loop2): Failed to read root inode 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1, 0x0, 0x8}}, 0x28) 03:29:21 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {0x0, 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1049.636020][T18677] loop2: detected capacity change from 0 to 65567 [ 1049.640246][T18677] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) [ 1049.640275][T18677] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1049.650561][T18677] F2FS-fs (loop2): invalid crc_offset: 0 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) [ 1049.679196][T18677] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1049.740154][T18677] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1049.740444][T18677] F2FS-fs (loop2): Failed to read root inode 03:29:21 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:21 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x0, 0x0, 0x8}}, 0x28) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {0x0, 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x0, 0x0, 0x8}}, 0x28) [ 1049.971268][T18704] loop2: detected capacity change from 0 to 65567 [ 1049.977791][T18704] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1049.977809][T18704] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1049.979470][T18704] F2FS-fs (loop2): invalid crc_offset: 0 [ 1050.003666][T18704] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x0, 0x0, 0x8}}, 0x28) [ 1050.039586][T18704] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1050.039710][T18704] F2FS-fs (loop2): Failed to read root inode 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1}}, 0x28) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1}}, 0x28) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00), 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000001b40), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000001ac0)={0x28, 0x2, 0x0, {0x1}}, 0x28) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1050.268406][T18728] loop2: detected capacity change from 0 to 65567 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1050.284804][T18728] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1050.284886][T18728] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1050.287372][T18728] F2FS-fs (loop2): invalid crc_offset: 0 [ 1050.294491][T18728] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000004500), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0xa}) [ 1050.354772][T18728] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000004500), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) [ 1050.355004][T18728] F2FS-fs (loop2): Failed to read root inode 03:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000004500), 0x0, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x0, 0x1, 0x0, [0x0]}}, 0x29) 03:29:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00), 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1050.527770][T18751] loop2: detected capacity change from 0 to 65567 [ 1050.530544][T18751] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:22 executing program 0: open$dir(&(0x7f0000006e00)='./file1\x00', 0x4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000085c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000044c0)='./file1\x00', &(0x7f0000004500), 0x1200048, &(0x7f0000004600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) [ 1050.530572][T18751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1050.533828][T18751] F2FS-fs (loop2): invalid crc_offset: 0 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1050.539592][T18751] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1050.589818][T18751] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x5}]}]}}, &(0x7f00000000c0)=""/241, 0x32, 0xf1, 0x1}, 0x20) [ 1050.590000][T18751] F2FS-fs (loop2): Failed to read root inode 03:29:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:22 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002140)=@base={0x15}, 0x48) 03:29:22 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:22 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00), 0x0, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1050.801950][T18774] loop2: detected capacity change from 0 to 65567 03:29:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x5452, 0x0) [ 1050.803878][T18776] __nla_validate_parse: 50 callbacks suppressed [ 1050.804181][T18776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:22 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x401c5820, 0x0) [ 1050.805038][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1050.805437][T18774] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c05, 0x0) [ 1050.805462][T18774] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1050.807517][T18774] F2FS-fs (loop2): invalid crc_offset: 0 [ 1050.861451][T18774] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1050.892857][T18774] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1050.893005][T18774] F2FS-fs (loop2): Failed to read root inode [ 1050.954054][T18791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1050.955522][T18791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041284, 0x0) 03:29:23 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003", 0xd, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x21, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x190, 0x190, 0xffffffff, 0x190, 0x2b0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ipvlan1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @dev, @gre_key}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'vxcan1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id, @gre_key}}}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @empty, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) [ 1051.245940][T18797] loop2: detected capacity change from 0 to 65567 [ 1051.247642][T18797] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1051.247669][T18797] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:23 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x0, 0x202) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002100)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6000, 0xffffffff, 0xee01, 0xffffffffffffffff, 0x8}}}}, 0xfffffffffffffd5d) [ 1051.248113][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.250407][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:23 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x16, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x190, 0x190, 0xffffffff, 0x190, 0x2b0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ipvlan1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @dev, @gre_key}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'vxcan1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id, @gre_key}}}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @empty, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) [ 1051.251383][T18797] F2FS-fs (loop2): invalid crc_offset: 0 [ 1051.257245][T18797] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1051.303742][T18797] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1051.303902][T18797] F2FS-fs (loop2): Failed to read root inode 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5ab4e64f2b9875510d832bc82a3a51a5ad136e47e10b0f6e4218b694c6259483d387e15ebc973a1b9e258b03890c0336b89b54f211b65c9dddc6ea1ffda467a1", "06dc6c885126fd8ae1e28898bcca65bb7801566e1ab2c4ab88f3ae3e535240abdb8e45282809763bbbcb4797e6d8aa77e5eaebdbb94899ff73e0b689aee630e0", "983a79490f6978e833fbd657e32b244d62f82f4563dec506ceadea7863dfbfec"}) 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1051.386956][T18814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.388916][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:23 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003", 0xd, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:23 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002400)='./file1\x00', 0x0, 0x841420, 0x0) 03:29:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1f, 0x0) ioctl$BLKALIGNOFF(r0, 0x125e, &(0x7f0000000040)) [ 1051.465663][T18823] loop2: detected capacity change from 0 to 65567 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1051.470511][T18823] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1051.470541][T18823] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c06, 0x0) [ 1051.487353][T18823] F2FS-fs (loop2): invalid crc_offset: 0 [ 1051.515881][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1051.516183][T18832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:23 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0xcde) [ 1051.532267][T18823] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1051.565272][T18823] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1051.565407][T18823] F2FS-fs (loop2): Failed to read root inode 03:29:23 executing program 0: io_setup(0x0, &(0x7f0000000000)) io_submit(0x0, 0x0, 0x0) r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) 03:29:23 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003", 0xd, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:23 executing program 0: io_setup(0x0, &(0x7f0000000000)) r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) [ 1051.696083][T18849] loop2: detected capacity change from 0 to 65567 03:29:23 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x127e, 0x0) [ 1051.698518][T18849] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1051.698545][T18849] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:23 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1051.707484][T18849] F2FS-fs (loop2): invalid crc_offset: 0 [ 1051.738537][T18849] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0x1054, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x26000000, 0x34ac, 0x0, 0x4, 0xd, 0x7fffffff, 0x871, 0x69c, 0x4, 0x80000001, 0x8, 0x6, 0x0, 0x401, 0x1, 0xfffffffe, 0x3, 0x401, 0x3]}, @TCA_POLICE_PEAKRATE={0x404}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x1054}}, 0x0) [ 1051.805324][T18849] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. 03:29:23 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtfilter={0x20001154, 0x2c, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_rsvp={{0x9}, {0x101c, 0x2, [@TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}, @TCA_RSVP_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}]}]}}]}, 0x1054}}, 0x0) [ 1051.805496][T18849] F2FS-fs (loop2): Failed to read root inode 03:29:24 executing program 0: r0 = openat$vnet(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$P9_RLINK(r0, &(0x7f0000000000)={0x7}, 0x7) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000", 0x13, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1260, 0x0) 03:29:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1051.971212][T18867] loop2: detected capacity change from 0 to 65567 [ 1051.979498][T18867] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1051.979591][T18867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1051.982330][T18867] F2FS-fs (loop2): invalid crc_offset: 0 [ 1052.015600][T18867] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1052.055004][T18867] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1052.055104][T18867] F2FS-fs (loop2): Failed to read root inode 03:29:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x36c, 0x190, 0x190, 0xffffffff, 0x190, 0x2b0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ipvlan1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @dev, @gre_key}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0xb8, 0xec, 0x0, {}, [@common=@ttl={{0x24}}, @common=@icmp={{0x24}, {0x0, "d4f0"}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'vxcan1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id, @gre_key}}}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @empty, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c8) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000", 0x13, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1264, 0x0) [ 1052.198173][T18890] loop2: detected capacity change from 0 to 65567 03:29:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x40041271, 0x0) [ 1052.199834][T18890] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1052.199879][T18890] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1052.226501][T18890] F2FS-fs (loop2): invalid crc_offset: 0 [ 1052.249778][T18890] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1052.288950][T18890] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1052.289078][T18890] F2FS-fs (loop2): Failed to read root inode 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x4020940d, &(0x7f0000000040)) 03:29:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000", 0x13, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:24 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x1, 0x0) ioctl$BLKALIGNOFF(r0, 0x541b, 0x0) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 0: syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x916f78ab9e23c5f9, &(0x7f00000002c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}}) [ 1052.421838][T18907] loop2: detected capacity change from 0 to 65567 03:29:24 executing program 0: r0 = openat$ptp0(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC(r0, 0xc0603d06, &(0x7f0000000240)) [ 1052.438456][T18907] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1052.438485][T18907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1052.443099][T18907] F2FS-fs (loop2): invalid crc_offset: 0 [ 1052.470729][T18907] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1052.529399][T18907] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1052.529505][T18907] F2FS-fs (loop2): Failed to read root inode 03:29:24 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xc, &(0x7f00000013c0)=@nat={'nat\x00', 0x1b, 0x5, 0x324, 0x190, 0x190, 0xffffffff, 0x190, 0x2b0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ipvlan1\x00', 'vlan1\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2, @dev, @gre_key}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @multicast2, @icmp_id, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'vxcan1\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, @icmp_id, @gre_key}}}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'netpci0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @empty, @empty, @port, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:24 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000", 0x16, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x2, 0x0) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1052.812871][T18927] loop2: detected capacity change from 0 to 65567 [ 1052.814897][T18927] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:24 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:24 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1052.814914][T18927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1052.816241][T18927] F2FS-fs (loop2): invalid crc_offset: 0 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1052.832809][T18927] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1052.876720][T18927] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1052.876863][T18927] F2FS-fs (loop2): Failed to read root inode 03:29:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:25 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000", 0x16, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1053.249468][T18951] loop2: detected capacity change from 0 to 65567 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1053.265003][T18951] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1053.265034][T18951] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1053.269083][T18951] F2FS-fs (loop2): invalid crc_offset: 0 [ 1053.278547][T18951] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1053.337737][T18951] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1053.338329][T18951] F2FS-fs (loop2): Failed to read root inode [ 1053.549000][ C3] hpet: Lost 1 RTC interrupts 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:25 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000", 0x16, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:25 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1053.742237][T18968] loop2: detected capacity change from 0 to 65567 [ 1053.749159][T18968] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1053.749188][T18968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1053.757085][T18968] F2FS-fs (loop2): invalid crc_offset: 0 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1053.780712][T18968] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1053.821385][T18968] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1053.821479][T18968] F2FS-fs (loop2): Failed to read root inode 03:29:25 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f0100030000000010000000000000", 0x18, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1053.929794][T18988] loop2: detected capacity change from 0 to 65567 [ 1053.931526][T18988] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1053.931544][T18988] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1053.947717][T18988] F2FS-fs (loop2): invalid crc_offset: 0 [ 1053.955104][T18988] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1054.002078][T18988] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1054.002243][T18988] F2FS-fs (loop2): Failed to read root inode 03:29:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f0100030000000010000000000000", 0x18, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:26 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1054.616731][T19001] loop2: detected capacity change from 0 to 65567 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1054.620556][T19001] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1054.620619][T19001] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1054.628024][T19001] F2FS-fs (loop2): invalid crc_offset: 0 [ 1054.634891][T19001] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1054.687918][T19001] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1054.688007][T19001] F2FS-fs (loop2): Failed to read root inode 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:26 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f0100030000000010000000000000", 0x18, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1054.808521][T19022] loop2: detected capacity change from 0 to 65567 [ 1054.810368][T19022] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1054.810384][T19022] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:26 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1054.811663][T19022] F2FS-fs (loop2): invalid crc_offset: 0 [ 1054.834856][T19022] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1054.896674][T19022] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1054.896785][T19022] F2FS-fs (loop2): Failed to read root inode 03:29:27 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:27 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1055.482362][T19037] loop2: detected capacity change from 0 to 65567 [ 1055.485210][T19037] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1055.485238][T19037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1055.487214][T19037] F2FS-fs (loop2): invalid crc_offset: 0 [ 1055.511655][T19037] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:27 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1055.557033][T19037] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1055.557121][T19037] F2FS-fs (loop2): Failed to read root inode 03:29:27 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:27 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1055.681572][T19056] loop2: detected capacity change from 0 to 65567 03:29:27 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1055.687225][T19056] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1055.687254][T19056] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1055.689400][T19056] F2FS-fs (loop2): invalid crc_offset: 0 [ 1055.698030][T19056] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1055.739023][T19056] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1055.739207][T19056] F2FS-fs (loop2): Failed to read root inode 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:29:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="00000000000000000000010000000100000000020000000100000000030000000110", 0x22, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:28 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) [ 1056.356688][T19066] loop2: detected capacity change from 0 to 65567 [ 1056.356820][T19067] __nla_validate_parse: 50 callbacks suppressed [ 1056.356839][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.357335][T19067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1056.358552][T19066] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1056.358578][T19066] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1056.361075][T19066] F2FS-fs (loop2): invalid crc_offset: 0 [ 1056.391363][T19066] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1056.429797][T19066] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=3 iblocks=0, run fsck to fix. [ 1056.429878][T19066] F2FS-fs (loop2): Failed to read root inode [ 1056.460144][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.461025][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:28 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1056.557580][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1056.558124][T19083] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1056.587731][T19085] loop2: detected capacity change from 0 to 65567 [ 1056.588965][T19085] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1056.588981][T19085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1056.590263][T19085] F2FS-fs (loop2): invalid crc_offset: 0 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1056.624039][T19085] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1056.624489][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.624942][T19092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:28 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1056.628249][T19085] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1056.628265][T19085] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1056.671468][T19085] F2FS-fs (loop2): Failed to read root inode [ 1056.677220][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1056.677832][T19096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:29 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:29 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 1057.230658][T19105] loop2: detected capacity change from 0 to 65567 [ 1057.231933][T19105] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1057.231950][T19105] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1057.238514][T19105] F2FS-fs (loop2): invalid crc_offset: 0 [ 1057.275495][T19105] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1057.284205][T19105] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1057.284231][T19105] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 03:29:29 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1057.314257][T19105] F2FS-fs (loop2): Failed to read root inode 03:29:29 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:29 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:29 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1057.457561][T19122] loop2: detected capacity change from 0 to 65567 [ 1057.461230][T19122] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1057.461258][T19122] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1057.464341][T19122] F2FS-fs (loop2): invalid crc_offset: 0 [ 1057.470990][T19122] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1057.477385][T19122] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1057.477414][T19122] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1057.518306][T19122] F2FS-fs (loop2): Failed to read root inode 03:29:30 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:30 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:29:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {0x0, 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1058.125202][T19134] loop2: detected capacity change from 0 to 65567 03:29:30 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1058.128368][T19134] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1058.128398][T19134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1058.131484][T19134] F2FS-fs (loop2): invalid crc_offset: 0 [ 1058.136037][T19134] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:30 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1058.140815][T19134] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1058.140841][T19134] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1058.178090][T19134] F2FS-fs (loop2): Failed to read root inode 03:29:30 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:30 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {0x0, 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1058.301403][T19150] loop2: detected capacity change from 0 to 65567 [ 1058.303712][T19150] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1058.303730][T19150] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1058.308262][T19150] F2FS-fs (loop2): invalid crc_offset: 0 [ 1058.315300][T19150] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1058.337096][T19150] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1058.337128][T19150] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1058.380821][T19150] F2FS-fs (loop2): Failed to read root inode 03:29:31 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:31 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0xffffffffffffff3d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000340)="66b8d1000f00d065440fc77152c461816af766baf80cb87a98d182ef66bafc0c66ed66460f388017c461fe6fdb66b834018ee8c74424003f000000c744240200000000ff1c2483ded7440f20c0350f000000440f22c0", 0x56}], 0x1, 0x0, &(0x7f00000003c0)=[@cr4], 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:29:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {0x0, 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1059.008173][T19161] loop2: detected capacity change from 0 to 65567 03:29:31 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1059.010100][T19161] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1059.010139][T19161] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1059.013953][T19161] F2FS-fs (loop2): invalid crc_offset: 0 03:29:31 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1059.024833][T19161] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1059.031736][T19161] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1059.031769][T19161] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1059.063741][T19161] F2FS-fs (loop2): Failed to read root inode 03:29:31 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:31 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00), 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1059.171697][T19175] loop2: detected capacity change from 0 to 65567 [ 1059.177135][T19175] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1059.177164][T19175] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1059.189094][T19175] F2FS-fs (loop2): invalid crc_offset: 0 [ 1059.195613][T19175] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1059.202482][T19175] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1059.204743][T19175] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1059.243098][T19175] F2FS-fs (loop2): Failed to read root inode 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x1262, 0x0) 03:29:32 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00), 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:32 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1059.882886][T19183] loop2: detected capacity change from 0 to 65567 03:29:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0xc0189436, 0x0) [ 1059.884532][T19183] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1059.884549][T19183] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1059.885898][T19183] F2FS-fs (loop2): invalid crc_offset: 0 03:29:32 executing program 3: semctl$IPC_STAT(0x0, 0x0, 0x13, &(0x7f0000000180)=""/225) 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1059.912872][T19183] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1059.921711][T19183] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1059.921738][T19183] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. 03:29:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1f, 0x0) ioctl$BLKALIGNOFF(r0, 0x80041285, &(0x7f0000000040)) [ 1059.963454][T19183] F2FS-fs (loop2): Failed to read root inode 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:32 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00), 0x0, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1060.120420][T19204] loop2: detected capacity change from 0 to 65567 [ 1060.122420][T19204] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1060.122446][T19204] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1060.138413][T19204] F2FS-fs (loop2): invalid crc_offset: 0 [ 1060.144081][T19204] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1060.150890][T19204] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1060.150918][T19204] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1060.190298][T19204] F2FS-fs (loop2): Failed to read root inode 03:29:32 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:32 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, &(0x7f0000005bc0)=[{{&(0x7f0000001cc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=[{0x28, 0x0, 0x0, "e9eb7f51333f2d97e418d70614856ebfb5"}], 0x28}}], 0x1, 0x0) 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:32 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000", 0x11, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:32 executing program 3: prctl$PR_SET_PTRACER(0x16, 0x0) [ 1060.768017][T19213] loop2: detected capacity change from 0 to 65567 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1060.770123][T19213] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1060.770141][T19213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:32 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x40101286, 0x0) [ 1060.774231][T19213] F2FS-fs (loop2): invalid crc_offset: 0 03:29:32 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1060.785256][T19213] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1060.790520][T19213] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1060.832008][T19213] F2FS-fs (loop2): Failed to read root inode [ 1060.877532][ T1343] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.877657][ T1343] ieee802154 phy1 wpan1: encryption failed: -22 03:29:33 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x1c, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:33 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff0000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:33 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000", 0x11, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:33 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) [ 1061.629828][T19231] __nla_validate_parse: 34 callbacks suppressed [ 1061.629849][T19231] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.629892][T19231] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.3'. 03:29:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) 03:29:33 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1061.635491][T19233] loop2: detected capacity change from 0 to 65567 [ 1061.641106][T19233] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1061.641135][T19233] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:33 executing program 3: pipe2(&(0x7f0000001300)={0xffffffffffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x11, r0, 0x0) [ 1061.645307][T19233] F2FS-fs (loop2): invalid crc_offset: 0 [ 1061.645749][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1061.649801][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1061.660096][T19233] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1061.665115][T19233] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1061.704685][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1061.705123][T19244] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1061.711985][T19233] F2FS-fs (loop2): Failed to read root inode 03:29:34 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:34 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:34 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000", 0x11, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000044c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000408}, 0xc, &(0x7f0000004480)={&(0x7f00000000c0)=@newtfilter={0x1e84, 0x2c, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0xa}, {0x1608, 0x2, [@TCA_BASIC_EMATCHES={0x1604, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x208, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0xd8, 0x0, 0x0, 0x0, {{}, "eacc6d115bda63ea3713b9138af00fd4d6ab0b8ba706c04162c819d91d945bcda6b0b8d3ce0169d816a4f425b93a3d29055068c85d841bd4a160825fa105a06602a7f57aa7786b87aeb28171ba760fa8fb496dc7f317f0885aacd72cfcc5c9962913ccf4ee93c527ccf85f79cf2ea874dea5bf9982429330ddd761d86e74e56c9a0b7636d1e8834ebc0559e485e6667c806551972b20711f80e175dc39f09b739bffe8962d9a5141e22c8db4927435591da244cd0ac199ca457e0fbc1c78a9254e3a58d6ca9c4463c0"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CONTAINER={0xb8, 0x0, 0x0, 0x0, {{}, "10381d5bb4dae6e7c86d5579fa69b09060a065d06f9f5af3dc4046c3483347b7e945046cb0041d006767ab8f62a19a3927b56a9c1b6a8acee9119e9dc75f86d49f5abefa4452a6e66e17d0428b28cc3c9f4e92d44615eeee5b93306f0980d788996cb1bc33192219aa209881d8faddee992ef5d275ab183517f559faf0c8f0abb785884b088f1ce787fc4308d51b012260a4d0e6166207a180e0d59bdd054ff26bc6de681d98e83387"}}, @TCF_EM_IPT={0x18, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_NBYTE={0x1c, 0x0, 0x0, 0x0, {{}, {0x0, 0x9, 0x0, "58ca785c81b6674c52"}}}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "cceefd83d8"}}}]}, @TCA_EMATCH_TREE_LIST={0x1300, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x64, 0x0, 0x0, 0x0, {{}, "b0524f96a97506ca86eb596627d1dfea1ba9bd270946ff4aa7151657c671382495c2bb14b29fbc1984909d3dee4b801be079007e559bd5eb4c1c2484bdc6a7da6cab3f0053b2cef513fca70c6fe2a81a35d2e0cab8"}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPT={0x2c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, '{'}}}, @TCF_EM_IPT={0x188, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "6518069fb824b9869cfce5a2be8a617b54695e8a9826b0c0062ccac9394f0088ed1109cfbf461d0f96803b8d3b1752432d9813431bbe94e8fc0c45cd4b82f99b57da57a4772d04c13ae7c1bb9d96cce0a4e7eb5a4b4942ddbcd9626de34f8a4d0ee5b3c81680f9f9d4cf4b928ae47d6d7987bf93a7c29e33d8e2f0176c677f98de8ce49a0b7a4f645b1ea51db427015eb6c77535fb851f833feb506bbc06075907e1d227371c7c4fa2d4e06c2eec4db945728f322cebbd1563719d88f9f3eb7a7174444fc222ca26bf860ab959"}, @TCA_EM_IPT_MATCH_DATA={0x85, 0x5, "d9eddbfaa529e1a857d561d6b83ab697e5689ac5a42dbab414c28888295361dc32fea0200ae7032a40dd012818c718960614c821bac2991d51a57001e86c21328b305661a8d11d18c61cbf08b6172a54aaa7bcaa6d86ae0636747850533abc071dcb66528df13f9a705f1ce20bcee635ee49108c5d35d6415b7b807b60e5c3785a"}]}}, @TCF_EM_IPT={0x10a4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x1001, 0x5, "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"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_DATA={0x79, 0x5, "7b361ab5c3dfcc9910a0288faeb110d3003cb0baaf1cc0f49e5eb1ce63ba5a2e2ea609d34f6358fdeba92965e470c7954c20f2aeb648ada00ce52c4810a1df3504bda265079800319664b6f28385f14b980440ab65614c2c709ce9cdce76e22f56577d5d5a5041d336320cd399be45cac4dc63d016"}, @TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c}, @TCF_EM_IPT={0xd0, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_DATA={0xc1, 0x5, "64aa22a1b2d2fcac3b436a0d046a7f416c4f11b5ec1ed65f16309d7fc032d49baa36714fb59542120ed393f5e2aa85c894312dc3b369f22495de8fc0648633ee6016208d7b65c934311c8711bb4b94d42ef769548addcd136f97499fc6bdf0771dc5489090bd00afb686e932bde066ddff8aad95219fc9ffbe545978a72a210b770f14ca97102fc710e10c4ff1066c496e12903e502a4baa30b87d79415d8efe3757bee89c94acea0da27cdb28220ba3d457474d18251bb00871e5f2a4"}]}}]}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x840, 0x2, [@TCA_ROUTE4_ACT={0x83c, 0x6, [@m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x1e84}}, 0x0) [ 1062.501040][T19252] loop2: detected capacity change from 0 to 65567 03:29:34 executing program 3: prctl$PR_SET_PTRACER(0x3, 0x0) [ 1062.512180][T19252] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1062.512209][T19252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:34 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1062.521664][T19253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) [ 1062.522232][T19253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1062.533455][T19252] F2FS-fs (loop2): invalid crc_offset: 0 [ 1062.559554][T19252] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1062.563161][T19252] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1062.591297][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:34 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:34 executing program 3: geteuid() syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000000180)}, {&(0x7f0000000300)='7', 0x1, 0x8}, {&(0x7f0000000380)="193bfc5cccae87963cba26028bb174cfbe7d3b3a98c2216f9bc91006a757c577aa19507f5259aa52156d149ac6d2f08faa2a7792850e34042d93c98f0936eb32463f35d71a6ef9ceb00b114497326193731b2fd17ac66583b2f9f21437345e005c705f21c942866c00a5929e1b1e82247d7c4435282ebd367b6018e039389b358f2cdcb1ba88a89864fb636ba8db574da666b9c8d4c7826e10fdaad42f975f28b5bfd29b74f9b9d4d22eae1bd5f13312c389c2a3a2e17c1a685b775c9fb9b6cfe3a51d5f92ae0ed89f468a2bf893d03eb8235ef49c45f71c6d8475605e80c6b88f3d1f5095cd163d544102a2db1d8cb7cbfbbc", 0xf3, 0x7}, {&(0x7f0000000480)="9e8866a6217c50c45277c63842baef58c5395967bf69823430287f926e8d42f650d9405c0899f93edb09a5f5253e4fa963a66d04534a78ac41a8990ab0f8e4d96fffd8f71da1b58f0980fcc9218296737121f0aab301678355", 0x59, 0x6}], 0x0, &(0x7f00000005c0)={[{@oldalloc}], [{@uid_lt}, {@hash}]}) mount$bpf(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x10000}}], [{@appraise}]}) [ 1062.591659][T19262] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1062.607486][T19252] F2FS-fs (loop2): Failed to read root inode [ 1062.805403][ C3] hpet: Lost 1 RTC interrupts 03:29:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:35 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:35 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:35 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000", 0x1a, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) [ 1063.402009][T19275] loop2: detected capacity change from 0 to 65567 [ 1063.419958][T19275] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1063.419986][T19275] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:35 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1063.422033][T19275] F2FS-fs (loop2): invalid crc_offset: 0 03:29:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) [ 1063.459251][T19275] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:35 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1063.499896][T19275] F2FS-fs (loop2): Failed to read root inode 03:29:35 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:36 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:36 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:36 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) write$FUSE_INIT(r1, 0x0, 0x0) r2 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:36 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000", 0x1a, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1064.273963][T19295] loop2: detected capacity change from 0 to 65567 03:29:36 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) [ 1064.280806][T19295] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1064.280835][T19295] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1064.286956][T19295] F2FS-fs (loop2): invalid crc_offset: 0 03:29:36 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:36 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) [ 1064.308524][T19295] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1064.356230][T19295] F2FS-fs (loop2): Failed to read root inode 03:29:36 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:36 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:36 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:37 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) read$FUSE(r0, &(0x7f0000008840)={0x2020}, 0x2020) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:37 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:37 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:37 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000", 0x1a, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) [ 1065.178893][T19320] loop2: detected capacity change from 0 to 65567 03:29:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:29:37 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1065.186775][T19320] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) [ 1065.186796][T19320] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1065.195724][T19320] F2FS-fs (loop2): invalid crc_offset: 0 03:29:37 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) [ 1065.208773][T19320] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1065.250507][T19320] F2FS-fs (loop2): Failed to read root inode 03:29:37 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:38 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vcsu(&(0x7f00000001c0), 0xfffffff8, 0x10801) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 03:29:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="000000000000000000000100000001000000000200000001000000000300", 0x1e, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1066.045946][T19339] loop2: detected capacity change from 0 to 65567 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) [ 1066.053987][T19339] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:38 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) openat$fuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006800)={0x2020}, 0x2020) [ 1066.054018][T19339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1066.059822][T19339] F2FS-fs (loop2): invalid crc_offset: 0 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1066.072139][T19339] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1066.122108][T19339] F2FS-fs (loop2): Failed to read root inode 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 03:29:38 executing program 0: r0 = openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x2020) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="000000000000000000000100000001000000000200000001000000000300", 0x1e, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 03:29:38 executing program 0: openat$cuse(0xffffff9c, &(0x7f00000040c0), 0x2, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 1066.241007][T19364] loop2: detected capacity change from 0 to 65567 [ 1066.247634][T19364] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1066.247661][T19364] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1066.249138][T19364] F2FS-fs (loop2): invalid crc_offset: 0 03:29:38 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) [ 1066.265719][T19364] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) [ 1066.315005][T19364] F2FS-fs (loop2): Failed to read root inode 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:38 executing program 0: r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="000000000000000000000100000001000000000200000001000000000300", 0x1e, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:38 executing program 0: r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) [ 1066.468126][T19385] loop2: detected capacity change from 0 to 65567 [ 1066.470347][T19385] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:38 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x12, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {}, @in6=@ipv4={'\x00', '\xff\xff', @remote}}}, 0xf0}}, 0x0) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:38 executing program 0: r0 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006800)={0x2020}, 0x2020) [ 1066.470364][T19385] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1066.472213][T19385] F2FS-fs (loop2): invalid crc_offset: 0 [ 1066.487273][T19385] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1066.550631][T19385] F2FS-fs (loop2): Failed to read root inode 03:29:38 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000000003000000", 0x20, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:38 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, 0x0, 0xc16e4ab337d157f7}, 0x14}}, 0x0) [ 1066.668310][T19403] __nla_validate_parse: 36 callbacks suppressed 03:29:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2700b08b0d60992c48505509131a0c0099"], 0x24}}, 0x0) [ 1066.668324][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:38 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) 03:29:38 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1066.668828][T19403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1066.693977][T19406] loop2: detected capacity change from 0 to 65567 [ 1066.695992][T19406] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:38 executing program 0: openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006800)={0x2020}, 0x2020) [ 1066.696011][T19406] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1066.697485][T19406] F2FS-fs (loop2): invalid crc_offset: 0 [ 1066.726927][T19406] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1066.727945][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1066.728363][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1066.732812][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1066.769009][T19406] F2FS-fs (loop2): Failed to read root inode 03:29:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000000003000000", 0x20, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2700b08b0d60992c48505509131a0c0099"], 0x24}}, 0x0) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:39 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1066.900556][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:39 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1066.900876][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2700b08b0d60992c48505509131a0c0099"], 0x24}}, 0x0) [ 1066.911523][T19425] loop2: detected capacity change from 0 to 65567 [ 1066.918304][T19422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1066.923853][T19425] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:39 executing program 0: r0 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1066.923889][T19425] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1066.927499][T19425] F2FS-fs (loop2): invalid crc_offset: 0 [ 1066.957230][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1066.961875][T19425] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1066.974282][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1067.036338][T19425] F2FS-fs (loop2): Failed to read root inode 03:29:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2700b08b0d60992c48505509131a0c0099"], 0x24}}, 0x0) 03:29:39 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@remote}, 0x0, @in=@loopback}}, 0xe8) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="0000000000000000000001000000010000000002000000010000000003000000", 0x20, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1067.192758][T19444] loop2: detected capacity change from 0 to 65567 03:29:39 executing program 3: syz_mount_image$ext4(&(0x7f0000003f40)='ext4\x00', &(0x7f0000003f80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000004100)={[], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1067.195901][T19444] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:39 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) [ 1067.195928][T19444] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1067.199366][T19444] F2FS-fs (loop2): invalid crc_offset: 0 03:29:39 executing program 3: open$dir(&(0x7f0000001740)='./file0\x00', 0x0, 0x0) [ 1067.250059][T19444] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1067.314784][T19444] F2FS-fs (loop2): Failed to read root inode 03:29:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r0, &(0x7f0000000080)=@in6, &(0x7f0000000000)=0x80) 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) 03:29:39 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010500)='\x00\x00\x00\x00\b', 0x5, 0xc80}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018", 0x45, 0x1400}, {&(0x7f0000010e00)="513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xa9, 0x200000}, {&(0x7f0000010f00)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x200fe0}, {&(0x7f0000011000)="000000000000000000000000000000000000000000000000000000060000000000020c600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000010000000510ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002", 0xba, 0x2011e0}, {&(0x7f0000011100)="0000000000000003000000040078000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000005", 0x56, 0x2012e0}, {&(0x7f0000011200)='\x00\x00\x00\v', 0x4, 0x201380}, {&(0x7f0000011800)="0000000000000000000000000000000000000000000000000000000100000000513521150000000000100000000000000b000000000000000d0000001000000012000000000000000100000002000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000030000000b00000005000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5010000060000000100000007000000070000000a0000004000000040000000fc0f000001", 0xc9, 0x204fe0}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000002c1b39b8", 0x20, 0x205fe0}, {&(0x7f0000012a00)="000000000000000000000100000001000000000200000001000000000300000001", 0x21, 0xa00000}, {&(0x7f0000012c00)="ed4100205cf90100535f010003000000001000000000000002", 0x19, 0x1001000}, {&(0x7f0000012e00)="00000000000000000300000003", 0xd, 0x1001fe0}], 0x0, &(0x7f0000014500)) 03:29:39 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delqdisc={0x24}, 0x24}}, 0x0) 03:29:39 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) [ 1067.482401][T19467] loop2: detected capacity change from 0 to 65567 [ 1067.488530][T19467] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(0) root(0) 03:29:39 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) [ 1067.488561][T19467] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 03:29:39 executing program 1: sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "462da7f69b2dbbec4e004f2675c8313e6a6d2bb112295ba927b8a53b6734bf4aef236f7c833259d9670372c1c64e45931749e2ab683788a6e412d3752633402a"}}, 0x80}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, "c6"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb50}}]}]}}]}, 0x54}}, 0x0) [ 1067.491755][T19467] F2FS-fs (loop2): invalid crc_offset: 0 03:29:39 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x40049409, 0x0) [ 1067.496467][T19467] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (13274671252798256465, 0) [ 1067.542271][T19467] F2FS-fs (loop2): access invalid blkaddr:1 [ 1067.560135][T19467] ------------[ cut here ]------------ [ 1067.560135][T19467] ------------[ cut here ]------------ [ 1067.560168][T19467] WARNING: CPU: 3 PID: 19467 at fs/f2fs/checkpoint.c:199 f2fs_is_valid_blkaddr+0xea2/0x1140 [ 1067.561276][T19467] Modules linked in: [ 1067.561372][T19467] CPU: 3 PID: 19467 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-11080-g664a393a2663 #0 [ 1067.561418][T19467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1067.561451][T19467] RIP: 0010:f2fs_is_valid_blkaddr+0xea2/0x1140 [ 1067.561548][T19467] Code: 89 e2 48 89 df 48 c7 c6 c0 e0 1b 8a e8 7e 7d a6 05 48 8d bb b8 00 00 00 be 08 00 00 00 e8 e6 23 2e fe f0 80 8b b8 00 00 00 04 <0f> 0b e9 12 f7 ff ff e8 72 58 e1 fd 48 8d 7b 10 48 b8 00 00 00 00 [ 1067.561573][T19467] RSP: 0018:ffffc90027a4f6c0 EFLAGS: 00010206 [ 1067.561617][T19467] RAX: 0000000000000001 RBX: ffff88802811c000 RCX: ffffffff8399191a [ 1067.561639][T19467] RDX: ffffed1005023818 RSI: 0000000000000008 RDI: ffff88802811c0b8 [ 1067.561659][T19467] RBP: 0000000000000007 R08: 0000000000000001 R09: ffff88802811c0bf [ 1067.561694][T19467] R10: ffffed1005023817 R11: 0000000000000001 R12: 0000000000000001 [ 1067.561715][T19467] R13: 0000000000001000 R14: 0000000000004000 R15: 0000000000000200 [ 1067.561744][T19467] FS: 0000000000000000(0000) GS:ffff88802cd00000(0063) knlGS:00000000f7f80b40 [ 1067.561811][T19467] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1067.561835][T19467] CR2: 0000000032822000 CR3: 000000002065b000 CR4: 0000000000150ee0 [ 1067.561869][T19467] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1067.561888][T19467] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1067.561908][T19467] Call Trace: [ 1067.561920][T19467] [ 1067.561941][T19467] f2fs_get_node_info+0x45f/0x1070 [ 1067.562013][T19467] ? f2fs_try_to_free_nats+0x360/0x360 [ 1067.562061][T19467] read_node_page+0x577/0x1190 [ 1067.562091][T19467] ? truncate_node+0x840/0x840 [ 1067.562123][T19467] ? filemap_add_folio+0x1d0/0x1d0 [ 1067.562354][T19467] ? PageHeadHuge+0x1a3/0x200 [ 1067.562437][T19467] ? pagecache_get_page+0x6b/0x290 [ 1067.562467][T19467] ? f2fs_grab_cache_page.constprop.0+0x38/0x430 [ 1067.562497][T19467] __get_node_page.part.0+0x94/0xd00 [ 1067.563103][T19467] ? do_raw_spin_unlock+0x171/0x230 [ 1067.563309][T19467] f2fs_get_node_page+0x109/0x180 [ 1067.563338][T19467] f2fs_iget+0x2a5/0x5910 [ 1067.563393][T19467] ? mark_held_locks+0x9f/0xe0 [ 1067.563438][T19467] f2fs_fill_super+0x3b5d/0x7cd0 [ 1067.563492][T19467] ? vsprintf+0x30/0x30 [ 1067.563711][T19467] ? wait_for_completion_io_timeout+0x20/0x20 [ 1067.564005][T19467] ? f2fs_commit_super+0x910/0x910 [ 1067.564040][T19467] ? set_blocksize+0x2e5/0x370 [ 1067.564109][T19467] mount_bdev+0x34d/0x410 [ 1067.564200][T19467] ? f2fs_commit_super+0x910/0x910 [ 1067.564227][T19467] ? __f2fs_commit_super+0x130/0x130 [ 1067.564251][T19467] legacy_get_tree+0x105/0x220 [ 1067.564334][T19467] vfs_get_tree+0x89/0x2f0 [ 1067.564361][T19467] path_mount+0x1320/0x1fa0 [ 1067.564391][T19467] ? kmem_cache_free+0xdd/0x5a0 [ 1067.564418][T19467] ? finish_automount+0xaf0/0xaf0 [ 1067.564436][T19467] ? putname+0xfe/0x140 [ 1067.564460][T19467] __ia32_sys_mount+0x27e/0x300 [ 1067.564476][T19467] ? __x64_sys_mount+0x300/0x300 [ 1067.564494][T19467] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1067.564527][T19467] __do_fast_syscall_32+0x65/0xf0 [ 1067.564544][T19467] do_fast_syscall_32+0x2f/0x70 [ 1067.564560][T19467] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 1067.564579][T19467] RIP: 0023:0xf7f85549 [ 1067.564632][T19467] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.564648][T19467] RSP: 002b:00000000f7f80410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1067.564667][T19467] RAX: ffffffffffffffda RBX: 00000000f7f80480 RCX: 0000000020000100 [ 1067.564689][T19467] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f7f804c0 [ 1067.564699][T19467] RBP: 00000000f7f804c0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.564710][T19467] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1067.564720][T19467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.564741][T19467] [ 1067.564773][T19467] Kernel panic - not syncing: panic_on_warn set ... [ 1067.564782][T19467] CPU: 3 PID: 19467 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-11080-g664a393a2663 #0 [ 1067.564798][T19467] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1067.564807][T19467] Call Trace: [ 1067.564878][T19467] [ 1067.564884][T19467] dump_stack_lvl+0xcd/0x134 [ 1067.565248][T19467] panic+0x2d7/0x636 [ 1067.565333][T19467] ? panic_print_sys_info.part.0+0x10b/0x10b [ 1067.565366][T19467] ? __warn.cold+0x1d9/0x2cd [ 1067.565389][T19467] ? f2fs_is_valid_blkaddr+0xea2/0x1140 [ 1067.565414][T19467] __warn.cold+0x1ea/0x2cd [ 1067.565433][T19467] ? f2fs_is_valid_blkaddr+0xea2/0x1140 [ 1067.565462][T19467] report_bug+0x1bc/0x210 [ 1067.565513][T19467] handle_bug+0x3c/0x60 [ 1067.565549][T19467] exc_invalid_op+0x14/0x40 [ 1067.565573][T19467] asm_exc_invalid_op+0x1b/0x20 [ 1067.565593][T19467] RIP: 0010:f2fs_is_valid_blkaddr+0xea2/0x1140 [ 1067.565619][T19467] Code: 89 e2 48 89 df 48 c7 c6 c0 e0 1b 8a e8 7e 7d a6 05 48 8d bb b8 00 00 00 be 08 00 00 00 e8 e6 23 2e fe f0 80 8b b8 00 00 00 04 <0f> 0b e9 12 f7 ff ff e8 72 58 e1 fd 48 8d 7b 10 48 b8 00 00 00 00 [ 1067.565638][T19467] RSP: 0018:ffffc90027a4f6c0 EFLAGS: 00010206 [ 1067.565657][T19467] RAX: 0000000000000001 RBX: ffff88802811c000 RCX: ffffffff8399191a [ 1067.565672][T19467] RDX: ffffed1005023818 RSI: 0000000000000008 RDI: ffff88802811c0b8 [ 1067.565686][T19467] RBP: 0000000000000007 R08: 0000000000000001 R09: ffff88802811c0bf [ 1067.565700][T19467] R10: ffffed1005023817 R11: 0000000000000001 R12: 0000000000000001 [ 1067.565714][T19467] R13: 0000000000001000 R14: 0000000000004000 R15: 0000000000000200 [ 1067.565735][T19467] ? f2fs_is_valid_blkaddr+0xe9a/0x1140 [ 1067.565768][T19467] f2fs_get_node_info+0x45f/0x1070 [ 1067.565795][T19467] ? f2fs_try_to_free_nats+0x360/0x360 [ 1067.565824][T19467] read_node_page+0x577/0x1190 [ 1067.565845][T19467] ? truncate_node+0x840/0x840 [ 1067.565866][T19467] ? filemap_add_folio+0x1d0/0x1d0 [ 1067.565902][T19467] ? PageHeadHuge+0x1a3/0x200 [ 1067.565925][T19467] ? pagecache_get_page+0x6b/0x290 [ 1067.565948][T19467] ? f2fs_grab_cache_page.constprop.0+0x38/0x430 [ 1067.565973][T19467] __get_node_page.part.0+0x94/0xd00 [ 1067.565994][T19467] ? do_raw_spin_unlock+0x171/0x230 [ 1067.566019][T19467] f2fs_get_node_page+0x109/0x180 [ 1067.566073][T19467] f2fs_iget+0x2a5/0x5910 [ 1067.566102][T19467] ? mark_held_locks+0x9f/0xe0 [ 1067.566140][T19467] f2fs_fill_super+0x3b5d/0x7cd0 [ 1067.566184][T19467] ? vsprintf+0x30/0x30 [ 1067.566201][T19467] ? wait_for_completion_io_timeout+0x20/0x20 [ 1067.566227][T19467] ? f2fs_commit_super+0x910/0x910 [ 1067.566265][T19467] ? set_blocksize+0x2e5/0x370 [ 1067.566297][T19467] mount_bdev+0x34d/0x410 [ 1067.566321][T19467] ? f2fs_commit_super+0x910/0x910 [ 1067.566345][T19467] ? __f2fs_commit_super+0x130/0x130 [ 1067.566366][T19467] legacy_get_tree+0x105/0x220 [ 1067.566390][T19467] vfs_get_tree+0x89/0x2f0 [ 1067.566410][T19467] path_mount+0x1320/0x1fa0 [ 1067.566433][T19467] ? kmem_cache_free+0xdd/0x5a0 [ 1067.566461][T19467] ? finish_automount+0xaf0/0xaf0 [ 1067.566485][T19467] ? putname+0xfe/0x140 [ 1067.566510][T19467] __ia32_sys_mount+0x27e/0x300 [ 1067.566551][T19467] ? __x64_sys_mount+0x300/0x300 [ 1067.566575][T19467] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1067.566604][T19467] __do_fast_syscall_32+0x65/0xf0 [ 1067.566627][T19467] do_fast_syscall_32+0x2f/0x70 [ 1067.566648][T19467] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 1067.566672][T19467] RIP: 0023:0xf7f85549 [ 1067.566691][T19467] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1067.566714][T19467] RSP: 002b:00000000f7f80410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 1067.566752][T19467] RAX: ffffffffffffffda RBX: 00000000f7f80480 RCX: 0000000020000100 [ 1067.566771][T19467] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f7f804c0 [ 1067.566785][T19467] RBP: 00000000f7f804c0 R08: 0000000000000000 R09: 0000000000000000 [ 1067.566800][T19467] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1067.566813][T19467] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1067.566846][T19467] [ 1067.571740][T19467] Kernel Offset: disabled VM DIAGNOSIS: 03:29:40 Registers: info registers vcpu 0 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cba2f RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc90000007f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cba48 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000c01c CR3=000000001bb2e000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0f02000a119b0640400086ca00d82045 XMM02=aed5765e121c194e2913f006c8078342 XMM03=4af2ab158e2db6242e0612c65d3a5e86 XMM04=37b1b41058460da8fb9a0706f5f92977 XMM05=3b3398db3945acec4b835a1e832bf2a4 XMM06=839166f1fb41454fdd408cc20f5facb6 XMM07=784bc61ae12385b671229b0959f9eb70 XMM08=887ff49ad202272e75e379eab1c94575 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cba2f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90000538f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cba48 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802cb00000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056614404 CR3=000000006c85f000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000008 XMM01=00007f6ba407e090000055d9697f6610 XMM02=00000000000003f80000000000000000 XMM03=00007f6c45cdcd6b0000000000000000 XMM04=0f02000a0202000a0000000000000000 XMM05=00000000000000000000000000000600 XMM06=14000000000000000000000000000000 XMM07=000000500000000000000000160062d9 XMM08=e84eac1e1e99fde2bb8d8061c39a804d XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000007 RBX=0000000000000340 RCX=0000000000000340 RDX=0000000000000000 RSI=ffffffff812cba2f RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc90000590f70 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812cba48 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f751e3d7800 ffffffff 00c00000 GS =0000 ffff88802cc00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7e952bd CR3=000000001c451000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a XMM01=0000000000000000000000ffff000000 XMM02=0000000000000000000000ffff000000 XMM03=303030303030303030303030203a3352 XMM04=34203031206237206438203834206466 XMM05=6666203766203231203965206230203e XMM06=38622062382030382030662065662065 XMM07=20303020383020656220303020303020 XMM08=30633131383230383838660000303931 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff8460368c RDI=ffffffff908ce3a0 RBP=ffffffff908ce360 RSP=ffffc90027a4f080 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=502033203a555043 R12=0000000000000000 R13=fffffbfff2119cbf R14=fffffbfff2119c76 R15=dffffc0000000000 RIP=ffffffff846036b3 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cd00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032822000 CR3=000000002065b000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000003fd4f83b0bc16910 XMM02=000000000000000041154a0000000000 XMM03=32322035312e322e302e303120303536 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000