last executing test programs: 23m19.454603154s ago: executing program 4 (id=446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 23m18.751974448s ago: executing program 4 (id=450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 23m15.016361194s ago: executing program 4 (id=454): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x550c, 0x0) 23m11.952130316s ago: executing program 4 (id=457): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(r0) 23m9.672248992s ago: executing program 4 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x8b27, 0x101800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 23m1.072049937s ago: executing program 4 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x8b27, 0x101800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 22m43.15455941s ago: executing program 32 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x8b27, 0x101800) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 20m28.080207269s ago: executing program 0 (id=696): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 20m21.620899s ago: executing program 0 (id=704): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 20m17.611566352s ago: executing program 0 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 20m11.109478244s ago: executing program 0 (id=714): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 20m7.980228307s ago: executing program 0 (id=723): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 20m5.125027985s ago: executing program 0 (id=726): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r0) 19m50.099406689s ago: executing program 33 (id=726): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_usb_disconnect(r0) 19m21.089647348s ago: executing program 3 (id=773): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 19m16.545565659s ago: executing program 3 (id=779): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(0x0, r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000021000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 19m12.778601916s ago: executing program 3 (id=784): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 19m10.041430452s ago: executing program 3 (id=788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e01012200907800000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 19m4.743195979s ago: executing program 3 (id=793): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x4, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffbc1203000008000000b7040000000000008500000016000000953fe4e3ebb17eb9ea859a205c244911ae23e76200c09aef71ea313f864a70f95ac0d9c6c38ba2ef97efc5d1f44a4c72ee38d4eae50dfdc6aad4c9abf540"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 19m0.77576022s ago: executing program 3 (id=797): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(r0) 18m43.597610998s ago: executing program 34 (id=797): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) syz_usb_disconnect(r0) 17m30.268190805s ago: executing program 7 (id=899): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000021000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff0500030001000000060001000200000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e05000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000058000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414410500030010000000060001000200000008000200ac1e00010500030001000000f4000080060001000200000008000200640101000500030002000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414270500030000000000060001000a0000001400020020010000000000000000000000000002050003000100000058000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe8000000000000000000000000000140500030000000000060001000200000008000200e0000001050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030006000000060006004e24000008000100", @ANYRES32=r7], 0x10e0}}, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) 17m25.869264345s ago: executing program 7 (id=900): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5510, &(0x7f0000002600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) fchown(r0, 0x0, 0xee01) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) close(r6) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17m18.890863516s ago: executing program 7 (id=911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 17m12.194761132s ago: executing program 7 (id=917): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) fchown(r0, 0x0, 0xee01) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 17m9.32099967s ago: executing program 7 (id=918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c200000308004518001c00670001000290787f000001ac1e0101220090"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00'}, 0x18) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 17m4.547153197s ago: executing program 7 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x8b27, 0x101800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 16m49.437335383s ago: executing program 35 (id=923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000003c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0), 0x8b27, 0x101800) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x200, 0xc8, 0x8, 0x200, 0x5803, 0x360, 0x2e8, 0x2e8, 0x360, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [0x0, 0x0, 0xffffff00], [], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x32}, 0x0, 0x198, 0x200, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1b, 0x2}}, @common=@ah={{0x30}, {[0x0, 0x4d5]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x100, 0x8, 0x8, '\x00', 'syz1\x00', {0xe}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 2m37.622139141s ago: executing program 6 (id=9690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000728000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000320000/0x2000)=nil) r4 = socket(0x10, 0x2, 0x0) r5 = dup2(r4, r4) sendto$inet6(r5, &(0x7f0000000000)="7800000018001f05b9409b0dffff000d0203be040205060506014007430008003f000000fac8388827a685a168d9a4c6040045653600648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902003a03004a32000400160012000a00000000000000000000080756ede4ccbe5880", 0x78, 0x0, 0x0, 0x0) 2m36.67590077s ago: executing program 6 (id=9695): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 2m35.815554796s ago: executing program 6 (id=9699): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x26ead31a, 0x8000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) pwritev2(r4, &(0x7f0000001180)=[{&(0x7f0000001080)='M', 0x1}], 0x1, 0xe94, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x40884) 2m33.768884407s ago: executing program 6 (id=9705): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1, 0x22d, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x1a0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m33.427409313s ago: executing program 6 (id=9706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x3976488, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x240, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2m33.269087316s ago: executing program 6 (id=9708): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2m33.227544067s ago: executing program 36 (id=9708): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.190561058s ago: executing program 5 (id=10598): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x4, "a454e659"}, @main=@item_012={0x1, 0x0, 0x1a, '^'}, @global=@item_012={0x2, 0x1, 0x2, 's>'}, @global=@item_4={0x3, 0x1, 0x0, "231dae01"}]}}, 0x0}, 0x0) 3.670653999s ago: executing program 2 (id=10608): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x44, 0x4) 3.629362309s ago: executing program 2 (id=10609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000001b00)={@local, @empty, @void, {@llc_tr={0x11, {@llc={0xf4, 0xf0, "c1"}}}}}, 0x0) 3.467670233s ago: executing program 2 (id=10612): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c8}}, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000d40)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES64, @ANYRES16, @ANYRES8], 0x40, 0x2f6, &(0x7f0000000e40)="$eJzs3M9r02AYwPGnXbd2HVt7EEFF9qIXvYSt3oUiG4gFZa7iDxCyNdXS2JamTCri6smr/4Zjx11koPMP2MWbJy/iZRfBy0BnpU3q0i3dus4tG/1+YLzP8r5Pm+R9W54Uko37b5/ls5aW1SsSjCgJitRkSyTeiBzzoyISkIA0myF7Y8RuanJ15OeXi0pEkqnU1IxS08nZawml1Nj4h+cvly+tVUburYythmU9/njjR+Lb+tn1cxt/Zp/mLJWzVKFYUbqaK36t6HOmoTI5K68pdcc0dMtQuYJllO3+YsV5WymVqkovZEajpbJhWUovVFXeqKpKUVXKVaU/0XMFpWmaGo1K/9gcbzalg+all2Zm9GSPbzrfYx7+u7U9e8vl1ofnU729J710dPsEAABOqlb9H3bX/5vt9X/AaYPu+t9Rk1qj/r/74OGtLur/1aEO9X9xV/3vXF9IW3/WLFL/9yqye1N6aaD3+h+nRHlYwrIs25/o14+WJ5oB9T8AAAAAAAAAAAAAAAAAAAAAAKfBZr0eq9frsUYbFDtu/IWdG0Za//u9nzga7vm35zrUmHXmv0+4btyLiJhvFtILabu1+5NZyYkphkxITH4314PDjqdvpqYCqikuH81FJ39xIT3Qnj8pMYl750/a+ao9f1Ci7vyExOSMd37CM39Irlx25WsSk8/zUhRTMs11vZ3/alKpG7dTO/KHJeNxxxwAAAAAAKeRpv7xvH7XtE79dn43vw9MeF6fh+R8yN9jBwAAAACgX1jVF3ndNI3yvsE7J2Pfwd+dgV2/8mGDwQMcRbfB+2YQ6PTKkQOduiMIWs9k3nPwsDOorcv5eWbxcLsx6Mexj/tywkONRe/aEu04eGzA64TvFYSdpzI3tmzVd4y5vnLhl39r7Fi/hgAAAAAcg+2i3+89AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACgfx3H48T8PkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpPgbAAD//zi/FSY=") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x145) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r8, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000a80)={'gre0\x00', 0x0, 0x40, 0x20, 0xfffffffc, 0x3, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x64, 0x0, 0x3, 0x2b, 0x0, @rand_addr=0x64010102, @multicast1, {[@generic={0x44, 0x11, "95fbf7ca09bb223aa895477fb8fed8"}, @timestamp={0x44, 0x14, 0x4b, 0x0, 0x0, [0x8, 0xfffffff7, 0x4, 0x1]}, @timestamp_addr={0x44, 0x34, 0xda, 0x1, 0xd, [{@broadcast, 0x8}, {@multicast1, 0x4}, {@loopback, 0xe9}, {@empty}, {@multicast2, 0x4}, {@empty, 0x4}]}, @timestamp_prespec={0x44, 0x2c, 0x91, 0x3, 0x6, [{@private=0xa010102, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x401}, {@loopback, 0xf}, {@multicast2, 0x10001}, {@multicast1}]}, @lsrr={0x83, 0x7, 0xcc, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0x46, [@loopback]}, @timestamp_addr={0x44, 0x4, 0x8c, 0x1, 0xe}, @generic={0x88, 0x8, "c4d8ded7adb9"}, @ssrr={0x89, 0x1b, 0xdc, [@multicast1, @dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @private=0xa010100, @rand_addr=0x64010102, @multicast2]}, @ssrr={0x89, 0x7, 0x8c, [@loopback]}, @rr={0x7, 0xb, 0x61, [@empty, @broadcast]}]}}}}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000004af8b292e4f8a4f46dcf6f73e9f854086cd5c1b6eb77294f0e591a7f2f7231a7ff25bd7d0b0270aa135828ff637783060a0638eb26ddc84dda5076fe8e8303ee9483a79b600ecc33a88aa027efffdb2774c00e91e3431fe2dbda117ebe0bc0bb39dceb3ba5e9a0e0f2d1570ac3f84fc7709b565dd3e93cbc390fa6944fe1bbc619e3470833ff4b8e34e2a05d9a5b92d35af098c17faf"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f0000000000), &(0x7f0000000040)=r12}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r12, r10}, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88044}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)={0x2cc, 0x0, 0x0, 0x70bd26, 0x9}, 0x2cc}, 0x1, 0x0, 0x0, 0x4000010}, 0x24008811) mkdirat(r5, &(0x7f00000002c0)='./file0\x00', 0x11) 3.300603846s ago: executing program 2 (id=10617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x0, 0xc, 0x2, {0x2, 0xc}}, 0x0}, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0x14, 0xb, "afaffc46a2667c5f9b3831"}, 0x0, 0x0, 0x0, 0x0}) 2.152643608s ago: executing program 5 (id=10631): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x400, 0xfffb, 0x1}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xe64, 0x5, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r3, &(0x7f0000000840)=[{&(0x7f0000000640)=""/215, 0xd7}], 0x1, 0x2b, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 1.398902243s ago: executing program 8 (id=10639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 1.398706673s ago: executing program 8 (id=10640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e75918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000300)="6536640f01c4b887000f00d00fc79bf52f660fe5e866b9880b000066b80200000066ba000000000f3066b8010000000f01d9ba2100b8179cefd9ec0f21110f842800", 0x42}], 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x83, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)) 1.354681324s ago: executing program 8 (id=10641): symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xd6, &(0x7f0000000700)=""/214}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) llistxattr(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1.342272874s ago: executing program 8 (id=10642): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) getdents(r1, &(0x7f0000000000)=""/51, 0x33) getdents(r1, 0x0, 0x58) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r6 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xee01, 0xee01, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e23, @broadcast}}) pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 1.250913186s ago: executing program 5 (id=10643): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') openat2(r1, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) 1.250711496s ago: executing program 5 (id=10644): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x0, 0x474, &(0x7f00000000c0)="$eJzs281rHOUfAPDvTDbp+y/5SX3pixqsYvEladJae/CiKHhQEPRQjzFJS23aSBPBlqJRpB6l4L14FPoXeNKLqCfBq3qWQpFeWj2tzO5MupnOpmmTzcbs5wOTPM/M7DzPd972eebZCaBnDWd/koidEfFbRAw2s0tXGG7+u3Xj4uTfNy5OJlGvv/1X0ljv5o2Lk8Wqxed2FJlaRPp5Evsqyp07f+H0xMzM9Lk8Pzp/5oPRufMXnj91ZuLk9Mnps+PHjh05PPbi0fEX1iTOLK6bez+e3b/n9Xcvvzl5/PJ7P11NivhLcaxeLVo2Xempen3titsAdrWkk1oXK8I96cvP1v7G9T8YfXH74A3Ga591tXJAR9Xr9fpD7Rcv1IFNLIlu1wDojuKLPuv/FtM6NT02hOsvNztAWdy38qm5pBZpvk5/qX+7loYj4vjCP1eyKcrPIbZ1qFAAoKd9l7V/nqtq/6XR+lzof/kYylBE/D8iHoiIoxGxOyIejGis+3BEPHKP5ZcHSe5sf6bX7iuwFcrafy/lY1uNqRaL8eeG+vLcrkb8/cmJUzPTh/J9cjD6t2T5sWXK+P7VX7+sXtIcMSvaf9mU1aFoC+b1uFbbsvRTUxPzEy31W5Xrn0bsrbXEv7j/k8WRgKyWeyJi732WceqZb/a3WzZcHf/Aija8BuNM9a8jnm4e/4UoxV9Ilh+fHN0aM9OHRouz4k4//3LprXblt4n/yuojW5ns+G+P6uPf9MdQ0jpeO7f89rZWzLv0+xdt+5R3jz87/5MlQ9LZ+T+QvLNkOx9NzM+fG4sYSN5o5Ida54+X1hu/vX4W/8EDVfGnjXtcsSf2RUR2Ej8aEY9FxOMt964nIuJAKa7WrtuPrzz5/v3H31lZ/FPVx7/Y56XjfzsxEOU51Ym+0z98u6TQoXuJPzv+Rxqpg/mc5v1veSup193PZgAAANgc0ojYGUk6sphO05GR5m/4d8f2dGZ2bv7ZE7Mfnp1qviMwFP1p8aRrsOV56FjerS/y46X84fy58Vd92xr5kcnZmaluBw89bkeb6z/zZ1+3awd0nPe1oHet7Ppfmx8cABuL73/oXa5/6F0V179Xz6BHVH3/f9KFegDrr3T9Lzvsp2EAm0ub/n/VA/+FTtcFWF+e/0Hvcv1DT5rbFnd/Sb5jiat5Ldal0Kw707VIN18i0g1RDYkOJUo3Cr/+AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/qP+DQAA//9g7OGj") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x84) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) chdir(&(0x7f00000003c0)='./bus\x00') truncate(&(0x7f0000000080)='./file1\x00', 0x20fffffffc) 1.082814269s ago: executing program 5 (id=10648): open(0x0, 0x50500, 0x0) lseek(0xffffffffffffffff, 0x200, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x1c, r3, 0xfc5, 0xfffffffc, 0x0, {{0x11}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x42001}, 0x0) 928.851632ms ago: executing program 5 (id=10659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000002010040"]) 882.439793ms ago: executing program 37 (id=10659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x22000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000002010040"]) 403.615502ms ago: executing program 2 (id=10666): setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x28) 402.705782ms ago: executing program 8 (id=10667): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)="72d61021faa0", 0x6}], 0x2}, 0x0) 171.909447ms ago: executing program 9 (id=10668): r0 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) splice(r2, 0x0, r0, &(0x7f0000000100)=0x9, 0x1, 0x9) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) recvfrom(r3, &(0x7f0000001a80)=""/4058, 0xfda, 0xc0020447, 0x0, 0x0) 171.693857ms ago: executing program 2 (id=10670): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) gettid() syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800004, 0x30, 0xffffffffffffffff, 0xe3188000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x20000804) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 171.597937ms ago: executing program 8 (id=10671): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 171.544827ms ago: executing program 38 (id=10671): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xb, &(0x7f0000000000)={0x4, 0xfffffffe, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 149.703037ms ago: executing program 9 (id=10674): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x1c5902, 0x128) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file1', [{0x20, 'vfat\x00'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0x15) 149.407837ms ago: executing program 1 (id=10675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0xb8, r1, 0x501, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffff8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_team\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) 129.837918ms ago: executing program 9 (id=10676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/49}, 0x20) 102.645678ms ago: executing program 1 (id=10677): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000"], 0xb0) chdir(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) 102.430708ms ago: executing program 9 (id=10678): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000900)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20000, 0x10) 102.183468ms ago: executing program 1 (id=10679): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) lseek(0xffffffffffffffff, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) 59.827279ms ago: executing program 1 (id=10680): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f00000012c0)="e0093344aa2e1b4da87f0b552380", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.676379ms ago: executing program 9 (id=10681): r0 = socket(0xa, 0x3, 0x87) sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7, 0x4}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)="72d61021faa0", 0x6}], 0x2}, 0x0) 14.72959ms ago: executing program 9 (id=10682): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)=ANY=[], 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$TCSETSW2(r0, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 14.49719ms ago: executing program 1 (id=10688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0xf, &(0x7f0000000280)) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x28) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 0s ago: executing program 1 (id=10691): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x192, 0x12011}, [@IFLA_TXQLEN={0x8, 0xd, 0x400}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x8}}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) kernel console output (not intermixed with test programs): : z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1579.968656][T26866] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1579.977951][T26866] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1579.987542][T26866] bio_check_eod: 6 callbacks suppressed [ 1579.987557][T26866] syz.1.9487: attempt to access beyond end of device [ 1579.987557][T26866] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1580.006996][T26866] syz.1.9487: attempt to access beyond end of device [ 1580.006996][T26866] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1580.021441][T26866] syz.1.9487: attempt to access beyond end of device [ 1580.021441][T26866] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1580.036062][T26866] syz.1.9487: attempt to access beyond end of device [ 1580.036062][T26866] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1580.078957][ T288] pyra 0003:1E7D:2CF6.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1580.673157][ T288] pyra 0003:1E7D:2CF6.0016: couldn't init struct pyra_device [ 1580.704690][ T288] pyra 0003:1E7D:2CF6.0016: couldn't install mouse [ 1580.713185][ T288] pyra: probe of 0003:1E7D:2CF6.0016 failed with error -32 [ 1580.741136][ T288] usb 3-1: USB disconnect, device number 7 [ 1580.790913][T26873] fido_id[26873]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1580.806003][ T672] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1580.893910][T14928] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1580.942729][T26875] picdev_write: 54 callbacks suppressed [ 1580.942742][T26875] kvm: pic: non byte write [ 1580.953089][T26875] kvm: pic: non byte write [ 1580.958247][T26875] kvm: pic: non byte write [ 1580.962750][T26875] kvm: pic: non byte write [ 1580.969274][T26875] kvm: pic: non byte write [ 1580.974442][T26875] kvm: pic: non byte write [ 1580.979081][T26875] kvm: pic: non byte write [ 1580.983631][T26875] kvm: pic: non byte write [ 1580.988466][T26875] kvm: pic: non byte write [ 1580.992963][T26875] kvm: pic: non byte write [ 1580.997486][T26875] kvm: pic: single mode not supported [ 1580.997550][T26875] kvm: pic: single mode not supported [ 1581.003123][T26875] kvm: pic: single mode not supported [ 1581.008624][T26875] kvm: pic: single mode not supported [ 1581.013899][ T672] usb 9-1: Using ep0 maxpacket: 16 [ 1581.014801][T26875] kvm: pic: single mode not supported [ 1581.020069][ T60] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1581.025450][T26875] kvm: pic: level sensitive irq not supported [ 1581.032050][ T672] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.038563][T26875] kvm: pic: single mode not supported [ 1581.044481][ T672] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.055292][T26875] kvm: pic: level sensitive irq not supported [ 1581.056295][T26875] kvm: pic: single mode not supported [ 1581.060899][ T672] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1581.095956][ T672] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1581.096761][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.105068][ T672] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.125549][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.134189][ T672] usb 9-1: config 0 descriptor?? [ 1581.140847][T14928] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1581.150951][T14928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.163904][T14928] usb 6-1: config 0 descriptor?? [ 1581.225226][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 1581.239587][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1581.256805][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1581.267023][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1581.283626][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1581.293323][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.312757][ T60] usb 7-1: config 0 descriptor?? [ 1581.337461][T26882] device pim6reg1 entered promiscuous mode [ 1581.596220][T26886] 9pnet_fd: Insufficient options for proto=fd [ 1581.716293][ T672] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 1581.735188][T14928] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1581.741623][ T60] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 1581.756444][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.772895][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.780623][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.788110][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.795984][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.803384][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.810832][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.818242][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.818827][T14928] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 1581.825681][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.833372][T14928] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 1581.840687][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.848208][T14928] pyra: probe of 0003:1E7D:2CF6.0018 failed with error -32 [ 1581.854782][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.869414][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.886774][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.894333][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.901739][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.909213][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.948371][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.956026][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.963531][ T60] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 1581.970905][ T672] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 1581.978370][ T60] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0 [ 1581.986779][ T672] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 1581.997920][ T60] microsoft 0003:045E:07DA.0019: unsupported Resolution Multiplier 0 [ 1582.006460][ T672] microsoft 0003:045E:07DA.0017: unsupported Resolution Multiplier 0 [ 1582.020349][ T60] microsoft 0003:045E:07DA.0019: No inputs registered, leaving [ 1582.029733][ T672] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 1582.130762][ T60] microsoft 0003:045E:07DA.0019: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1582.148387][ T672] microsoft 0003:045E:07DA.0017: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1582.161589][ T60] microsoft 0003:045E:07DA.0019: no inputs found [ 1582.173436][ T672] microsoft 0003:045E:07DA.0017: no inputs found [ 1582.183819][ T60] microsoft 0003:045E:07DA.0019: could not initialize ff, continuing anyway [ 1582.193171][ T672] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 1582.214488][ T60] usb 7-1: USB disconnect, device number 6 [ 1582.222177][ T672] usb 9-1: USB disconnect, device number 13 [ 1582.232972][T26892] fido_id[26892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1582.263393][T26893] fido_id[26893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1582.750622][T26899] loop1: detected capacity change from 0 to 16 [ 1582.757626][T26899] erofs: (device loop1): mounted with root inode @ nid 36. [ 1584.010442][T14928] usb 6-1: USB disconnect, device number 12 [ 1584.924667][T20327] tipc: Left network mode [ 1585.385978][T26928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.401101][T26928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.409665][T26928] device bridge_slave_0 entered promiscuous mode [ 1585.426384][T26928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.440968][T26928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.448988][T26928] device bridge_slave_1 entered promiscuous mode [ 1585.532922][T26928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.540005][T26928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.547423][T26928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.554594][T26928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.574087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.581917][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.589473][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.599087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1585.607736][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.614857][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1585.625948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1585.641616][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.648821][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.668486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1585.684392][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1585.700735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1585.721041][T26928] device veth0_vlan entered promiscuous mode [ 1585.737064][T26928] device veth1_macvtap entered promiscuous mode [ 1585.748014][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1585.803754][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1585.813068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1585.821784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1586.090154][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1586.104535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1586.115521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1586.127707][T20327] device vlan2 left promiscuous mode [ 1586.134044][T20327] device veth0_to_bond left promiscuous mode [ 1586.142164][T20327] bridge1: port 2(vlan2) entered disabled state [ 1586.152925][T20327] device veth3 left promiscuous mode [ 1586.159656][T20327] bridge1: port 1(veth3) entered disabled state [ 1586.174053][T20327] device bridge_slave_1 left promiscuous mode [ 1586.181191][T20327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.194916][T20327] device bridge_slave_0 left promiscuous mode [ 1586.201940][T20327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.210865][T20327] device veth1_macvtap left promiscuous mode [ 1586.290000][T20327] device veth0_vlan left promiscuous mode [ 1586.299298][T26956] loop6: detected capacity change from 0 to 512 [ 1586.317632][T26956] EXT4-fs: Ignoring removed mblk_io_submit option [ 1586.334406][T26956] EXT4-fs: Ignoring removed mblk_io_submit option [ 1586.345240][T26956] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1586.352370][T26956] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1586.365464][T26956] EXT4-fs (loop6): 1 truncate cleaned up [ 1586.371808][T26956] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1586.402281][T19653] EXT4-fs (loop6): unmounting filesystem. [ 1586.420712][T26963] loop6: detected capacity change from 0 to 128 [ 1586.430393][T26963] ext4: Unknown parameter 'nouser_xattr' [ 1586.580187][T26968] loop2: detected capacity change from 0 to 16 [ 1586.727244][T26968] erofs: (device loop2): mounted with root inode @ nid 36. [ 1587.074074][ T869] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1588.412938][ T361] tipc: Left network mode [ 1588.432225][T26974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.439445][T26974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.447073][T26974] device bridge_slave_0 entered promiscuous mode [ 1588.454130][T26974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.462000][T26974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.471583][T26974] device bridge_slave_1 entered promiscuous mode [ 1588.475042][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.490001][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.500279][ T869] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1588.509798][ T869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.531256][ T869] usb 6-1: config 0 descriptor?? [ 1588.596196][T26974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.603345][T26974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.610691][T26974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.617753][T26974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.648880][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1588.657713][T20327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.665737][T20327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.688702][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1588.697837][T20327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.705127][T20327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1588.712821][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1588.722261][T20327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.729465][T20327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1588.747900][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1588.758052][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1588.775973][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1588.790701][T26974] device veth0_vlan entered promiscuous mode [ 1588.801491][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1588.811177][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1588.819376][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1588.837773][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1588.847784][T26974] device veth1_macvtap entered promiscuous mode [ 1588.859791][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1588.886749][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1588.943064][T27001] 9pnet_fd: Insufficient options for proto=fd [ 1588.950097][ T869] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1588.996013][ T361] device vlan2 left promiscuous mode [ 1589.003979][ T361] device veth0_to_bond left promiscuous mode [ 1589.019210][ T361] bridge2: port 2(vlan2) entered disabled state [ 1589.033594][ T361] device veth5 left promiscuous mode [ 1589.043944][ T361] bridge2: port 1(veth5) entered disabled state [ 1589.051047][ T361] device veth3 left promiscuous mode [ 1589.057100][ T361] bridge1: port 1(veth3) entered disabled state [ 1589.065052][ T361] device bridge_slave_1 left promiscuous mode [ 1589.071335][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.079432][ T361] device bridge_slave_0 left promiscuous mode [ 1589.093041][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.111494][ T361] device veth1_macvtap left promiscuous mode [ 1589.124970][ T361] device veth0_vlan left promiscuous mode [ 1589.262154][T27005] fuse: Bad value for 'fd' [ 1589.310874][T27007] loop1: detected capacity change from 0 to 16 [ 1589.339944][T27007] erofs: (device loop1): mounted with root inode @ nid 36. [ 1589.544707][ T869] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 1589.555083][ T869] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 1589.584418][ T869] pyra: probe of 0003:1E7D:2CF6.001A failed with error -71 [ 1589.605107][ T869] usb 6-1: USB disconnect, device number 13 [ 1589.652644][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1589.664672][T26999] loop2: detected capacity change from 0 to 131072 [ 1589.671157][T27017] fido_id[27017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1589.672754][T26999] F2FS-fs (loop2): invalid crc value [ 1589.701065][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1589.730941][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1589.900983][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1589.911238][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1589.920435][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1589.929756][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1589.940160][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1589.942143][T26999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1589.951905][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1589.966955][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1589.978058][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1589.987778][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1590.004670][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1590.023348][T26999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1590.027211][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1590.080297][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1590.099411][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1590.124746][T27013] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1590.182160][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1590.201649][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1590.212897][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1590.222834][T27013] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1590.232399][T27013] syz.1.9525: attempt to access beyond end of device [ 1590.232399][T27013] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1590.246371][T27013] syz.1.9525: attempt to access beyond end of device [ 1590.246371][T27013] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1590.317931][T27013] syz.1.9525: attempt to access beyond end of device [ 1590.317931][T27013] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1590.380628][T27013] syz.1.9525: attempt to access beyond end of device [ 1590.380628][T27013] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1590.529013][T27034] loop2: detected capacity change from 0 to 128 [ 1590.543456][T27032] loop8: detected capacity change from 0 to 8192 [ 1590.544457][T27034] ext4: Unknown parameter 'nouser_xattr' [ 1590.573929][ T869] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1590.573980][T27032] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1590.590505][T27032] FAT-fs (loop8): Filesystem has been set read-only [ 1590.645933][T27034] loop2: detected capacity change from 0 to 512 [ 1590.678700][T27034] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.9530: casefold flag without casefold feature [ 1590.719583][T27034] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9530: couldn't read orphan inode 15 (err -117) [ 1590.757549][T27034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1590.774740][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.793321][ T869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.826273][ T869] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1590.860480][ T869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.886428][ T869] usb 6-1: config 0 descriptor?? [ 1591.191167][T27028] loop6: detected capacity change from 0 to 131072 [ 1591.230307][T27028] F2FS-fs (loop6): invalid crc value [ 1591.247401][T27050] loop1: detected capacity change from 0 to 512 [ 1591.266451][T27028] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1591.284037][ T28] audit: type=1400 audit(1757083479.487:264): avc: denied { mounton } for pid=27049 comm="syz.1.9537" path="/53/file0/bus" dev="loop1" ino=1048691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1591.334622][T27055] loop1: detected capacity change from 0 to 16 [ 1591.345380][ T869] pyra 0003:1E7D:2CF6.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1591.347968][T27055] erofs: (device loop1): mounted with root inode @ nid 36. [ 1591.368228][T27028] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1591.431124][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1591.542708][ T869] pyra 0003:1E7D:2CF6.001B: couldn't init struct pyra_device [ 1591.551817][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.553919][ T869] pyra 0003:1E7D:2CF6.001B: couldn't install mouse [ 1591.568908][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1591.578552][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.594394][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1591.597897][ T869] pyra: probe of 0003:1E7D:2CF6.001B failed with error -32 [ 1591.605557][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1591.620583][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.698004][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1591.711764][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.721387][T25468] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1591.753924][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1591.767796][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.782570][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1591.792792][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.802590][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1591.812146][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1591.833247][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1591.842730][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1591.852158][T27061] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1591.862363][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1591.871545][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1591.907526][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1591.915035][T25468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.933953][T25468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.944391][T27061] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1591.951507][T25468] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1591.971426][T25468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.979817][T27061] syz.1.9538: attempt to access beyond end of device [ 1591.979817][T27061] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1591.997098][T27071] 9pnet_fd: Insufficient options for proto=fd [ 1592.008409][T25468] usb 3-1: config 0 descriptor?? [ 1592.030208][T27061] syz.1.9538: attempt to access beyond end of device [ 1592.030208][T27061] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1592.062140][T27061] syz.1.9538: attempt to access beyond end of device [ 1592.062140][T27061] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1592.077736][T27061] syz.1.9538: attempt to access beyond end of device [ 1592.077736][T27061] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1592.116166][T27075] loop8: detected capacity change from 0 to 512 [ 1592.151654][T27075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1592.205067][T27075] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1592.223958][T27075] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.253050][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1592.421329][T25468] pyra 0003:1E7D:2CF6.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1592.778841][T27089] picdev_write: 22 callbacks suppressed [ 1592.778862][T27089] kvm: pic: non byte write [ 1592.789639][T27089] kvm: pic: non byte write [ 1592.794315][T27089] kvm: pic: single mode not supported [ 1592.794725][T27089] kvm: pic: non byte write [ 1592.804906][T27089] kvm: pic: non byte write [ 1592.809743][T27089] kvm: pic: single mode not supported [ 1592.809754][T27089] kvm: pic: level sensitive irq not supported [ 1592.815941][T27089] kvm: pic: non byte write [ 1592.828026][T27089] kvm: pic: non byte write [ 1592.833391][T27089] kvm: pic: non byte write [ 1592.838552][T27089] kvm: pic: non byte write [ 1592.843262][T27089] kvm: pic: single mode not supported [ 1592.843554][T27089] kvm: pic: non byte write [ 1592.854005][T27089] kvm: pic: non byte write [ 1592.859160][T27089] kvm: pic: level sensitive irq not supported [ 1592.859468][T27089] kvm: pic: single mode not supported [ 1592.866126][T27089] kvm: pic: level sensitive irq not supported [ 1592.872868][T27089] kvm: pic: single mode not supported [ 1592.879147][T27089] kvm: pic: level sensitive irq not supported [ 1592.885211][T27089] kvm: pic: single mode not supported [ 1592.892150][T27089] kvm: pic: single mode not supported [ 1592.897635][T27089] kvm: pic: level sensitive irq not supported [ 1592.905515][T27089] kvm: pic: single mode not supported [ 1592.911698][T27089] kvm: pic: level sensitive irq not supported [ 1592.917731][T27089] kvm: pic: single mode not supported [ 1592.923904][T27089] kvm: pic: level sensitive irq not supported [ 1593.022853][T25468] pyra 0003:1E7D:2CF6.001C: couldn't init struct pyra_device [ 1593.036997][T25468] pyra 0003:1E7D:2CF6.001C: couldn't install mouse [ 1593.044424][T25468] pyra: probe of 0003:1E7D:2CF6.001C failed with error -32 [ 1593.054052][T25468] usb 3-1: USB disconnect, device number 8 [ 1593.108600][T27093] fido_id[27093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1593.288011][T25468] usb 6-1: USB disconnect, device number 14 [ 1593.572122][T27104] loop8: detected capacity change from 0 to 40427 [ 1593.579541][T27104] F2FS-fs (loop8): fault_injection options not supported [ 1593.587428][T27104] F2FS-fs (loop8): invalid crc value [ 1593.626105][T27104] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1593.666128][T27104] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1594.791140][T27115] 9pnet_fd: Insufficient options for proto=fd [ 1594.829684][T27117] loop1: detected capacity change from 0 to 128 [ 1594.830332][T26974] syz-executor: attempt to access beyond end of device [ 1594.830332][T26974] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1594.839266][T27117] ext4: Unknown parameter 'nouser_xattr' [ 1594.876507][T27117] loop1: detected capacity change from 0 to 512 [ 1594.909060][T27117] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9556: casefold flag without casefold feature [ 1594.934081][T27117] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9556: couldn't read orphan inode 15 (err -117) [ 1594.989492][T27117] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1595.166564][T27102] loop5: detected capacity change from 0 to 131072 [ 1595.176658][T27102] F2FS-fs (loop5): invalid crc value [ 1595.183524][T27102] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1595.428457][T27102] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 1596.347761][T27142] device erspan1 entered promiscuous mode [ 1596.848297][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1596.879512][T27150] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9564'. [ 1597.561145][T27165] loop6: detected capacity change from 0 to 40427 [ 1597.576992][T27165] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1597.593944][T27165] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1597.614664][T27165] F2FS-fs (loop6): invalid crc value [ 1597.628659][T27172] 9pnet_fd: Insufficient options for proto=fd [ 1597.641223][T27165] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1597.692647][T27165] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1597.700027][T27165] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1597.927530][T27160] loop2: detected capacity change from 0 to 131072 [ 1597.937932][T27160] F2FS-fs (loop2): invalid crc value [ 1597.974802][T27160] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1598.042791][T27160] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1598.145809][T27190] overlayfs: conflicting lowerdir path [ 1598.915921][T27206] loop8: detected capacity change from 0 to 40427 [ 1598.938302][T27206] F2FS-fs (loop8): fault_injection options not supported [ 1598.946286][T27206] F2FS-fs (loop8): invalid crc value [ 1598.964728][T27206] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1598.991269][T27206] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1599.053688][T27217] device erspan1 entered promiscuous mode [ 1599.178382][T27222] loop1: detected capacity change from 0 to 512 [ 1599.465574][T27222] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1599.594413][ T535] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1600.110897][T27227] loop2: detected capacity change from 0 to 40427 [ 1600.118596][T27227] F2FS-fs (loop2): fault_injection options not supported [ 1600.129250][T27227] F2FS-fs (loop2): invalid crc value [ 1600.129707][T26974] syz-executor: attempt to access beyond end of device [ 1600.129707][T26974] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1600.165678][T27227] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1600.167521][T27222] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1600.197163][T27222] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.217725][T27227] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1600.236875][ T535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.308326][ T535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.328400][ T535] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1600.331209][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1600.343673][ T535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.362983][ T535] usb 7-1: config 0 descriptor?? [ 1601.321478][T25577] syz-executor: attempt to access beyond end of device [ 1601.321478][T25577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1601.336094][ T535] pyra 0003:1E7D:2CF6.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 1601.519505][ T535] pyra 0003:1E7D:2CF6.001D: couldn't init struct pyra_device [ 1601.536153][ T535] pyra 0003:1E7D:2CF6.001D: couldn't install mouse [ 1601.615294][ T535] pyra: probe of 0003:1E7D:2CF6.001D failed with error -5 [ 1602.090920][T27251] loop8: detected capacity change from 0 to 40427 [ 1602.098154][T27251] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1602.107788][T27251] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1602.117295][T27251] F2FS-fs (loop8): invalid crc value [ 1602.138620][T27251] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1602.173367][T27251] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1602.182664][T27251] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1602.323034][T27241] loop1: detected capacity change from 0 to 131072 [ 1602.332354][T27241] F2FS-fs (loop1): invalid crc value [ 1602.386456][T27241] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1602.408615][T27241] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1602.669427][T27274] overlayfs: conflicting lowerdir path [ 1602.842710][ T60] usb 7-1: USB disconnect, device number 7 [ 1602.863178][T27281] loop6: detected capacity change from 0 to 512 [ 1602.880209][T27281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1603.391877][T27287] loop5: detected capacity change from 0 to 16 [ 1603.405609][T27287] erofs: (device loop5): mounted with root inode @ nid 36. [ 1603.440510][T27281] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1603.459889][T27281] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.490202][T19653] EXT4-fs (loop6): unmounting filesystem. [ 1603.556826][T27296] 9pnet_fd: Insufficient options for proto=fd [ 1603.651979][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.661416][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1603.670852][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.680365][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1603.689627][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1603.698773][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.708136][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1603.717810][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.727312][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1603.736503][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.745880][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1603.755117][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.755893][T27303] loop8: detected capacity change from 0 to 8192 [ 1603.764567][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1603.764608][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1603.764624][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1603.764694][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1603.807856][T27302] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1603.817210][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1603.826418][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1603.835486][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1603.844690][T27302] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1603.853909][T27302] syz.5.9600: attempt to access beyond end of device [ 1603.853909][T27302] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1603.867732][T27302] syz.5.9600: attempt to access beyond end of device [ 1603.867732][T27302] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1603.882291][T27302] syz.5.9600: attempt to access beyond end of device [ 1603.882291][T27302] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1603.896797][T27302] syz.5.9600: attempt to access beyond end of device [ 1603.896797][T27302] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1604.048248][ T60] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1604.414865][T27317] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1604.423694][T27317] FAT-fs (loop8): Filesystem has been set read-only [ 1604.483865][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 1604.490381][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1604.502061][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1604.512311][ T60] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1604.526771][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1604.543773][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.557255][ T60] usb 7-1: config 0 descriptor?? [ 1605.036408][ T60] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 1605.046302][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.053665][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.061244][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.068678][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.076230][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.083614][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.091221][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.122456][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.140250][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.148319][ T60] microsoft 0003:045E:07DA.001E: unknown main item tag 0x0 [ 1605.166719][ T60] microsoft 0003:045E:07DA.001E: unsupported Resolution Multiplier 0 [ 1605.206846][ T60] microsoft 0003:045E:07DA.001E: unsupported Resolution Multiplier 0 [ 1605.218805][ T60] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 1605.234175][ T60] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1605.265074][ T60] microsoft 0003:045E:07DA.001E: no inputs found [ 1605.274064][ T60] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 1605.484295][ T535] usb 7-1: USB disconnect, device number 8 [ 1605.745295][T27337] 9pnet_fd: Insufficient options for proto=fd [ 1605.929990][T27343] loop8: detected capacity change from 0 to 16 [ 1605.941506][T27341] loop5: detected capacity change from 0 to 40427 [ 1605.953228][T27341] F2FS-fs (loop5): fault_injection options not supported [ 1605.962712][T27341] F2FS-fs (loop5): invalid crc value [ 1605.967106][T27343] erofs: (device loop8): mounted with root inode @ nid 36. [ 1605.993397][T27341] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1606.015260][T27331] loop2: detected capacity change from 0 to 131072 [ 1606.049322][T27348] loop6: detected capacity change from 0 to 512 [ 1606.073963][T27341] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1606.085997][T27331] F2FS-fs (loop2): invalid crc value [ 1606.111399][T27331] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1606.188052][T27331] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1607.185231][T27357] loop6: detected capacity change from 0 to 8192 [ 1607.192209][T26928] syz-executor: attempt to access beyond end of device [ 1607.192209][T26928] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1608.038688][T27367] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1608.048460][T27367] FAT-fs (loop6): Filesystem has been set read-only [ 1608.364515][T14928] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1608.394343][T14928] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1608.539697][T27381] device syzkaller0 entered promiscuous mode [ 1608.555249][T27377] fido_id[27377]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1608.962092][T27372] loop6: detected capacity change from 0 to 40427 [ 1608.971444][T27389] loop1: detected capacity change from 0 to 128 [ 1608.972900][T27372] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 1608.986180][T27389] ext4: Unknown parameter 'nouser_xattr' [ 1608.992042][T27372] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1609.024202][T27372] F2FS-fs (loop6): invalid crc value [ 1609.119314][T27389] loop1: detected capacity change from 0 to 512 [ 1609.217661][T27389] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9628: casefold flag without casefold feature [ 1609.231647][T27372] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1609.249827][T27389] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9628: couldn't read orphan inode 15 (err -117) [ 1609.283672][T27389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1609.290350][ T60] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1609.311367][T27372] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1609.318786][T27372] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1609.953916][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 1609.965512][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1609.977099][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1609.988184][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1610.002121][ T60] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1610.012259][ T60] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.024503][ T60] usb 9-1: config 0 descriptor?? [ 1610.214323][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1610.230219][T27407] overlayfs: conflicting lowerdir path [ 1610.439346][ T60] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 1610.466865][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.474358][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.481753][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.490358][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.500147][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.508162][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.516066][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.524089][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.531872][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.540419][ T60] microsoft 0003:045E:07DA.0020: unknown main item tag 0x0 [ 1610.549140][ T60] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 1610.635984][ T60] microsoft 0003:045E:07DA.0020: unsupported Resolution Multiplier 0 [ 1610.682003][ T60] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 1610.714706][ T60] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1610.753441][ T60] microsoft 0003:045E:07DA.0020: no inputs found [ 1610.763948][ T60] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 1611.142616][ T4312] usb 9-1: USB disconnect, device number 14 [ 1611.294213][T14928] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1612.435755][T27402] loop2: detected capacity change from 0 to 131072 [ 1612.460033][T27402] F2FS-fs (loop2): invalid crc value [ 1612.481168][T27402] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1612.515028][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.527235][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1612.537446][T14928] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1612.554499][T14928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.564263][T14928] usb 6-1: config 0 descriptor?? [ 1612.632562][T27437] loop1: detected capacity change from 0 to 512 [ 1612.645576][T27437] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1612.665940][T27437] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1612.785106][T27437] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.944955][T27443] loop8: detected capacity change from 0 to 16 [ 1612.979782][T27443] erofs: (device loop8): mounted with root inode @ nid 36. [ 1612.989260][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1613.051788][T27447] loop2: detected capacity change from 0 to 128 [ 1613.060717][T27447] ext4: Unknown parameter 'nouser_xattr' [ 1613.075450][T14928] pyra 0003:1E7D:2CF6.0021: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1613.102224][T27447] loop2: detected capacity change from 0 to 512 [ 1613.117999][T27447] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.9645: casefold flag without casefold feature [ 1613.130966][T27447] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9645: couldn't read orphan inode 15 (err -117) [ 1613.143268][T27447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1613.227481][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.237610][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1613.273693][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.284282][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1613.340315][T27457] fuse: Bad value for 'fd' [ 1613.355053][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1613.563737][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.573436][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1613.582815][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.592426][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1613.602080][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.612629][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1613.621938][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.631861][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1613.641082][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1613.658778][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1613.680640][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1613.704026][T27453] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1613.714015][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1613.736271][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1613.749088][T14928] pyra 0003:1E7D:2CF6.0021: couldn't init struct pyra_device [ 1613.758674][T14928] pyra 0003:1E7D:2CF6.0021: couldn't install mouse [ 1613.776382][T14928] pyra: probe of 0003:1E7D:2CF6.0021 failed with error -5 [ 1613.803917][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1613.877718][T27453] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1613.924727][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1613.955054][T14928] usb 6-1: USB disconnect, device number 15 [ 1614.034888][T27453] syz.8.9643: attempt to access beyond end of device [ 1614.034888][T27453] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1614.069219][T27453] syz.8.9643: attempt to access beyond end of device [ 1614.069219][T27453] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1614.116467][T27453] syz.8.9643: attempt to access beyond end of device [ 1614.116467][T27453] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1614.237093][T27453] syz.8.9643: attempt to access beyond end of device [ 1614.237093][T27453] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1614.554549][T27471] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9650'. [ 1615.336246][T27473] loop5: detected capacity change from 0 to 40427 [ 1615.349922][T27473] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1615.366536][T27473] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1615.384442][T27473] F2FS-fs (loop5): invalid crc value [ 1615.487279][T27462] loop1: detected capacity change from 0 to 131072 [ 1615.495238][T27462] F2FS-fs (loop1): invalid crc value [ 1615.519084][T27473] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1615.557235][T27462] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1615.558881][T27473] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1615.844032][T27473] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1616.080501][T27462] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1616.162186][T27510] loop8: detected capacity change from 0 to 16 [ 1616.172423][T27510] erofs: (device loop8): mounted with root inode @ nid 36. [ 1616.822606][T27512] overlayfs: conflicting lowerdir path [ 1617.143417][T27520] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1617.154283][T27520] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1617.207643][T27520] erofs: (device loop8): z_erofs_read_folio: failed to read, err [-117] [ 1617.578203][T27526] loop1: detected capacity change from 0 to 16 [ 1617.609864][T27526] erofs: (device loop1): mounted with root inode @ nid 36. [ 1617.879930][T27533] loop6: detected capacity change from 0 to 128 [ 1617.897059][T27533] ext4: Unknown parameter 'nouser_xattr' [ 1618.054494][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.084019][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1618.120390][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.418037][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1618.481836][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1618.507972][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.537886][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1618.564318][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.584876][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1618.610596][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.643735][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1618.678046][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.696723][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1618.784146][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1618.803952][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1618.813096][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1618.875712][T27538] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1618.885700][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1618.897325][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1618.907237][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1618.916743][T27538] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1618.968802][T27553] loop8: detected capacity change from 0 to 16 [ 1619.052328][T27538] syz.1.9663: attempt to access beyond end of device [ 1619.052328][T27538] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1619.158914][T27553] erofs: (device loop8): mounted with root inode @ nid 36. [ 1619.178202][T27538] syz.1.9663: attempt to access beyond end of device [ 1619.178202][T27538] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1619.193895][T27538] syz.1.9663: attempt to access beyond end of device [ 1619.193895][T27538] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1619.234114][T27538] syz.1.9663: attempt to access beyond end of device [ 1619.234114][T27538] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1619.396899][T27556] loop5: detected capacity change from 0 to 40427 [ 1619.406935][T27556] F2FS-fs (loop5): fault_injection options not supported [ 1619.415032][T27556] F2FS-fs (loop5): invalid crc value [ 1619.451394][T27556] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1619.512481][T27556] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1621.512838][T26928] syz-executor: attempt to access beyond end of device [ 1621.512838][T26928] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1622.489106][T27595] loop5: detected capacity change from 0 to 128 [ 1622.504684][T27595] ext4: Unknown parameter 'nouser_xattr' [ 1622.625105][T27578] loop1: detected capacity change from 0 to 131072 [ 1622.635801][T27578] F2FS-fs (loop1): invalid crc value [ 1622.643096][T27578] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1622.671848][T27578] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1623.053930][ T4312] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1624.043894][ T4312] usb 9-1: Using ep0 maxpacket: 16 [ 1624.060433][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1624.079417][ T4312] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1624.095779][ T4312] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1624.131287][ T4312] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1624.148169][ T4312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.164048][ T4312] usb 9-1: config 0 descriptor?? [ 1624.812818][T27637] loop6: detected capacity change from 0 to 512 [ 1624.825009][T27637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1624.838209][T27637] EXT4-fs (loop6): 1 truncate cleaned up [ 1624.844287][T27637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1624.856797][ T4312] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max [ 1624.866973][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.878264][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.885843][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.950367][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.962525][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.970379][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.981422][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.988912][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1624.996505][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1625.004420][ T4312] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 1625.011796][ T4312] microsoft 0003:045E:07DA.0022: unsupported Resolution Multiplier 0 [ 1626.776535][ T4312] microsoft 0003:045E:07DA.0022: unsupported Resolution Multiplier 0 [ 1626.802757][ T4312] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 1626.811971][ T4312] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1626.844442][T19653] EXT4-fs (loop6): unmounting filesystem. [ 1626.853689][T27655] loop1: detected capacity change from 0 to 512 [ 1626.863006][T27654] loop2: detected capacity change from 0 to 128 [ 1626.869627][ T4312] microsoft 0003:045E:07DA.0022: no inputs found [ 1626.876720][ T4312] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 1626.904141][T27654] ext4: Unknown parameter 'nouser_xattr' [ 1626.906086][T27657] loop6: detected capacity change from 0 to 512 [ 1626.934121][ T4312] usb 9-1: USB disconnect, device number 15 [ 1626.975945][T27655] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.9703: Invalid inode bitmap blk 4 in block_group 0 [ 1627.029207][T27659] fido_id[27659]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1627.144605][T27655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1627.258723][T20327] FAT-fs (loop6): Invalid FSINFO signature: 0x28c2ff80, 0x00000000 (sector = 1) [ 1627.268151][T27655] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1627.290061][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1627.311357][T20327] tipc: Left network mode [ 1627.747592][T27673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1627.759800][T27647] loop5: detected capacity change from 0 to 131072 [ 1627.786727][T27673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.802192][T27647] F2FS-fs (loop5): invalid crc value [ 1627.815788][T27673] device bridge_slave_0 entered promiscuous mode [ 1627.831221][T27673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.016262][T27673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.039845][T27647] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1628.125165][T27673] device bridge_slave_1 entered promiscuous mode [ 1628.332384][T20327] device veth5 left promiscuous mode [ 1628.338034][T20327] bridge1: port 1(veth5) entered disabled state [ 1628.348379][T20327] device veth3 left promiscuous mode [ 1628.359380][T20327] bridge0: port 1(veth3) entered disabled state [ 1628.375437][T20327] device veth1_macvtap left promiscuous mode [ 1628.387064][T20327] device veth0_vlan left promiscuous mode [ 1628.693232][T27707] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1628.747984][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1628.756108][T27709] loop8: detected capacity change from 0 to 16 [ 1628.764209][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1628.779284][T27709] erofs: (device loop8): mounted with root inode @ nid 36. [ 1628.780513][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1628.794039][T27705] loop2: detected capacity change from 0 to 40427 [ 1628.799063][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1628.822758][T27705] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1628.824584][ T813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.838403][ T813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.841260][T27705] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1628.849878][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1628.865674][ T4312] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1628.874014][ T889] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1628.883448][T27705] F2FS-fs (loop2): invalid crc value [ 1628.883487][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1628.898506][ T813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.905593][ T813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1628.909237][T27705] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1628.928260][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1628.936845][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1628.947297][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1628.948213][T27705] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1628.955933][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1628.963512][T27705] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1628.982649][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1628.999635][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1629.022952][ T813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1629.034793][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.044982][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1629.054613][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.065091][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1629.075277][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1629.084721][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.094194][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1629.103433][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.113908][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1629.114955][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.123105][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.123133][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1629.123158][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.123171][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1629.147613][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.153913][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1629.153944][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1629.154017][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1629.212438][T27715] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1629.222136][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1629.231476][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1629.240796][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1629.250652][ T889] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1629.250657][T27715] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1629.250782][T27715] syz.8.9720: attempt to access beyond end of device [ 1629.250782][T27715] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1629.265936][ T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.270396][T27715] syz.8.9720: attempt to access beyond end of device [ 1629.270396][T27715] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1629.307571][T27715] syz.8.9720: attempt to access beyond end of device [ 1629.307571][T27715] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1629.322714][T27715] syz.8.9720: attempt to access beyond end of device [ 1629.322714][T27715] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1629.356603][T27717] overlayfs: failed to resolve './bus': -2 [ 1629.411077][ T889] usb 6-1: config 0 descriptor?? [ 1629.535877][T27673] device veth0_vlan entered promiscuous mode [ 1629.572205][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1629.581159][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 1629.588448][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1629.596844][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.608565][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1629.616064][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.626390][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1629.634015][ T4312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1629.644649][T27673] device veth1_macvtap entered promiscuous mode [ 1629.664390][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1629.673332][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1629.673951][ T4312] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1629.682996][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1629.709848][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1629.714000][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.726554][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1629.739288][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1629.744648][ T4312] usb 2-1: config 0 descriptor?? [ 1629.754205][T20327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1629.833018][ T889] pyra 0003:1E7D:2CF6.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1630.031960][ T889] pyra 0003:1E7D:2CF6.0023: couldn't init struct pyra_device [ 1630.044333][ T889] pyra 0003:1E7D:2CF6.0023: couldn't install mouse [ 1630.286262][ T889] pyra: probe of 0003:1E7D:2CF6.0023 failed with error -5 [ 1630.286755][ T4312] microsoft 0003:045E:07DA.0024: ignoring exceeding usage max [ 1630.316587][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.336237][T27740] fuse: Bad value for 'fd' [ 1630.343576][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.352166][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.367512][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.378202][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.385980][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.393793][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.402244][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.410500][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.422240][ T4312] microsoft 0003:045E:07DA.0024: unknown main item tag 0x0 [ 1630.430687][ T4312] microsoft 0003:045E:07DA.0024: unsupported Resolution Multiplier 0 [ 1630.448843][ T4312] microsoft 0003:045E:07DA.0024: unsupported Resolution Multiplier 0 [ 1630.457972][ T4312] microsoft 0003:045E:07DA.0024: No inputs registered, leaving [ 1630.474139][ T4312] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1630.486003][ T4312] microsoft 0003:045E:07DA.0024: no inputs found [ 1630.492647][ T4312] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 1630.751967][ T4312] usb 2-1: USB disconnect, device number 12 [ 1630.831314][T27746] fido_id[27746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1631.045367][T27755] loop9: detected capacity change from 0 to 512 [ 1631.066831][T27755] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.9732: Invalid inode bitmap blk 4 in block_group 0 [ 1631.080140][T27755] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1631.096007][T27755] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1631.110993][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1631.156392][T27751] loop2: detected capacity change from 0 to 40427 [ 1631.168957][T27751] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1631.177208][T27751] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1631.197009][T27751] F2FS-fs (loop2): invalid crc value [ 1631.257905][T27751] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1631.295525][T27751] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1631.295885][T27759] loop9: detected capacity change from 0 to 40427 [ 1631.303355][T27751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1631.319300][T27759] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1631.360630][T27759] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1631.385102][T27759] F2FS-fs (loop9): invalid crc value [ 1631.421331][T27759] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1631.459651][T27759] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1631.468287][T27759] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1631.506549][T27778] overlayfs: failed to resolve './bus': -2 [ 1631.534905][T27782] loop1: detected capacity change from 0 to 16 [ 1631.542148][T27782] erofs: (device loop1): mounted with root inode @ nid 36. [ 1631.602076][ T4312] usb 6-1: USB disconnect, device number 16 [ 1632.927888][T27793] overlayfs: conflicting lowerdir path [ 1633.283627][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.326744][T27800] loop5: detected capacity change from 0 to 8192 [ 1633.441530][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1633.664995][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.687497][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1633.703623][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1633.712930][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.722636][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1633.734336][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.743861][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1633.753044][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.762523][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1633.771656][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.781261][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1633.798640][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1633.818102][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1633.827517][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1633.837779][T27806] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1633.847334][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1633.857367][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1633.867342][T27819] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1633.876331][T27819] FAT-fs (loop5): Filesystem has been set read-only [ 1633.885282][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1633.895318][T27806] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1633.905659][T27806] syz.1.9738: attempt to access beyond end of device [ 1633.905659][T27806] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1633.919597][T27806] syz.1.9738: attempt to access beyond end of device [ 1633.919597][T27806] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1633.969158][T27806] syz.1.9738: attempt to access beyond end of device [ 1633.969158][T27806] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1633.984272][T27806] syz.1.9738: attempt to access beyond end of device [ 1633.984272][T27806] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1635.514076][T27849] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1635.556168][T27850] loop5: detected capacity change from 0 to 8192 [ 1637.082932][T27866] loop9: detected capacity change from 0 to 512 [ 1637.116629][T27866] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.9762: Invalid inode bitmap blk 4 in block_group 0 [ 1637.171021][T27835] loop2: detected capacity change from 0 to 40427 [ 1637.193435][T27835] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1637.210949][T27835] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1637.475550][T27874] device erspan1 entered promiscuous mode [ 1637.867949][T27875] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1637.876539][T27875] FAT-fs (loop5): Filesystem has been set read-only [ 1638.016865][T27866] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1638.107982][T27866] EXT4-fs (loop9): re-mounted. Quota mode: writeback. [ 1638.118630][T27835] F2FS-fs (loop2): invalid crc value [ 1638.125827][T27835] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-4) [ 1638.152537][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1638.219859][T27889] loop1: detected capacity change from 0 to 2048 [ 1638.271855][T27889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1638.304814][T26208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1638.320064][T26208] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1638.339276][T27898] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1638.377106][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1639.357142][ T3957] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1639.608817][ T3957] usb 6-1: Using ep0 maxpacket: 16 [ 1639.615162][ T3957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.636383][ T3957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.681808][ T3957] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1640.695154][ T3957] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1640.706251][ T3957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.763768][T27930] loop2: detected capacity change from 0 to 512 [ 1640.770180][ T3957] usb 6-1: config 0 descriptor?? [ 1640.824545][T27930] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.9779: Invalid inode bitmap blk 4 in block_group 0 [ 1640.837806][T27930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1641.078615][T27930] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1641.114039][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1641.155569][T27926] loop1: detected capacity change from 0 to 40427 [ 1641.170611][T27926] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1641.204522][T27926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1641.213652][T27926] F2FS-fs (loop1): invalid crc value [ 1641.224588][T27926] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1641.259695][T27926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1641.264854][ T3957] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 1641.267593][T27926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1641.295377][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.302634][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.323884][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.331208][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.344537][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.352399][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.359991][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.367664][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.439209][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.446982][ T3957] microsoft 0003:045E:07DA.0025: unknown main item tag 0x0 [ 1641.454505][ T3957] microsoft 0003:045E:07DA.0025: unsupported Resolution Multiplier 0 [ 1641.475737][ T3957] microsoft 0003:045E:07DA.0025: unsupported Resolution Multiplier 0 [ 1641.487915][ T3957] microsoft 0003:045E:07DA.0025: No inputs registered, leaving [ 1641.499910][T27949] overlayfs: failed to resolve './bus': -2 [ 1641.506575][ T3957] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1641.521806][ T3957] microsoft 0003:045E:07DA.0025: no inputs found [ 1641.528447][ T3957] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 1641.752774][ T3957] usb 6-1: USB disconnect, device number 17 [ 1643.206395][T27981] loop5: detected capacity change from 0 to 512 [ 1643.239887][T27981] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.9793: Invalid inode bitmap blk 4 in block_group 0 [ 1643.258368][T27981] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1643.316568][T27981] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1643.338195][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1643.346682][T27992] loop1: detected capacity change from 0 to 512 [ 1643.363767][T27992] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1643.434700][T27992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1643.465351][T27992] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1643.538149][T28000] loop5: detected capacity change from 0 to 40427 [ 1643.545908][T28000] F2FS-fs (loop5): fault_injection options not supported [ 1643.554770][T28000] F2FS-fs (loop5): invalid crc value [ 1643.574813][T28000] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1643.608316][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1643.619085][T28000] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1644.214956][T28022] loop1: detected capacity change from 0 to 512 [ 1644.234109][ T889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1644.510526][T28022] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1644.529593][T28022] EXT4-fs (loop1): 1 truncate cleaned up [ 1644.535650][T28022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1644.664974][ T889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.683409][ T889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.096274][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1645.102730][ T889] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1645.115365][T28034] loop1: detected capacity change from 0 to 512 [ 1645.134697][ T889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.162815][T28034] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.9809: Invalid inode bitmap blk 4 in block_group 0 [ 1645.179429][ T889] usb 3-1: config 0 descriptor?? [ 1645.192617][T28034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1645.220567][T28034] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1645.249960][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1645.317165][T28044] loop9: detected capacity change from 0 to 512 [ 1645.348168][T28044] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1645.386481][T28044] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1645.396984][T28044] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1645.426295][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1645.435831][T28050] netlink: 136 bytes leftover after parsing attributes in process `syz.8.9813'. [ 1645.445436][T28050] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1645.599264][ T889] pyra 0003:1E7D:2CF6.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1645.798296][ T889] pyra 0003:1E7D:2CF6.0026: couldn't init struct pyra_device [ 1645.806019][ T889] pyra 0003:1E7D:2CF6.0026: couldn't install mouse [ 1645.816563][ T889] pyra: probe of 0003:1E7D:2CF6.0026 failed with error -5 [ 1646.443554][T28078] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1646.613867][ T4312] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1646.693884][ T889] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1646.803870][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 1646.810180][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.821266][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.831190][ T4312] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1646.844176][ T4312] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1646.853210][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.862262][ T4312] usb 2-1: config 0 descriptor?? [ 1646.875005][ T889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1646.886236][ T889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1646.896491][ T889] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1646.905607][ T889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.914488][ T889] usb 9-1: config 0 descriptor?? [ 1647.019878][T28084] loop5: detected capacity change from 0 to 8192 [ 1647.024719][ T4152] usb 3-1: USB disconnect, device number 9 [ 1647.230928][T28095] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1647.249426][T28095] FAT-fs (loop5): Filesystem has been set read-only [ 1647.270911][ T4312] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 1647.280703][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.288229][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.295896][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.310964][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.323177][ T889] pyra 0003:1E7D:2CF6.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 1647.325913][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.350278][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.365816][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.380911][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.401929][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.411721][ T4312] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1647.424179][ T4312] microsoft 0003:045E:07DA.0027: unsupported Resolution Multiplier 0 [ 1647.480316][ T4312] microsoft 0003:045E:07DA.0027: No inputs registered, leaving [ 1647.492194][ T4312] microsoft 0003:045E:07DA.0027: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1647.515769][ T4312] microsoft 0003:045E:07DA.0027: no inputs found [ 1647.528800][ T4312] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 1647.719063][T28101] device erspan1 entered promiscuous mode [ 1647.848642][ T4312] usb 2-1: USB disconnect, device number 13 [ 1647.896486][T28102] fido_id[28102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1648.088698][ T889] pyra 0003:1E7D:2CF6.0028: couldn't init struct pyra_device [ 1648.098955][ T889] pyra 0003:1E7D:2CF6.0028: couldn't install mouse [ 1648.107536][ T889] pyra: probe of 0003:1E7D:2CF6.0028 failed with error -5 [ 1648.118715][T28106] loop2: detected capacity change from 0 to 2048 [ 1648.387330][ T869] usb 9-1: USB disconnect, device number 16 [ 1648.432578][T28106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1648.443599][T28107] fido_id[28107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1648.487077][T25577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1648.502143][T25577] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1648.510496][T28120] loop9: detected capacity change from 0 to 128 [ 1648.518001][T28120] ext4: Unknown parameter 'nouser_xattr' [ 1648.535863][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1648.564484][T28120] loop9: detected capacity change from 0 to 512 [ 1648.608847][T28120] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.9838: casefold flag without casefold feature [ 1648.622571][T28120] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.9838: couldn't read orphan inode 15 (err -117) [ 1648.662039][T28120] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1649.043902][ C0] hrtimer: interrupt took 44952 ns [ 1649.696159][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1649.878677][T28152] loop9: detected capacity change from 0 to 512 [ 1649.888863][T28152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1650.107677][T28158] loop8: detected capacity change from 0 to 16 [ 1650.114922][T28158] erofs: (device loop8): mounted with root inode @ nid 36. [ 1650.426375][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.435840][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1650.445051][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.454528][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1650.463767][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1650.473183][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.482716][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1650.491918][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.501369][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1650.511052][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.520601][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1650.529871][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.539575][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1650.549037][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1650.558160][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1650.567579][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1650.576761][T28164] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1650.586160][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1650.595506][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1650.604616][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1650.613790][T28164] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1650.623257][T28164] syz.8.9849: attempt to access beyond end of device [ 1650.623257][T28164] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1650.643991][T28164] syz.8.9849: attempt to access beyond end of device [ 1650.643991][T28164] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1650.658665][T28164] syz.8.9849: attempt to access beyond end of device [ 1650.658665][T28164] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1650.673668][T28164] syz.8.9849: attempt to access beyond end of device [ 1650.673668][T28164] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1651.014702][T28152] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1651.027541][T28170] loop5: detected capacity change from 0 to 512 [ 1651.030877][T28152] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1651.046988][T28170] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.9852: Invalid inode bitmap blk 4 in block_group 0 [ 1651.066471][T28170] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1651.085846][T28170] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1651.087129][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1651.106324][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1651.135304][T28179] loop5: detected capacity change from 0 to 128 [ 1651.144217][T28179] ext4: Unknown parameter 'nouser_xattr' [ 1651.202694][ T6618] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1651.227586][T28179] loop5: detected capacity change from 0 to 512 [ 1651.234855][ T6618] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1651.245365][ T6618] Buffer I/O error on dev loop5, logical block 0, async page read [ 1651.853006][T28179] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.9855: casefold flag without casefold feature [ 1651.866309][T28179] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.9855: couldn't read orphan inode 15 (err -117) [ 1651.893345][T28179] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1652.713458][T28202] 9pnet_fd: Insufficient options for proto=fd [ 1652.745292][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1652.853869][ T4312] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1653.405937][ T4312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1653.417156][ T4312] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.427460][ T4312] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1653.436778][ T4312] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.446259][ T4312] usb 10-1: config 0 descriptor?? [ 1653.760767][T28219] loop5: detected capacity change from 0 to 512 [ 1653.788768][T28219] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.9866: Invalid inode bitmap blk 4 in block_group 0 [ 1653.796712][T28223] loop8: detected capacity change from 0 to 16 [ 1653.804118][T28219] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1653.809757][T28223] erofs: (device loop8): mounted with root inode @ nid 36. [ 1653.902726][T28219] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1653.917030][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1654.253580][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.263100][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1654.272318][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.281743][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1654.290945][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1654.300086][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.309499][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1654.318588][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.327944][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1654.337107][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.354331][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1654.363453][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.372884][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1654.382013][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1654.391298][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1654.400546][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1654.409646][T28230] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1654.419174][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1654.428422][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1654.437513][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1654.446669][T28230] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1654.456037][T28230] syz.8.9867: attempt to access beyond end of device [ 1654.456037][T28230] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1654.469737][T28230] syz.8.9867: attempt to access beyond end of device [ 1654.469737][T28230] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1654.484143][T28230] syz.8.9867: attempt to access beyond end of device [ 1654.484143][T28230] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1654.498579][T28230] syz.8.9867: attempt to access beyond end of device [ 1654.498579][T28230] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1654.549937][ T4312] pyra 0003:1E7D:2CF6.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0 [ 1654.571409][ T4312] pyra 0003:1E7D:2CF6.0029: couldn't init struct pyra_device [ 1654.601868][ T4312] pyra 0003:1E7D:2CF6.0029: couldn't install mouse [ 1654.614051][ T4312] pyra: probe of 0003:1E7D:2CF6.0029 failed with error -5 [ 1654.961354][T28243] loop1: detected capacity change from 0 to 128 [ 1655.026089][T28243] ext4: Unknown parameter 'nouser_xattr' [ 1655.070855][T28243] loop1: detected capacity change from 0 to 512 [ 1655.100191][T28243] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9872: casefold flag without casefold feature [ 1655.113651][T28243] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9872: couldn't read orphan inode 15 (err -117) [ 1655.126139][T28243] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1655.201806][T28247] loop5: detected capacity change from 0 to 128 [ 1655.209621][T28247] ext4: Unknown parameter 'nouser_xattr' [ 1655.277423][T28247] loop5: detected capacity change from 0 to 512 [ 1655.288186][T28247] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.9873: casefold flag without casefold feature [ 1655.301710][T28247] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.9873: couldn't read orphan inode 15 (err -117) [ 1655.517928][T28247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1655.995104][ T4312] usb 10-1: USB disconnect, device number 2 [ 1656.002661][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1656.123441][ T535] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1656.124221][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1656.313899][ T535] usb 3-1: Using ep0 maxpacket: 16 [ 1656.321524][ T535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1656.520383][ T535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1656.530678][ T535] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1656.544008][ T535] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1656.553166][ T535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1656.566854][ T535] usb 3-1: config 0 descriptor?? [ 1656.921912][T28280] loop1: detected capacity change from 0 to 16 [ 1656.953651][T28280] erofs: (device loop1): mounted with root inode @ nid 36. [ 1657.049072][ T535] microsoft 0003:045E:07DA.002A: ignoring exceeding usage max [ 1657.064733][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.085368][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.106100][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.129468][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.142037][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.157741][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.173324][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.193956][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.214429][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.491997][T28283] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1657.503850][T28283] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1657.514852][T28283] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1657.545090][ T535] microsoft 0003:045E:07DA.002A: unknown main item tag 0x0 [ 1657.564344][ T535] microsoft 0003:045E:07DA.002A: unsupported Resolution Multiplier 0 [ 1657.594630][ T535] microsoft 0003:045E:07DA.002A: No inputs registered, leaving [ 1657.623226][ T535] microsoft 0003:045E:07DA.002A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1657.662379][ T535] microsoft 0003:045E:07DA.002A: no inputs found [ 1657.692906][ T535] microsoft 0003:045E:07DA.002A: could not initialize ff, continuing anyway [ 1657.748884][ T535] usb 3-1: USB disconnect, device number 10 [ 1658.076226][T28292] fido_id[28292]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1658.508978][T28309] device syzkaller0 entered promiscuous mode [ 1658.817303][T28314] loop5: detected capacity change from 0 to 128 [ 1658.824286][T28314] ext4: Unknown parameter 'nouser_xattr' [ 1659.129528][T28316] loop8: detected capacity change from 0 to 40427 [ 1659.151483][T28316] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1659.176395][T28316] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1659.189643][T28316] F2FS-fs (loop8): invalid crc value [ 1659.209282][T28316] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1659.994371][T28327] loop1: detected capacity change from 0 to 8192 [ 1660.002570][T28316] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1660.020066][T28316] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1660.275677][T28339] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1660.284412][T28339] FAT-fs (loop1): Filesystem has been set read-only [ 1660.958971][T28345] overlayfs: conflicting lowerdir path [ 1661.793906][ T1128] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1661.957792][T28371] loop1: detected capacity change from 0 to 128 [ 1661.964560][T28371] ext4: Unknown parameter 'nouser_xattr' [ 1661.973925][T28371] loop1: detected capacity change from 0 to 512 [ 1662.234294][T28371] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.9905: casefold flag without casefold feature [ 1662.262683][T28371] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.9905: couldn't read orphan inode 15 (err -117) [ 1662.273842][ T1128] usb 10-1: Using ep0 maxpacket: 16 [ 1662.280840][ T1128] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.292412][T28371] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1662.292603][ T1128] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1662.311290][ T1128] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1662.329511][ T1128] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1662.338825][ T1128] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.348032][ T1128] usb 10-1: config 0 descriptor?? [ 1663.257851][ T1128] usbhid 10-1:0.0: can't add hid device: -71 [ 1663.265621][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1663.277535][ T1128] usbhid: probe of 10-1:0.0 failed with error -71 [ 1663.297759][ T1128] usb 10-1: USB disconnect, device number 3 [ 1663.351912][T28390] loop1: detected capacity change from 0 to 8192 [ 1664.097869][T28396] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1664.819718][T28402] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1664.828572][T28402] FAT-fs (loop1): Filesystem has been set read-only [ 1665.361594][T28424] loop9: detected capacity change from 0 to 128 [ 1665.370989][T28424] ext4: Unknown parameter 'nouser_xattr' [ 1665.407174][ T8100] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1665.427287][T28424] loop9: detected capacity change from 0 to 512 [ 1665.434175][ T8100] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1665.524420][T28424] EXT4-fs error (device loop9): ext4_orphan_get:1400: inode #15: comm syz.9.9920: casefold flag without casefold feature [ 1665.538374][T28424] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.9920: couldn't read orphan inode 15 (err -117) [ 1665.554068][T28424] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1665.784907][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1665.982987][T28434] loop9: detected capacity change from 0 to 40427 [ 1665.990406][T28434] F2FS-fs (loop9): fault_injection options not supported [ 1665.998662][T28434] F2FS-fs (loop9): invalid crc value [ 1666.009915][T28434] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1666.046141][T28434] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1666.722292][T28447] 9pnet_fd: Insufficient options for proto=fd [ 1666.811379][T28233] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1667.267444][T28455] loop8: detected capacity change from 0 to 8192 [ 1667.906235][T28462] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1667.914875][T28462] FAT-fs (loop8): Filesystem has been set read-only [ 1667.984152][T28233] usb 6-1: Using ep0 maxpacket: 16 [ 1667.984459][T27673] syz-executor: attempt to access beyond end of device [ 1667.984459][T27673] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1668.008161][T28233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.013988][ T362] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1668.019249][T28233] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.066961][T28233] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1668.101867][T28233] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1668.123105][T28233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.142317][T28233] usb 6-1: config 0 descriptor?? [ 1668.323926][ T362] usb 2-1: Using ep0 maxpacket: 8 [ 1668.331303][ T362] usb 2-1: config 2 interface 0 has no altsetting 0 [ 1668.340761][ T362] usb 2-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 1668.350379][ T362] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.358682][ T362] usb 2-1: Product: syz [ 1668.363121][ T362] usb 2-1: Manufacturer: syz [ 1668.367928][ T362] usb 2-1: SerialNumber: syz [ 1668.454068][ T535] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1668.616170][T28233] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 1668.627496][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.635064][ T535] usb 10-1: Using ep0 maxpacket: 16 [ 1668.640594][ T362] usb 2-1: USB disconnect, device number 14 [ 1668.646229][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.647763][ T535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.658092][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.666878][ T535] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1668.682669][ T535] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1668.685781][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.696264][ T535] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1668.711795][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.719850][ T535] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.726015][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.729111][ T535] usb 10-1: config 0 descriptor?? [ 1668.741609][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.753223][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.764957][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.772320][T28233] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 1668.779904][T28233] microsoft 0003:045E:07DA.002B: unsupported Resolution Multiplier 0 [ 1668.816320][T28233] microsoft 0003:045E:07DA.002B: No inputs registered, leaving [ 1668.827369][T28233] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1668.839444][T28233] microsoft 0003:045E:07DA.002B: no inputs found [ 1668.846101][T28233] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway [ 1668.858981][T28233] usb 6-1: USB disconnect, device number 18 [ 1668.987313][T28476] fido_id[28476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1669.168712][ T535] usbhid 10-1:0.0: can't add hid device: -71 [ 1669.214695][ T535] usbhid: probe of 10-1:0.0 failed with error -71 [ 1669.298037][ T535] usb 10-1: USB disconnect, device number 4 [ 1671.070495][T28502] 9pnet_fd: Insufficient options for proto=fd [ 1671.262392][T28498] loop1: detected capacity change from 0 to 2048 [ 1671.354271][T28498] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1671.393976][T26208] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1671.533895][T26208] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1671.655667][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1671.781578][T28501] loop8: detected capacity change from 0 to 40427 [ 1671.797817][T28501] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1671.819736][T28501] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1671.829810][T28501] F2FS-fs (loop8): invalid crc value [ 1671.903002][T28501] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1671.906956][T28515] loop5: detected capacity change from 0 to 40427 [ 1671.924218][T28515] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1671.942114][T28515] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1672.467848][T28515] F2FS-fs (loop5): invalid crc value [ 1672.573058][T28501] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1672.639277][T28501] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1673.443336][T28515] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1673.550963][T28515] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1673.560779][T28515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1673.602000][T28548] loop2: detected capacity change from 0 to 16 [ 1673.650238][T28548] erofs: (device loop2): mounted with root inode @ nid 36. [ 1674.075369][T28550] overlayfs: failed to resolve './bus': -2 [ 1675.010887][T28557] overlayfs: conflicting lowerdir path [ 1675.156125][T28561] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1675.782671][T28568] 9pnet_fd: Insufficient options for proto=fd [ 1675.815019][T28572] device pim6reg1 entered promiscuous mode [ 1676.066902][T28580] loop1: detected capacity change from 0 to 40427 [ 1676.074688][T28580] F2FS-fs (loop1): fault_injection options not supported [ 1676.082525][T28580] F2FS-fs (loop1): invalid crc value [ 1676.580508][T28580] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1676.647778][T28580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1676.665915][T28592] loop5: detected capacity change from 0 to 128 [ 1676.674444][T28592] ext4: Unknown parameter 'nouser_xattr' [ 1676.689249][T28594] loop9: detected capacity change from 0 to 2048 [ 1676.748026][T28594] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1676.819123][T28592] loop5: detected capacity change from 0 to 512 [ 1676.847640][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1677.627328][T28592] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.9967: casefold flag without casefold feature [ 1677.792099][T28609] loop2: detected capacity change from 0 to 16 [ 1677.828973][T28609] erofs: (device loop2): mounted with root inode @ nid 36. [ 1677.912642][T28592] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.9967: couldn't read orphan inode 15 (err -117) [ 1677.926268][T28592] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1677.954926][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1678.319092][T26208] syz-executor: attempt to access beyond end of device [ 1678.319092][T26208] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1678.361122][T28619] device pim6reg1 entered promiscuous mode [ 1678.463861][ T672] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1678.471219][T28623] loop5: detected capacity change from 0 to 512 [ 1678.517654][T28623] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.9975: Invalid inode bitmap blk 4 in block_group 0 [ 1678.532938][T28623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1678.592664][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1678.613073][T28628] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9977'. [ 1678.664126][ T672] usb 9-1: Using ep0 maxpacket: 8 [ 1678.692962][ T672] usb 9-1: config 2 interface 0 has no altsetting 0 [ 1678.706471][ T672] usb 9-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 1678.717346][ T672] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.752284][ T672] usb 9-1: Product: syz [ 1678.774857][ T672] usb 9-1: Manufacturer: syz [ 1678.798936][ T672] usb 9-1: SerialNumber: syz [ 1679.030750][ T672] usb 9-1: USB disconnect, device number 17 [ 1680.515108][T28654] loop2: detected capacity change from 0 to 128 [ 1680.530012][T28653] device syzkaller0 entered promiscuous mode [ 1680.539987][T28654] ext4: Unknown parameter 'nouser_xattr' [ 1680.561589][T28654] loop2: detected capacity change from 0 to 512 [ 1680.571378][T28654] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.9983: casefold flag without casefold feature [ 1680.594861][T28654] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.9983: couldn't read orphan inode 15 (err -117) [ 1680.613740][T28657] device pim6reg1 entered promiscuous mode [ 1680.794193][T28654] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1680.864928][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1680.890862][T28663] loop5: detected capacity change from 0 to 8192 [ 1680.923430][T28670] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1681.098014][T28672] loop1: detected capacity change from 0 to 40427 [ 1681.106959][T28672] F2FS-fs (loop1): fault_injection options not supported [ 1681.354195][T28672] F2FS-fs (loop1): invalid crc value [ 1681.404814][T28676] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1681.413691][T28676] FAT-fs (loop5): Filesystem has been set read-only [ 1681.451281][T28679] loop9: detected capacity change from 0 to 16 [ 1681.465516][T28679] erofs: (device loop9): mounted with root inode @ nid 36. [ 1681.473480][T28672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1681.545414][T28672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1683.300460][T28697] loop2: detected capacity change from 0 to 512 [ 1683.344630][T28697] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.9996: Invalid inode bitmap blk 4 in block_group 0 [ 1683.374215][T28697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1683.417267][T28697] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 1683.453765][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1683.739317][ T28] audit: type=1400 audit(1757083571.947:265): avc: denied { write } for pid=28704 comm="syz.8.9999" laddr=fe80::a lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1684.102213][T28711] loop5: detected capacity change from 0 to 128 [ 1684.121469][T28711] ext4: Unknown parameter 'nouser_xattr' [ 1684.153019][T28711] loop5: detected capacity change from 0 to 512 [ 1684.163962][T28715] device pim6reg1 entered promiscuous mode [ 1684.176892][T28711] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.10000: casefold flag without casefold feature [ 1684.312616][T28711] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10000: couldn't read orphan inode 15 (err -117) [ 1684.426264][T28711] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1684.455351][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1684.859474][T28713] loop8: detected capacity change from 0 to 40427 [ 1684.895214][T28713] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1684.906975][T28713] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1685.020144][T28713] F2FS-fs (loop8): invalid crc value [ 1685.053776][T28713] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1685.288787][T28713] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1685.297569][T28713] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1685.475234][T28749] loop9: detected capacity change from 0 to 8192 [ 1685.956827][T28755] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1685.965542][T28755] FAT-fs (loop9): Filesystem has been set read-only [ 1686.050004][T28754] overlayfs: conflicting lowerdir path [ 1686.064184][T28761] device pim6reg1 entered promiscuous mode [ 1686.071995][T28759] loop1: detected capacity change from 0 to 512 [ 1686.097384][T28759] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1686.136538][T28759] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1686.146260][T28759] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1686.173410][T28765] loop2: detected capacity change from 0 to 128 [ 1686.176157][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1686.182917][T28765] ext4: Unknown parameter 'nouser_xattr' [ 1686.969068][T28776] loop9: detected capacity change from 0 to 40427 [ 1686.996831][T28776] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1687.017532][T28776] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1687.044944][T28776] F2FS-fs (loop9): invalid crc value [ 1687.077236][T28776] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1687.243526][T28776] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1687.261721][T28776] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1687.914426][T28799] overlayfs: conflicting lowerdir path [ 1690.085947][T28830] loop2: detected capacity change from 0 to 128 [ 1690.094330][T28830] ext4: Unknown parameter 'nouser_xattr' [ 1690.207628][ T6618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1690.215601][T28830] loop2: detected capacity change from 0 to 512 [ 1690.218462][ T6618] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1690.233651][ T6618] Buffer I/O error on dev loop2, logical block 0, async page read [ 1690.250007][T28830] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.10031: casefold flag without casefold feature [ 1690.430266][T28830] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10031: couldn't read orphan inode 15 (err -117) [ 1690.521737][T28830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1690.626634][T28853] loop9: detected capacity change from 0 to 512 [ 1690.647240][T28853] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1690.687310][T28853] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1690.706025][T28853] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1690.767314][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1691.430480][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1692.035877][T28887] loop8: detected capacity change from 0 to 512 [ 1692.039985][T28889] loop9: detected capacity change from 0 to 512 [ 1692.054737][T28889] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1692.083519][T28887] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1692.083838][T28889] EXT4-fs (loop9): 1 truncate cleaned up [ 1692.098311][T28889] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1692.098425][T28887] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.174824][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1692.223699][T28894] loop8: detected capacity change from 0 to 512 [ 1692.237784][T28894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1692.256098][T28894] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1692.265429][T28894] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1692.300141][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1694.524862][T28916] loop2: detected capacity change from 0 to 16 [ 1694.578901][T28905] loop8: detected capacity change from 0 to 40427 [ 1694.594729][T28916] erofs: (device loop2): mounted with root inode @ nid 36. [ 1694.602038][T28905] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1694.624031][T28905] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1694.643376][T28905] F2FS-fs (loop8): invalid crc value [ 1694.654898][T28905] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1695.094906][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.104401][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1695.113762][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.123182][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1695.132429][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1695.141701][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.151221][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1695.160381][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.169741][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1695.178857][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.188411][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1695.197585][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.206981][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1695.216285][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1695.225630][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1695.234943][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1695.244124][T28927] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.253439][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1695.262685][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1695.271819][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1695.281070][T28927] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1695.290484][T28927] syz.2.10055: attempt to access beyond end of device [ 1695.290484][T28927] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1695.304310][T28927] syz.2.10055: attempt to access beyond end of device [ 1695.304310][T28927] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1695.318918][T28927] syz.2.10055: attempt to access beyond end of device [ 1695.318918][T28927] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1695.333621][T28927] syz.2.10055: attempt to access beyond end of device [ 1695.333621][T28927] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1695.506554][T28931] loop2: detected capacity change from 0 to 2048 [ 1695.541153][T28931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1695.570558][T25577] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1695.585802][T25577] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1695.614801][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1695.649976][T28938] loop2: detected capacity change from 0 to 16 [ 1695.667228][T28938] erofs: (device loop2): mounted with root inode @ nid 36. [ 1695.782821][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1695.845818][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.855274][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1695.864420][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.873875][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1695.883128][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1695.892400][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.901762][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1695.910854][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.920266][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1695.929402][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.938842][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1695.948039][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1695.957454][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1695.966807][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1695.976206][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1695.985638][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1695.995416][T28944] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1696.004896][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1696.014234][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1696.023467][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1696.033033][T28944] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1696.042450][T28944] syz.2.10060: attempt to access beyond end of device [ 1696.042450][T28944] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1696.056320][T28944] syz.2.10060: attempt to access beyond end of device [ 1696.056320][T28944] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1696.071013][T28944] syz.2.10060: attempt to access beyond end of device [ 1696.071013][T28944] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1696.085795][T28944] syz.2.10060: attempt to access beyond end of device [ 1696.085795][T28944] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1696.358471][T28947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10054'. [ 1697.157365][T28957] netlink: 28 bytes leftover after parsing attributes in process `syz.8.10064'. [ 1697.811479][T28973] loop9: detected capacity change from 0 to 512 [ 1697.821475][T28973] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1697.958762][T28973] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1697.989803][T28973] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.104940][T28982] loop2: detected capacity change from 0 to 16 [ 1698.134079][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1698.145362][T28982] erofs: (device loop2): mounted with root inode @ nid 36. [ 1698.170810][T28984] loop1: detected capacity change from 0 to 8192 [ 1698.526088][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.535650][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1698.545565][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.554944][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1698.564104][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1698.573231][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.582632][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1698.591784][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.601150][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1698.610377][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.619816][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1698.629212][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.639078][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1698.648232][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1698.657680][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1698.667401][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1698.676772][T28989] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1698.686495][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1698.695960][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1698.705163][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1698.714379][T28989] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1698.723703][T28989] syz.2.10069: attempt to access beyond end of device [ 1698.723703][T28989] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1698.737692][T28989] syz.2.10069: attempt to access beyond end of device [ 1698.737692][T28989] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1699.071668][T28998] serio: Serial port ttyS3 [ 1699.440610][T29002] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1699.449388][T29002] FAT-fs (loop1): Filesystem has been set read-only [ 1699.456743][T28972] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1699.643882][T28972] usb 6-1: Using ep0 maxpacket: 8 [ 1699.650244][T28972] usb 6-1: config 2 interface 0 has no altsetting 0 [ 1699.658889][T28972] usb 6-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 1699.668436][T28972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1699.676872][T28972] usb 6-1: Product: syz [ 1699.681342][T28972] usb 6-1: Manufacturer: syz [ 1699.686938][T28972] usb 6-1: SerialNumber: syz [ 1700.162097][T28972] usb 6-1: USB disconnect, device number 19 [ 1700.902653][T29018] loop8: detected capacity change from 0 to 512 [ 1700.920541][T29018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1700.935968][T29022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10083'. [ 1700.958525][T29018] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1700.969168][T29018] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1700.995950][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1703.189420][T29080] device syzkaller0 entered promiscuous mode [ 1703.417961][T29087] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1703.578272][T29089] loop1: detected capacity change from 0 to 40427 [ 1703.590702][T29095] loop9: detected capacity change from 0 to 512 [ 1703.604181][T29089] F2FS-fs (loop1): fault_injection options not supported [ 1703.614095][T29089] F2FS-fs (loop1): invalid crc value [ 1703.620108][T29095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1703.633000][T29089] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1703.664642][T29089] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1703.962335][T29095] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1703.985721][T29095] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.041993][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1704.074310][T29110] loop9: detected capacity change from 0 to 16 [ 1704.100006][T29110] erofs: (device loop9): mounted with root inode @ nid 36. [ 1704.590349][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.599869][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1704.609077][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.618890][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1704.628839][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1704.638962][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.648317][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1704.657544][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.666902][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1704.676089][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.685653][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1704.694830][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.704411][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1704.713501][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1704.722696][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1704.731925][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1704.741145][T29117] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1704.750477][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1704.759876][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1704.769078][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1704.778397][T29117] erofs: (device loop9): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1704.787870][T29117] bio_check_eod: 2 callbacks suppressed [ 1704.787887][T29117] syz.9.10107: attempt to access beyond end of device [ 1704.787887][T29117] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1704.807640][T29117] syz.9.10107: attempt to access beyond end of device [ 1704.807640][T29117] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1704.822167][T29117] syz.9.10107: attempt to access beyond end of device [ 1704.822167][T29117] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1704.836638][T29117] syz.9.10107: attempt to access beyond end of device [ 1704.836638][T29117] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1704.906231][T29119] loop5: detected capacity change from 0 to 512 [ 1704.951337][T29119] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1704.982673][T29119] EXT4-fs (loop5): 1 truncate cleaned up [ 1704.991846][T29119] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1705.195333][T29125] loop2: detected capacity change from 0 to 8192 [ 1705.333280][ T28] audit: type=1400 audit(1757083593.537:266): avc: denied { read } for pid=29132 comm="syz.8.10113" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1705.356996][ T28] audit: type=1400 audit(1757083593.537:267): avc: denied { open } for pid=29132 comm="syz.8.10113" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1705.994616][T29136] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1706.041160][ T28] audit: type=1400 audit(1757083593.547:268): avc: denied { ioctl } for pid=29132 comm="syz.8.10113" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1706.068106][T29136] FAT-fs (loop2): Filesystem has been set read-only [ 1707.007692][T29159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10121'. [ 1707.048283][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1707.091892][T29163] loop1: detected capacity change from 0 to 512 [ 1707.111058][T29163] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1707.184561][T29163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1707.193698][T29163] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1707.203165][T29173] syz.9.10126[29173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1707.204341][T29173] syz.9.10126[29173] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1707.219410][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1707.235503][T29176] loop9: detected capacity change from 0 to 16 [ 1707.251944][T29176] erofs: (device loop9): mounted with root inode @ nid 36. [ 1707.447451][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.457009][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1707.466215][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.476048][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1707.485383][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1707.494771][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.504385][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1707.513495][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.522892][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1707.532084][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.541488][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1707.550696][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.560169][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1707.569588][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1707.578719][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1707.588033][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1707.597345][T29183] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1707.607260][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1707.616461][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1707.625816][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1707.635023][T29183] erofs: (device loop9): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1707.644401][T29183] syz.9.10128: attempt to access beyond end of device [ 1707.644401][T29183] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1707.658173][T29183] syz.9.10128: attempt to access beyond end of device [ 1707.658173][T29183] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1707.672698][T29183] syz.9.10128: attempt to access beyond end of device [ 1707.672698][T29183] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1707.687670][T29183] syz.9.10128: attempt to access beyond end of device [ 1707.687670][T29183] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1707.719314][ T335] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1707.943882][ T335] usb 3-1: Using ep0 maxpacket: 16 [ 1707.953471][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1707.970682][ T335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1707.980632][ T335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1707.995334][ T335] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1708.005459][ T335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.014748][ T335] usb 3-1: config 0 descriptor?? [ 1708.094862][T29186] loop8: detected capacity change from 0 to 40427 [ 1708.112366][T29186] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1708.124442][T29186] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1708.134278][T29186] F2FS-fs (loop8): invalid crc value [ 1708.144185][T29192] loop5: detected capacity change from 0 to 8192 [ 1708.177754][T29186] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1708.226037][T29186] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1708.233405][T29186] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1708.462276][T29203] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1708.508967][T29203] FAT-fs (loop5): Filesystem has been set read-only [ 1708.516189][ T335] usbhid 3-1:0.0: can't add hid device: -71 [ 1708.522145][ T335] usbhid: probe of 3-1:0.0 failed with error -71 [ 1708.534514][ T335] usb 3-1: USB disconnect, device number 11 [ 1708.716927][T29205] tipc: Enabling of bearer rejected, failed to enable media [ 1708.731448][T29205] device syzkaller0 entered promiscuous mode [ 1708.746811][T29207] overlayfs: failed to resolve './bus': -2 [ 1709.119406][T29213] loop2: detected capacity change from 0 to 16 [ 1709.215495][T29215] loop9: detected capacity change from 0 to 512 [ 1709.312443][T29215] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1709.353805][T29213] erofs: (device loop2): mounted with root inode @ nid 36. [ 1709.386860][T29215] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1709.409664][T29215] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1709.473807][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1709.571157][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.616574][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1709.653977][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.673946][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1709.703860][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1709.723442][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.802664][T29243] loop5: detected capacity change from 0 to 128 [ 1709.809380][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1709.824768][T29243] ext4: Unknown parameter 'nouser_xattr' [ 1709.833852][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.935323][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1709.944740][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.963982][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1709.973293][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1709.982960][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1710.000608][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1710.033870][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1710.091975][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1710.160159][T29238] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1710.204734][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1710.244521][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1710.271376][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1710.298439][T29238] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1710.327562][T29238] syz.2.10139: attempt to access beyond end of device [ 1710.327562][T29238] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1710.374451][T29238] syz.2.10139: attempt to access beyond end of device [ 1710.374451][T29238] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1710.389322][T29238] syz.2.10139: attempt to access beyond end of device [ 1710.389322][T29238] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1710.409886][T29238] syz.2.10139: attempt to access beyond end of device [ 1710.409886][T29238] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1711.214675][T29256] loop2: detected capacity change from 0 to 40427 [ 1711.227391][T29256] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1711.235434][T29256] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1711.253838][T29256] F2FS-fs (loop2): invalid crc value [ 1711.262223][T29256] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1711.298125][T29256] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1711.305437][T29256] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1711.564011][ T4152] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1711.573939][T29273] overlayfs: failed to resolve './bus': -2 [ 1711.609092][T29272] loop9: detected capacity change from 0 to 512 [ 1711.630698][T29272] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1711.755122][T29272] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1711.764473][T29272] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1711.791720][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1711.867812][ T4152] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1711.883358][ T4152] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1711.903392][ T4152] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1711.918063][ T4152] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1711.936184][ T4152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.949560][ T4152] usb 2-1: Product: syz [ 1711.953761][ T4152] usb 2-1: Manufacturer: syz [ 1711.958729][ T4152] usb 2-1: SerialNumber: syz [ 1711.969192][ T4152] hub 2-1:1.0: bad descriptor, ignoring hub [ 1711.975337][ T4152] hub: probe of 2-1:1.0 failed with error -5 [ 1712.048924][T29293] loop2: detected capacity change from 0 to 16 [ 1712.058227][T29293] erofs: (device loop2): mounted with root inode @ nid 36. [ 1712.168686][ T4152] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1712.544038][ T335] usb 2-1: USB disconnect, device number 15 [ 1712.551683][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.553583][ T335] usblp0: removed [ 1712.577198][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1712.604159][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.624066][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1712.658002][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1712.698626][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.753852][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1712.770396][T29307] loop9: detected capacity change from 0 to 16 [ 1712.781675][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.791974][T29307] erofs: (device loop9): mounted with root inode @ nid 36. [ 1712.846026][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1712.855577][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.865099][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1712.874451][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.887198][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1712.896514][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1712.934613][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1712.951956][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1712.961208][T29303] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1712.986652][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1713.001396][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1713.001554][T29311] fuse: Bad value for 'fd' [ 1713.010873][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1713.024515][T29303] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1713.040970][T29303] syz.2.10159: attempt to access beyond end of device [ 1713.040970][T29303] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1713.055512][T29303] syz.2.10159: attempt to access beyond end of device [ 1713.055512][T29303] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1713.059887][T29309] loop5: detected capacity change from 0 to 8192 [ 1713.119743][T29303] syz.2.10159: attempt to access beyond end of device [ 1713.119743][T29303] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1713.165207][T29303] syz.2.10159: attempt to access beyond end of device [ 1713.165207][T29303] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1713.167697][T29314] loop1: detected capacity change from 0 to 512 [ 1713.186528][T29309] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1713.195236][T29309] FAT-fs (loop5): Filesystem has been set read-only [ 1713.207056][T29314] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1713.236224][T29317] 9pnet_fd: Insufficient options for proto=fd [ 1713.252995][T29314] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1713.288596][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.328298][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1713.338148][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.347693][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1713.354371][T29314] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1713.375667][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1713.390448][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.400052][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1713.409183][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.418507][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1713.427562][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.436870][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1713.446350][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.457133][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1713.520176][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1713.616805][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1713.671566][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1713.680818][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1713.690059][T29315] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1713.719272][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1713.743230][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1713.759441][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1713.759493][T29333] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1713.774285][T29315] erofs: (device loop9): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1713.795336][T29315] syz.9.10163: attempt to access beyond end of device [ 1713.795336][T29315] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1713.809704][T29315] syz.9.10163: attempt to access beyond end of device [ 1713.809704][T29315] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1715.070916][T29351] loop1: detected capacity change from 0 to 512 [ 1715.211452][T29359] loop2: detected capacity change from 0 to 8192 [ 1715.219500][T29351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1715.233988][T29351] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1715.982715][T29359] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1715.991330][T29359] FAT-fs (loop2): Filesystem has been set read-only [ 1716.099329][T29371] loop2: detected capacity change from 0 to 16 [ 1716.112100][T29371] erofs: (device loop2): mounted with root inode @ nid 36. [ 1716.496992][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1716.607371][T29385] loop9: detected capacity change from 0 to 512 [ 1716.644816][T29385] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1716.678225][T29389] loop1: detected capacity change from 0 to 16 [ 1716.722261][T29389] erofs: (device loop1): mounted with root inode @ nid 36. [ 1716.731272][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.776033][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1716.796194][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.805349][T29385] EXT4-fs (loop9): 1 truncate cleaned up [ 1716.811422][T29385] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1716.838693][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1716.850572][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1716.860437][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.870745][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1716.887846][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.898536][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1716.907896][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.917982][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1716.927276][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1716.962838][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1716.972200][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1716.981752][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1717.002803][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1717.013097][T29380] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.023725][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1717.035186][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1717.060127][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1717.075676][T29380] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1717.094636][T29380] bio_check_eod: 2 callbacks suppressed [ 1717.094711][T29380] syz.2.10182: attempt to access beyond end of device [ 1717.094711][T29380] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1717.095210][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.126645][T29380] syz.2.10182: attempt to access beyond end of device [ 1717.126645][T29380] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1717.142856][T29380] syz.2.10182: attempt to access beyond end of device [ 1717.142856][T29380] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1717.166932][T29380] syz.2.10182: attempt to access beyond end of device [ 1717.166932][T29380] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1717.190103][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1717.200426][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.209930][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1717.220828][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1717.231632][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.241717][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1717.251191][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.262475][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1717.297973][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.307695][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1717.318495][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.328795][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1717.339354][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1717.349193][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1717.360304][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1717.371557][T29403] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1717.382671][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1717.394884][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1717.416845][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1717.428774][T29403] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1717.456752][T29403] syz.1.10188: attempt to access beyond end of device [ 1717.456752][T29403] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1717.865020][T29403] syz.1.10188: attempt to access beyond end of device [ 1717.865020][T29403] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1717.959038][T29410] tipc: Started in network mode [ 1717.973998][T29410] tipc: Node identity aa9db2de3401, cluster identity 4711 [ 1717.984187][T29410] tipc: Enabled bearer , priority 0 [ 1717.990971][T29403] syz.1.10188: attempt to access beyond end of device [ 1717.990971][T29403] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1718.007051][T29410] device syzkaller0 entered promiscuous mode [ 1718.035491][T29409] tipc: Resetting bearer [ 1718.056077][T29409] tipc: Disabling bearer [ 1718.074030][T29403] syz.1.10188: attempt to access beyond end of device [ 1718.074030][T29403] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1718.076613][T29413] tipc: Enabling of bearer rejected, failed to enable media [ 1718.224059][T29413] device syzkaller0 entered promiscuous mode [ 1718.239957][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1718.750933][T29433] loop1: detected capacity change from 0 to 16 [ 1718.808442][T29433] erofs: (device loop1): mounted with root inode @ nid 36. [ 1719.671088][T29437] loop5: detected capacity change from 0 to 40427 [ 1719.705714][T29437] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1719.729030][T29437] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1719.750978][T29448] 9pnet_fd: Insufficient options for proto=fd [ 1719.758044][T29437] F2FS-fs (loop5): invalid crc value [ 1719.764508][T29448] 9pnet_fd: Insufficient options for proto=fd [ 1719.778739][T29437] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1719.810960][T29437] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1719.818446][T29437] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1720.347104][T29462] overlayfs: failed to resolve './bus': -2 [ 1720.663108][T29468] loop9: detected capacity change from 0 to 16 [ 1720.685378][T29468] erofs: (device loop9): mounted with root inode @ nid 36. [ 1720.973537][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1720.983230][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1720.992308][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.001681][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1721.010884][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1721.020080][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.029418][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1721.038550][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.047977][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1721.057237][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.066607][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1721.075859][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.085195][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1721.094292][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1721.103336][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1721.112679][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1721.121830][T29478] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1721.131253][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1721.140460][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1721.149605][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1721.158786][T29478] erofs: (device loop9): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1721.168073][T29478] syz.9.10212: attempt to access beyond end of device [ 1721.168073][T29478] loop9: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1721.181972][T29478] syz.9.10212: attempt to access beyond end of device [ 1721.181972][T29478] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1722.376291][T29496] loop1: detected capacity change from 0 to 16 [ 1722.414102][T29496] erofs: (device loop1): mounted with root inode @ nid 36. [ 1723.458389][T29514] serio: Serial port ttyS3 [ 1724.283831][T14928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1724.393222][T29535] loop8: detected capacity change from 0 to 16 [ 1724.402902][T29535] erofs: (device loop8): mounted with root inode @ nid 36. [ 1724.485439][T14928] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1724.517802][T14928] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1724.534685][T14928] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1724.551516][T14928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1724.761013][T14928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.083576][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.093586][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1725.102892][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.112275][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1725.121993][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1725.131956][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.141355][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1725.150572][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.159960][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1725.169253][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.180352][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1725.189633][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.198974][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1725.208098][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1725.217185][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1725.226560][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1725.235685][T29545] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1725.245557][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1725.254911][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1725.264132][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1725.273438][T29545] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1725.282735][T29545] bio_check_eod: 2 callbacks suppressed [ 1725.282754][T29545] syz.8.10232: attempt to access beyond end of device [ 1725.282754][T29545] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1725.303164][T29545] syz.8.10232: attempt to access beyond end of device [ 1725.303164][T29545] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1725.317722][T29545] syz.8.10232: attempt to access beyond end of device [ 1725.317722][T29545] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1725.332424][T29545] syz.8.10232: attempt to access beyond end of device [ 1725.332424][T29545] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1725.354517][T14928] usb 3-1: Product: syz [ 1725.360325][T14928] usb 3-1: Manufacturer: syz [ 1725.365249][T14928] usb 3-1: SerialNumber: syz [ 1725.373334][T14928] hub 3-1:1.0: bad descriptor, ignoring hub [ 1725.379835][T14928] hub: probe of 3-1:1.0 failed with error -5 [ 1725.575273][T14928] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1725.904074][T14928] usb 3-1: USB disconnect, device number 12 [ 1725.917110][T14928] usblp0: removed [ 1726.618000][T29575] loop2: detected capacity change from 0 to 40427 [ 1726.627411][T29575] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1726.635352][T29575] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1726.647348][T29575] F2FS-fs (loop2): invalid crc value [ 1726.660485][T29575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1726.735841][T29575] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1726.743331][T29575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1727.733396][T29591] loop9: detected capacity change from 0 to 512 [ 1727.810267][T29591] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1727.824879][T29591] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1727.917915][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1728.161814][T29609] overlayfs: conflicting lowerdir path [ 1728.915265][T29630] loop2: detected capacity change from 0 to 40427 [ 1728.924356][T29630] F2FS-fs (loop2): fault_injection options not supported [ 1728.932413][T29630] F2FS-fs (loop2): invalid crc value [ 1728.945881][T29630] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1728.985756][T29630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1730.107525][T25577] syz-executor: attempt to access beyond end of device [ 1730.107525][T25577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1730.198550][T29655] loop5: detected capacity change from 0 to 16 [ 1730.232063][T29655] erofs: (device loop5): mounted with root inode @ nid 36. [ 1730.299215][T29661] loop2: detected capacity change from 0 to 512 [ 1730.324003][T29662] loop8: detected capacity change from 0 to 512 [ 1730.341293][T29661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1730.350811][T29661] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.629690][T29662] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1730.665440][T29662] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.710812][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1731.063934][ T362] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1731.191769][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1731.197741][ T28] audit: type=1400 audit(1757083619.407:269): avc: denied { setattr } for pid=29681 comm="syz.9.10285" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1731.343839][ T362] usb 3-1: Using ep0 maxpacket: 16 [ 1731.350307][ T362] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.360921][ T362] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1731.383966][T29688] loop9: detected capacity change from 0 to 40427 [ 1731.392946][T29688] F2FS-fs (loop9): fault_injection options not supported [ 1731.404628][T29688] F2FS-fs (loop9): invalid crc value [ 1731.412241][ T362] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1731.639835][ T362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.650551][ T362] usb 3-1: config 0 descriptor?? [ 1731.657127][T29688] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1731.703610][T29688] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1731.808983][T29703] loop5: detected capacity change from 0 to 512 [ 1731.834164][T29703] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1732.193510][T29703] EXT4-fs (loop5): 1 truncate cleaned up [ 1732.252675][T29703] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1732.613413][T29712] loop8: detected capacity change from 0 to 512 [ 1732.745433][T29712] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1732.763958][T29712] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1733.468354][T27673] syz-executor: attempt to access beyond end of device [ 1733.468354][T27673] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1733.914627][ T362] usb 3-1: USB disconnect, device number 13 [ 1733.944713][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1733.975965][T29732] loop2: detected capacity change from 0 to 16 [ 1734.009043][T29732] erofs: (device loop2): mounted with root inode @ nid 36. [ 1734.793399][T29741] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10286'. [ 1734.898091][T29749] loop9: detected capacity change from 0 to 512 [ 1734.925699][T29749] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1734.934923][T29749] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1734.959876][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1734.974351][T29755] netlink: 'syz.5.10297': attribute type 16 has an invalid length. [ 1734.986337][T29755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1734.994098][T29755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1735.692093][T29755] device erspan1 left promiscuous mode [ 1735.974036][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1736.002480][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1736.017361][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1736.034714][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1736.049407][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1736.091140][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1736.198894][T29773] fuse: Unknown parameter 'use00000000000000000000' [ 1736.353324][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1736.362017][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1736.370519][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1737.140689][T29817] fuse: Unknown parameter 'user_i00000000000000000000' [ 1737.187104][T29819] loop2: detected capacity change from 0 to 512 [ 1737.266505][T29819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1737.280117][T29819] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1737.745449][T29840] loop9: detected capacity change from 0 to 40427 [ 1737.761149][T29840] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1737.777833][T29840] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1737.787225][T29840] F2FS-fs (loop9): invalid crc value [ 1737.810218][T29840] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1737.823826][ T889] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1737.849573][T29840] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1737.871947][T29840] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1738.059818][ T889] usb 6-1: Using ep0 maxpacket: 16 [ 1738.073738][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.086184][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1738.092752][ T889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.113915][ T889] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.127691][ T889] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1738.137437][ T889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.159396][ T889] usb 6-1: config 0 descriptor?? [ 1738.167320][T29850] overlayfs: conflicting lowerdir path [ 1738.574751][ T889] usbhid 6-1:0.0: can't add hid device: -71 [ 1738.580844][ T889] usbhid: probe of 6-1:0.0 failed with error -71 [ 1738.590463][ T889] usb 6-1: USB disconnect, device number 20 [ 1738.664004][T29871] loop9: detected capacity change from 0 to 512 [ 1738.695803][T29871] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.10332: Invalid inode bitmap blk 4 in block_group 0 [ 1738.710863][T29871] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1738.777694][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1739.391366][T29883] netlink: 136 bytes leftover after parsing attributes in process `syz.8.10335'. [ 1739.409896][T29883] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1739.497516][T29888] loop8: detected capacity change from 0 to 512 [ 1739.534375][T29888] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1739.548089][T29888] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1740.306996][T29912] 9pnet_fd: Insufficient options for proto=fd [ 1740.583864][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1740.615227][T29918] tipc: Enabling of bearer rejected, failed to enable media [ 1740.625006][T29918] device syzkaller0 entered promiscuous mode [ 1740.751266][T29920] netlink: 136 bytes leftover after parsing attributes in process `syz.5.10347'. [ 1740.779513][T29920] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1740.826618][T29932] loop1: detected capacity change from 0 to 16 [ 1740.843371][T29932] erofs: (device loop1): mounted with root inode @ nid 36. [ 1741.021213][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.031083][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1741.040354][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.049829][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1741.059126][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1741.068317][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.077700][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1741.087237][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.096758][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1741.105969][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.115503][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1741.124614][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.134058][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1741.143149][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1741.152342][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1741.161614][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1741.170755][T29942] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1741.180330][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1741.189517][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1741.198632][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1741.208196][T29942] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1741.217797][T29942] syz.1.10351: attempt to access beyond end of device [ 1741.217797][T29942] loop1: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1741.231583][T29942] syz.1.10351: attempt to access beyond end of device [ 1741.231583][T29942] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1741.246165][T29942] syz.1.10351: attempt to access beyond end of device [ 1741.246165][T29942] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1741.260671][T29942] syz.1.10351: attempt to access beyond end of device [ 1741.260671][T29942] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1741.716307][T29948] loop8: detected capacity change from 0 to 512 [ 1741.746162][T29948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1742.002478][T29948] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1742.016460][T29948] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1742.137318][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1742.740132][T29970] netlink: 136 bytes leftover after parsing attributes in process `syz.2.10364'. [ 1742.758053][T29970] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1742.783853][T28972] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1742.973820][T28972] usb 6-1: Using ep0 maxpacket: 32 [ 1742.982306][T28972] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1742.995427][T28972] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1743.032685][T28972] usb 6-1: can't read configurations, error -71 [ 1743.093881][ T335] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1743.283860][ T335] usb 10-1: Using ep0 maxpacket: 16 [ 1743.290289][ T335] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1743.300708][ T335] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1743.309795][ T335] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1743.318977][ T335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.327751][ T335] usb 10-1: config 0 descriptor?? [ 1743.600176][T29990] loop1: detected capacity change from 0 to 512 [ 1743.616438][T29990] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1743.626061][T29990] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.736325][T29997] loop2: detected capacity change from 0 to 16 [ 1743.745777][T29997] erofs: (device loop2): mounted with root inode @ nid 36. [ 1744.080714][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.090351][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1744.099783][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.114655][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1744.124226][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1744.133743][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.143694][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1744.156114][T30006] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10375'. [ 1744.167508][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.177377][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1744.186789][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.196507][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1744.205806][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.215796][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1744.225434][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1744.235425][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1744.245742][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1744.255317][T30004] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1744.265025][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1744.274819][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1744.285519][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1744.295993][T30004] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1744.308221][T30004] syz.2.10374: attempt to access beyond end of device [ 1744.308221][T30004] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1744.322257][T30004] syz.2.10374: attempt to access beyond end of device [ 1744.322257][T30004] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1744.336795][T30004] syz.2.10374: attempt to access beyond end of device [ 1744.336795][T30004] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1744.351324][T30004] syz.2.10374: attempt to access beyond end of device [ 1744.351324][T30004] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1744.404197][T30011] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.10377'. [ 1744.426889][T28972] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1744.483158][T28972] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1744.502754][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1744.529897][T30016] loop1: detected capacity change from 0 to 512 [ 1744.551542][T30016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1744.568478][T30016] EXT4-fs (loop1): 1 truncate cleaned up [ 1744.574442][T30016] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1745.654519][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1745.980930][T28291] usb 10-1: USB disconnect, device number 5 [ 1746.129923][T30052] loop9: detected capacity change from 0 to 512 [ 1746.145523][T30042] loop1: detected capacity change from 0 to 40427 [ 1746.159886][T30042] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1746.168104][T30042] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1746.179419][T30042] F2FS-fs (loop1): invalid crc value [ 1746.192245][T30052] EXT4-fs error (device loop9): ext4_read_inode_bitmap:140: comm syz.9.10391: Invalid inode bitmap blk 4 in block_group 0 [ 1746.208542][T30052] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1746.238488][T30042] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1746.279404][T30042] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1746.287478][T30042] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1746.323859][T28972] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1746.341406][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1746.536121][T28972] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1746.546007][T28972] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1746.556121][T28972] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.571450][T28972] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1746.581036][T28972] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.591405][T28972] usb 9-1: Product: syz [ 1746.609854][T28972] usb 9-1: Manufacturer: syz [ 1746.622077][T28972] usb 9-1: SerialNumber: syz [ 1746.643594][T28972] hub 9-1:1.0: bad descriptor, ignoring hub [ 1746.648036][T30075] overlayfs: failed to resolve './bus': -2 [ 1746.664804][T28972] hub: probe of 9-1:1.0 failed with error -5 [ 1746.842275][T28972] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1746.843613][T30079] loop9: detected capacity change from 0 to 512 [ 1746.948131][T30079] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1746.958029][T30079] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1747.381471][T30090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10402'. [ 1747.473340][T30094] loop1: detected capacity change from 0 to 8192 [ 1747.584072][T13581] usb 9-1: USB disconnect, device number 18 [ 1747.595451][T13581] usblp0: removed [ 1747.645524][T30098] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1747.654189][T30098] FAT-fs (loop1): Filesystem has been set read-only [ 1747.870169][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1748.007077][T30102] loop2: detected capacity change from 0 to 40427 [ 1748.034304][T30102] F2FS-fs (loop2): fault_injection options not supported [ 1748.042231][T30102] F2FS-fs (loop2): invalid crc value [ 1748.064360][T30102] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1748.118483][T30102] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1749.218615][T25577] syz-executor: attempt to access beyond end of device [ 1749.218615][T25577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1749.653976][T28972] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1749.923972][T28972] usb 10-1: Using ep0 maxpacket: 16 [ 1749.942631][T28972] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.772745][T28972] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.783950][T30137] fuse: Bad value for 'fd' [ 1750.793946][T28972] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1750.823723][T28972] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1750.833094][T28972] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.849064][T28972] usb 10-1: config 0 descriptor?? [ 1750.922123][ T3957] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1751.105190][ T3957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.116485][ T3957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.137143][ T3957] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1751.157306][ T3957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.178065][ T3957] usb 3-1: config 0 descriptor?? [ 1751.181939][T30148] loop8: detected capacity change from 0 to 40427 [ 1751.195373][T30148] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1751.203911][T30148] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1751.219378][T30148] F2FS-fs (loop8): invalid crc value [ 1751.233342][T30148] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1751.268405][T30148] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1751.275666][T30148] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1751.284441][T28972] usbhid 10-1:0.0: can't add hid device: -71 [ 1751.292201][T28972] usbhid: probe of 10-1:0.0 failed with error -71 [ 1751.308221][T28972] usb 10-1: USB disconnect, device number 6 [ 1751.642150][ T3957] pyra 0003:1E7D:2CF6.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1751.979718][T30174] fuse: Bad value for 'fd' [ 1752.232812][T30177] loop1: detected capacity change from 0 to 40427 [ 1752.245246][ T3957] pyra 0003:1E7D:2CF6.002D: couldn't init struct pyra_device [ 1752.252880][ T3957] pyra 0003:1E7D:2CF6.002D: couldn't install mouse [ 1752.267263][T30177] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1752.277967][ T3957] pyra: probe of 0003:1E7D:2CF6.002D failed with error -32 [ 1752.286464][T30177] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1752.304569][T30177] F2FS-fs (loop1): invalid crc value [ 1752.324064][T30177] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1752.484079][T30177] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1752.491159][T30177] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1752.503425][T30190] loop9: detected capacity change from 0 to 40427 [ 1752.537636][T30190] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1752.555143][T30190] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1752.574456][T30190] F2FS-fs (loop9): invalid crc value [ 1752.595453][T30190] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1752.684531][T30190] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1752.691605][T30190] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1752.818847][T30207] overlayfs: conflicting lowerdir path [ 1753.075402][T30210] overlayfs: conflicting lowerdir path [ 1753.267750][ T3957] usb 3-1: USB disconnect, device number 14 [ 1753.299547][ T362] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1753.313589][ T362] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1753.339470][T30219] fuse: Bad value for 'fd' [ 1753.575447][T30237] loop2: detected capacity change from 0 to 16 [ 1753.593050][T30237] erofs: (device loop2): mounted with root inode @ nid 36. [ 1753.654330][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.663678][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1753.672819][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.682415][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1753.691658][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1753.693889][T28972] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1753.700762][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.717664][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1753.726719][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.736138][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1753.745280][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.754584][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1753.763667][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.772988][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1753.782071][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1753.791130][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1753.800572][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1753.809686][T30237] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1753.835216][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1753.844632][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1753.853675][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1753.862796][T30237] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1753.872321][T30237] syz.2.10445: attempt to access beyond end of device [ 1753.872321][T30237] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1753.886401][T30237] syz.2.10445: attempt to access beyond end of device [ 1753.886401][T30237] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1753.900963][T30237] syz.2.10445: attempt to access beyond end of device [ 1753.900963][T30237] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1753.906177][T28972] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1753.915401][T30237] syz.2.10445: attempt to access beyond end of device [ 1753.915401][T30237] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1753.945954][T28972] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1753.966684][T28972] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1753.999020][T28972] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1754.012553][T28972] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1754.022294][T28972] usb 10-1: Product: syz [ 1754.027199][T28972] usb 10-1: Manufacturer: syz [ 1754.031989][T28972] usb 10-1: SerialNumber: syz [ 1754.048303][T28972] hub 10-1:1.0: bad descriptor, ignoring hub [ 1754.054442][T28972] hub: probe of 10-1:1.0 failed with error -5 [ 1754.245641][T28972] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1754.413335][T30251] fuse: Unknown parameter '0x0000000000000003' [ 1754.872658][ T3957] usb 10-1: USB disconnect, device number 7 [ 1754.884788][ T3957] usblp0: removed [ 1755.581157][T30281] fuse: Unknown parameter '0x0000000000000003' [ 1755.867545][T30291] loop8: detected capacity change from 0 to 16 [ 1755.876225][T30291] erofs: (device loop8): mounted with root inode @ nid 36. [ 1755.877853][T30293] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.10464'. [ 1755.952043][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1755.961487][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1755.970844][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1755.980158][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1755.989259][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1755.998479][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1756.007835][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1756.016963][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1756.026313][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1756.035500][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1756.044834][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1756.053902][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1756.063314][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1756.072404][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1756.081477][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1756.091058][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1756.100180][T30291] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1756.109792][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1756.116012][T30297] loop1: detected capacity change from 0 to 40427 [ 1756.119038][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1756.128899][T30297] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1756.134600][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1756.151488][T30291] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1756.156147][T30297] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1756.160702][T30291] syz.8.10463: attempt to access beyond end of device [ 1756.160702][T30291] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1756.170170][T30297] F2FS-fs (loop1): invalid crc value [ 1756.182548][T30291] syz.8.10463: attempt to access beyond end of device [ 1756.182548][T30291] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1756.189773][T30297] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1756.202345][T30291] syz.8.10463: attempt to access beyond end of device [ 1756.202345][T30291] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1756.223160][T30291] syz.8.10463: attempt to access beyond end of device [ 1756.223160][T30291] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1756.236470][T30297] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1756.244283][T30297] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1756.428153][T30304] overlayfs: failed to resolve './bus': -2 [ 1756.793007][T30319] fuse: Unknown parameter '0x0000000000000003' [ 1756.930543][T30328] loop5: detected capacity change from 0 to 16 [ 1756.995440][T30328] erofs: (device loop5): mounted with root inode @ nid 36. [ 1757.957624][T30340] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1757.978700][T30340] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1757.989709][T30340] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 1758.094915][T30345] loop8: detected capacity change from 0 to 512 [ 1758.111762][T30345] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.10482: casefold flag without casefold feature [ 1758.144225][T30345] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.10482: couldn't read orphan inode 15 (err -117) [ 1758.173961][T30345] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1758.958601][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1758.979615][T30364] loop8: detected capacity change from 0 to 16 [ 1758.986486][T30364] erofs: (device loop8): mounted with root inode @ nid 36. [ 1759.028199][ T4152] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1759.037496][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.046901][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1759.056080][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.061382][T30367] fuse: Unknown parameter '0x0000000000000003' [ 1759.065436][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1759.065491][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1759.089756][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.099109][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1759.101968][T30369] loop2: detected capacity change from 0 to 16 [ 1759.133093][T30369] erofs: (device loop2): mounted with root inode @ nid 36. [ 1759.134772][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.149738][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1759.158820][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.168203][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1759.177261][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.186617][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1759.195693][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1759.204768][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1759.213896][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1759.222978][T30364] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.232291][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1759.241411][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1759.250519][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1759.259783][T30364] erofs: (device loop8): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1759.269049][T30364] syz.8.10486: attempt to access beyond end of device [ 1759.269049][T30364] loop8: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1759.282863][T30364] syz.8.10486: attempt to access beyond end of device [ 1759.282863][T30364] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1759.297265][T30364] syz.8.10486: attempt to access beyond end of device [ 1759.297265][T30364] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1759.311700][T30364] syz.8.10486: attempt to access beyond end of device [ 1759.311700][T30364] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1759.496720][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.506210][ T4152] usb 2-1: Using ep0 maxpacket: 16 [ 1759.511387][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1759.520694][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.530223][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1759.531222][ T4152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1759.539462][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1759.554889][ T4152] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1759.558757][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.571787][ T4152] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1759.580880][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1759.590428][ T4152] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.599262][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.608212][ T4152] usb 2-1: config 0 descriptor?? [ 1759.617634][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1759.622872][ T4152] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1759.630719][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.647471][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1759.656708][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.666187][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1759.675562][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1759.684871][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1759.694166][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1759.703324][T30376] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1759.712825][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1759.722260][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1759.731840][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1759.741226][T30376] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1759.750940][T30376] syz.2.10489: attempt to access beyond end of device [ 1759.750940][T30376] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1759.765045][T30376] syz.2.10489: attempt to access beyond end of device [ 1759.765045][T30376] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1759.909520][T30381] loop8: detected capacity change from 0 to 8192 [ 1760.091151][T30384] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1760.099897][T30384] FAT-fs (loop8): Filesystem has been set read-only [ 1760.513845][ T3957] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1760.703803][ T3957] usb 10-1: Using ep0 maxpacket: 16 [ 1760.710150][ T3957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.749710][ T3957] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.759923][ T3957] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1760.773307][ T3957] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1760.788924][ T3957] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.797998][ T3957] usb 10-1: config 0 descriptor?? [ 1760.818131][T30397] loop8: detected capacity change from 0 to 512 [ 1760.828625][T30397] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.10497: casefold flag without casefold feature [ 1760.842451][T30397] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.10497: couldn't read orphan inode 15 (err -117) [ 1760.854809][T30397] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1761.231871][ T3957] usbhid 10-1:0.0: can't add hid device: -71 [ 1761.238041][ T3957] usbhid: probe of 10-1:0.0 failed with error -71 [ 1761.245522][ T3957] usb 10-1: USB disconnect, device number 8 [ 1762.127830][T28972] usb 2-1: USB disconnect, device number 16 [ 1762.136345][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1762.184805][T30415] loop1: detected capacity change from 0 to 512 [ 1762.221100][T30415] EXT4-fs (loop1): too many log groups per flexible block group [ 1762.229742][T30415] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 1762.237141][T30415] EXT4-fs (loop1): mount failed [ 1762.436693][T30426] netlink: 'syz.1.10502': attribute type 16 has an invalid length. [ 1762.457380][T30426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1762.470983][T30426] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1762.730947][T30426] device erspan1 left promiscuous mode [ 1762.802130][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1762.815883][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1762.838921][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1762.896302][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1762.921105][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1762.936606][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1762.953113][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1762.969737][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1762.973872][T30423] loop5: detected capacity change from 0 to 40427 [ 1762.990143][T30423] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1762.995481][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1762.998380][T30423] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1763.042836][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1763.058790][T30423] F2FS-fs (loop5): invalid crc value [ 1763.072190][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1763.095862][T30423] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1763.105440][T30433] loop1: detected capacity change from 0 to 8192 [ 1763.157247][T30423] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1763.165181][T30423] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1763.293033][T30440] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1763.301637][T30440] FAT-fs (loop1): Filesystem has been set read-only [ 1764.575055][T30453] overlayfs: failed to resolve './bus': -2 [ 1764.844577][T30459] loop1: detected capacity change from 0 to 16 [ 1764.880582][T30459] erofs: (device loop1): mounted with root inode @ nid 36. [ 1764.969050][T30463] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10510'. [ 1764.978900][T30463] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1765.421533][T30478] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10518'. [ 1765.723487][T30483] loop5: detected capacity change from 0 to 40427 [ 1765.751585][T30483] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1765.764490][T30483] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1765.778760][T30483] F2FS-fs (loop5): invalid crc value [ 1765.785768][T30483] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1765.947227][T30483] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1765.959409][T30483] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1766.232470][T30495] overlayfs: failed to resolve './bus': -2 [ 1766.431175][T30497] loop1: detected capacity change from 0 to 512 [ 1766.464057][T30497] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.10522: casefold flag without casefold feature [ 1766.497699][T30501] netlink: 148 bytes leftover after parsing attributes in process `syz.9.10524'. [ 1766.507526][T30497] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.10522: couldn't read orphan inode 15 (err -117) [ 1766.544271][T30501] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1766.575825][T30497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1766.695426][T30512] loop5: detected capacity change from 0 to 512 [ 1766.997394][T30512] EXT4-fs (loop5): too many log groups per flexible block group [ 1767.005187][T30512] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 1767.012009][T30512] EXT4-fs (loop5): mount failed [ 1767.127188][T30508] loop9: detected capacity change from 0 to 40427 [ 1767.178993][T30508] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1767.248165][T30523] netlink: 'syz.5.10523': attribute type 16 has an invalid length. [ 1767.271031][T30508] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1767.302497][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1767.364150][T30508] F2FS-fs (loop9): invalid crc value [ 1767.396136][T30523] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1767.423367][ T379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1767.457356][T30508] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1767.485827][T30508] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1767.503580][T30508] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1767.590917][T30536] loop5: detected capacity change from 0 to 16 [ 1767.630383][T30536] erofs: (device loop5): mounted with root inode @ nid 36. [ 1768.560106][T30542] overlayfs: conflicting lowerdir path [ 1768.786881][T30541] loop8: detected capacity change from 0 to 40427 [ 1768.810215][T30541] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1768.818498][T30541] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1768.871334][T30544] loop2: detected capacity change from 0 to 40427 [ 1768.881841][T30544] F2FS-fs (loop2): fault_injection options not supported [ 1768.891571][T30541] F2FS-fs (loop8): invalid crc value [ 1768.897412][T30544] F2FS-fs (loop2): invalid crc value [ 1768.911631][T30544] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1768.917293][T30550] fuse: Unknown parameter 'group_id00000000000000000000' [ 1768.950827][T30544] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1769.009085][T30541] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1769.042347][T30541] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1769.049773][T30541] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1769.148947][T30559] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10538'. [ 1769.163839][T30559] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1770.120290][T30567] loop5: detected capacity change from 0 to 16 [ 1770.128417][T25577] bio_check_eod: 2 callbacks suppressed [ 1770.128435][T25577] syz-executor: attempt to access beyond end of device [ 1770.128435][T25577] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1770.137100][T30567] erofs: (device loop5): mounted with root inode @ nid 36. [ 1770.230644][T30568] overlayfs: failed to resolve './bus': -2 [ 1770.541732][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.551190][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 1770.560436][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.569761][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 1770.578880][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 1770.588075][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.597404][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 1770.606469][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.615840][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 1770.624908][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.634317][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 1770.643348][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.652703][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 1770.661775][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 1770.670852][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 1770.680100][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 1770.689345][T30571] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1770.698673][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 1770.707895][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 1770.716958][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 1770.726094][T30571] erofs: (device loop5): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 1770.735280][T30571] syz.5.10539: attempt to access beyond end of device [ 1770.735280][T30571] loop5: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 1770.749194][T30571] syz.5.10539: attempt to access beyond end of device [ 1770.749194][T30571] loop5: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 1770.763651][T30571] syz.5.10539: attempt to access beyond end of device [ 1770.763651][T30571] loop5: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 1770.778916][T30571] syz.5.10539: attempt to access beyond end of device [ 1770.778916][T30571] loop5: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 1771.032208][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10540'. [ 1771.629317][T30597] loop8: detected capacity change from 0 to 16 [ 1771.637400][T30597] erofs: (device loop8): mounted with root inode @ nid 36. [ 1771.745655][T30600] loop1: detected capacity change from 0 to 512 [ 1771.752678][T30600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1771.803868][ T335] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1771.824300][T30600] EXT4-fs (loop1): 1 truncate cleaned up [ 1771.829972][T30600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1772.494646][T30614] loop2: detected capacity change from 0 to 512 [ 1772.813905][ T335] usb 6-1: Using ep0 maxpacket: 16 [ 1772.855299][T26208] EXT4-fs (loop1): unmounting filesystem. [ 1772.869752][T30614] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1772.880499][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.932994][T30614] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1772.944293][ T335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1772.970967][ T335] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1773.024034][ T335] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1773.043301][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.063280][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1773.072793][ T335] usb 6-1: config 0 descriptor?? [ 1773.202372][T30621] loop1: detected capacity change from 0 to 40427 [ 1773.222977][T30621] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1773.251320][T30621] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1773.261939][T30621] F2FS-fs (loop1): invalid crc value [ 1773.292575][T30621] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1773.474101][T30621] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1773.481897][T30621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1773.487834][ T335] usbhid 6-1:0.0: can't add hid device: -71 [ 1773.495448][ T335] usbhid: probe of 6-1:0.0 failed with error -71 [ 1773.506079][ T335] usb 6-1: USB disconnect, device number 23 [ 1773.734109][T30634] serio: Serial port ttyS3 [ 1773.858865][T30633] overlayfs: conflicting lowerdir path [ 1774.236587][T30641] loop2: detected capacity change from 0 to 128 [ 1774.243472][T30641] ext4: Unknown parameter 'nouser_xattr' [ 1774.252879][T30641] loop2: detected capacity change from 0 to 512 [ 1774.275249][T30641] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.10559: casefold flag without casefold feature [ 1774.314034][T30641] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10559: couldn't read orphan inode 15 (err -117) [ 1774.327269][T30641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1774.612921][T30654] device syzkaller0 entered promiscuous mode [ 1774.655623][T30661] loop9: detected capacity change from 0 to 512 [ 1774.662644][T30661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1774.683000][T30661] EXT4-fs error (device loop9): ext4_orphan_get:1426: comm syz.9.10564: bad orphan inode 11 [ 1774.700722][T30661] ext4_test_bit(bit=10, block=4) = 1 [ 1774.706316][ T28] audit: type=1400 audit(1757083662.917:270): avc: denied { setopt } for pid=30665 comm="syz.8.10566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1774.715926][T30661] is_bad_inode(inode)=0 [ 1774.730667][T30661] NEXT_ORPHAN(inode)=2080374784 [ 1774.742333][T30661] max_ino=32 [ 1774.745657][T30661] i_nlink=0 [ 1774.748906][T30661] EXT4-fs (loop9): 1 truncate cleaned up [ 1774.755611][T30661] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1774.786243][T30661] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.10564: bg 0: block 393: padding at end of block bitmap is not set [ 1774.814626][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1774.883149][T30682] loop9: detected capacity change from 0 to 1024 [ 1774.890292][T30682] EXT4-fs: Ignoring removed nobh option [ 1774.896154][T30682] EXT4-fs: Ignoring removed bh option [ 1774.902594][T30682] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1774.936424][T30682] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1774.951656][ T28] audit: type=1400 audit(1757083663.157:271): avc: denied { map } for pid=30681 comm="syz.9.10573" path="/179/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1774.954641][T30682] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3841: comm syz.9.10573: Allocating blocks 385-513 which overlap fs metadata [ 1775.032355][T30682] EXT4-fs (loop9): pa ffff8881119abdc8: logic 16, phys. 129, len 24 [ 1775.040499][T30682] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 1775.053946][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1775.069247][T30686] loop9: detected capacity change from 0 to 16 [ 1775.094140][T30686] erofs: (device loop9): mounted with root inode @ nid 36. [ 1775.107752][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1775.114940][T30686] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1775.126483][T30686] syz.9.10574: attempt to access beyond end of device [ 1775.126483][T30686] loop9: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1775.139897][T30686] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1775.195482][T30686] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1775.214738][T30690] loop1: detected capacity change from 0 to 128 [ 1775.285731][T30697] input: syz1 as /devices/virtual/input/input4 [ 1775.292558][ T28] audit: type=1400 audit(1757083663.487:272): avc: denied { write } for pid=30696 comm="syz.2.10579" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1775.400765][ T28] audit: type=1400 audit(1757083663.497:273): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=3605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1775.444173][T30700] x_tables: duplicate underflow at hook 3 [ 1775.633112][ T28] audit: type=1400 audit(1757083663.497:274): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1775.663343][T30708] loop8: detected capacity change from 0 to 16 [ 1775.782743][T30708] erofs: (device loop8): mounted with root inode @ nid 36. [ 1775.884726][T30708] erofs: (device loop8): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 1775.919249][ T28] audit: type=1400 audit(1757083663.497:275): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=3605 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1775.954583][T30721] loop9: detected capacity change from 0 to 512 [ 1775.963233][T30708] erofs: (device loop8): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 1775.995706][T30721] EXT4-fs: Ignoring removed mblk_io_submit option [ 1776.017766][T30708] erofs: (device loop8): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 1776.035618][T30721] EXT4-fs: Ignoring removed mblk_io_submit option [ 1776.061300][T30708] erofs: (device loop8): z_erofs_readahead: readahead error at page 6 @ nid 36 [ 1776.073022][T30721] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1776.081938][ T28] audit: type=1400 audit(1757083664.157:276): avc: denied { sys_module } for pid=30718 comm="syz.1.10588" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1776.084297][T30721] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1776.105439][T30708] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 1776.123068][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.123068][T30708] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 1776.137078][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.137078][T30708] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 1776.149458][T30729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10592'. [ 1776.151193][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.151193][T30708] loop8: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 1776.173641][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.173641][T30708] loop8: rw=524288, sector=376, nr_sectors = 16 limit=16 [ 1776.187474][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.187474][T30708] loop8: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 1776.201761][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.201761][T30708] loop8: rw=524288, sector=720, nr_sectors = 16 limit=16 [ 1776.217253][T30708] syz.8.10583: attempt to access beyond end of device [ 1776.217253][T30708] loop8: rw=524288, sector=525144, nr_sectors = 8 limit=16 [ 1776.218996][T30731] loop5: detected capacity change from 0 to 16 [ 1776.247584][T30731] erofs: (device loop5): mounted with root inode @ nid 36. [ 1776.262795][T30721] EXT4-fs (loop9): 1 truncate cleaned up [ 1776.273583][T30721] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1776.308482][ T28] audit: type=1400 audit(1757083664.517:277): avc: denied { mounton } for pid=30730 comm="syz.5.10593" path="/215/file0/file0" dev="loop5" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1776.314056][T30737] loop8: detected capacity change from 0 to 512 [ 1776.498001][T30737] EXT4-fs (loop8): 1 orphan inode deleted [ 1776.507693][T30737] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1776.518864][T30737] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.519290][T30613] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1776.535501][T30737] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.10595: iget: bad i_size value: 360287970189639690 [ 1776.546567][T30749] loop2: detected capacity change from 0 to 128 [ 1776.554615][T30737] EXT4-fs error (device loop8): ext4_lookup:1858: inode #15: comm syz.8.10595: iget: bad i_size value: 360287970189639690 [ 1776.558667][T30613] EXT4-fs error (device loop8): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 1776.600447][T30749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1776.609840][ T28] audit: type=1400 audit(1757083664.817:278): avc: denied { setopt } for pid=30750 comm="syz.1.10600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1776.613037][T30749] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.642220][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1776.646926][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10602'. [ 1776.662304][T27673] EXT4-fs (loop9): unmounting filesystem. [ 1776.680917][T30756] loop8: detected capacity change from 0 to 512 [ 1776.695743][T30756] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1776.705163][T30758] loop9: detected capacity change from 0 to 1024 [ 1776.717086][T25577] EXT4-fs (loop2): unmounting filesystem. [ 1776.726073][T30756] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1776.735919][T30756] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.736452][T30758] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1776.758421][T14928] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1776.769830][T30756] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.10603: corrupted inode contents [ 1776.781950][T30758] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.786501][T30756] EXT4-fs error (device loop8): ext4_dirty_inode:6121: inode #2: comm syz.8.10603: mark_inode_dirty error [ 1776.830385][T30758] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 3: comm syz.9.10601: lblock 3 mapped to illegal pblock 3 (length 1) [ 1776.845019][T30758] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1776.845156][T30756] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.10603: corrupted inode contents [ 1776.859937][T30768] loop1: detected capacity change from 0 to 256 [ 1776.872581][T30758] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1776.872581][T30758] [ 1776.892383][T30768] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1776.899222][T30758] EXT4-fs error (device loop9): ext4_map_blocks:745: inode #15: block 4: comm syz.9.10601: lblock 4 mapped to illegal pblock 4 (length 12) [ 1776.909285][T30769] EXT4-fs error (device loop8): ext4_do_update_inode:5256: inode #2: comm syz.8.10603: corrupted inode contents [ 1776.921837][T30768] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1776.935369][T30758] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 1776.940255][T30768] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 1776.957253][T30758] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1776.957253][T30758] [ 1776.965373][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1776.987427][T14928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.998089][T14928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1777.021202][T14928] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1777.031277][T14928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.066983][T14928] usb 6-1: config 0 descriptor?? [ 1777.074179][T30758] EXT4-fs error (device loop9): ext4_map_blocks:635: inode #15: block 4: comm syz.9.10601: lblock 4 mapped to illegal pblock 4 (length 4) [ 1777.089669][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1777.097939][T30758] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 1777.113326][T30758] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 67 with max blocks 1 with error 28 [ 1777.113540][T30779] kvm [30778]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010007 data 0x0 [ 1777.126764][T30758] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1777.126764][T30758] [ 1777.145562][T30758] EXT4-fs (loop9): Total free blocks count 0 [ 1777.151927][T30758] EXT4-fs (loop9): Free/Dirty block details [ 1777.164915][T30758] EXT4-fs (loop9): free_blocks=4293918720 [ 1777.173671][T30782] loop2: detected capacity change from 0 to 128 [ 1777.184130][T30782] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1777.217373][T30787] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10613'. [ 1777.243190][T30782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.285581][T30613] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1777.295660][T30794] loop1: detected capacity change from 0 to 128 [ 1777.315492][T30794] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 1777.345700][T30613] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 1777.356257][T30794] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61410000 (sector = 1) [ 1777.536302][T14928] plantronics 0003:047F:FFFF.002F: unbalanced collection at end of report description [ 1777.848056][T14928] plantronics 0003:047F:FFFF.002F: parse failed [ 1777.854654][T14928] plantronics: probe of 0003:047F:FFFF.002F failed with error -22 [ 1777.864666][T14928] usb 6-1: USB disconnect, device number 24 [ 1777.926635][T28972] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1778.145427][T30822] loop8: detected capacity change from 0 to 128 [ 1778.520005][ T335] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1778.600148][T30838] loop8: detected capacity change from 0 to 2048 [ 1778.634450][T30838] loop8: p1 < > p3 [ 1778.640516][T30838] loop8: p3 size 134217728 extends beyond EOD, truncated [ 1778.704324][T28972] usb 3-1: Using ep0 maxpacket: 8 [ 1778.710617][ T335] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.742909][ T335] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1778.754461][T28972] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1778.763713][T28972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.772376][ T335] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1778.781941][T28972] usb 3-1: config 0 descriptor?? [ 1778.786999][ T335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1778.795247][ T335] usb 10-1: SerialNumber: syz [ 1778.811802][T30843] loop8: detected capacity change from 0 to 512 [ 1778.826317][T30843] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1778.835627][T30843] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1778.851178][T30843] EXT4-fs error (device loop8): ext4_get_first_dir_block:3594: inode #12: comm syz.8.10635: directory missing '.' [ 1778.863711][T30843] EXT4-fs (loop8): Remounting filesystem read-only [ 1778.875205][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1779.038412][T30850] loop8: detected capacity change from 0 to 512 [ 1779.045242][T30850] EXT4-fs: Ignoring removed i_version option [ 1779.056946][T28972] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1779.068311][ T335] usb 10-1: 0:2 : does not exist [ 1779.073366][T30850] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1779.082347][T30850] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1779.102100][ T335] usb 10-1: USB disconnect, device number 9 [ 1779.128634][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1779.181667][T30859] loop8: detected capacity change from 0 to 256 [ 1779.193311][T30859] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1779.271192][T30865] loop8: detected capacity change from 0 to 1024 [ 1779.285757][T30865] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1779.314966][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1779.382833][T30871] loop5: detected capacity change from 0 to 512 [ 1779.400601][T30875] Illegal XDP return value 4294967274 on prog (id 5891) dev N/A, expect packet loss! [ 1779.424051][T30871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1779.438122][T30871] EXT4-fs (loop5): 1 truncate cleaned up [ 1779.443959][T30871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1779.478753][T26928] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /220/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1779.538728][T26928] EXT4-fs (loop5): unmounting filesystem. [ 1779.613925][T28972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1779.626232][T28972] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1779.693893][T28972] asix: probe of 3-1:0.0 failed with error -71 [ 1779.701433][T28972] usb 3-1: USB disconnect, device number 15 [ 1779.732143][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 1779.732158][ T28] audit: type=1400 audit(1757083667.937:325): avc: denied { execmem } for pid=30903 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1779.759208][ T28] audit: type=1400 audit(1757083667.957:326): avc: denied { execmem } for pid=30906 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1779.780056][ T28] audit: type=1400 audit(1757083667.957:327): avc: denied { create } for pid=30904 comm="syz.1.10662" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 1779.801390][ T28] audit: type=1400 audit(1757083667.967:328): avc: denied { execmem } for pid=30907 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1779.821011][ T28] audit: type=1400 audit(1757083667.967:329): avc: denied { execmem } for pid=30908 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 1780.054535][T30613] device bridge_slave_1 left promiscuous mode [ 1780.060673][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.068453][T30613] device bridge_slave_0 left promiscuous mode [ 1780.074732][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.082971][T30613] device veth1_macvtap left promiscuous mode [ 1780.088398][ T28] audit: type=1400 audit(1757083668.287:330): avc: denied { read write } for pid=27673 comm="syz-executor" name="loop9" dev="devtmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1780.089207][T30613] device veth0_vlan left promiscuous mode [ 1780.153516][ T28] audit: type=1400 audit(1757083668.357:331): avc: denied { unmount } for pid=26974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 1780.154221][T26974] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /232/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 1780.189859][ T28] audit: type=1400 audit(1757083668.357:332): avc: denied { unmount } for pid=26974 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 1780.232344][ T28] audit: type=1400 audit(1757083668.407:333): avc: denied { read write } for pid=25577 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 1780.256723][ T28] audit: type=1400 audit(1757083668.427:334): avc: denied { read write } for pid=30913 comm="syz.9.10664" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 1780.366074][T26974] EXT4-fs (loop8): unmounting filesystem. [ 1780.566063][T30613] tipc: Left network mode [ 1780.620784][T30968] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1781.064471][T30613] device bridge_slave_1 left promiscuous mode [ 1781.070698][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.078279][T30613] device bridge_slave_0 left promiscuous mode [ 1781.084491][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.092442][T30613] device veth1_macvtap left promiscuous mode [ 1781.098600][T30613] device veth0_vlan left promiscuous mode [ 1781.854553][T30613] device bridge_slave_1 left promiscuous mode [ 1781.860682][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.868163][T30613] device bridge_slave_0 left promiscuous mode [ 1781.874342][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.882042][T30613] device bridge_slave_1 left promiscuous mode [ 1781.888327][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.896001][T30613] device bridge_slave_0 left promiscuous mode [ 1781.902109][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.910164][T30613] device veth1_macvtap left promiscuous mode [ 1781.916262][T30613] device veth0_vlan left promiscuous mode [ 1781.922432][T30613] device veth1_macvtap left promiscuous mode [ 1781.928481][T30613] device veth0_vlan left promiscuous mode [ 1782.874538][T30613] device bridge_slave_1 left promiscuous mode [ 1782.880925][T30613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.888521][T30613] device bridge_slave_0 left promiscuous mode [ 1782.894812][T30613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.902660][T30613] device veth1_macvtap left promiscuous mode [ 1782.909123][T30613] device veth0_vlan left promiscuous mode