last executing test programs: 25.612377994s ago: executing program 0 (id=820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x32) 22.52692647s ago: executing program 0 (id=828): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a07, 0x1700) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) sendto$packet(r6, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x1a, 0x0, 0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) socket(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 19.300552849s ago: executing program 0 (id=836): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) 14.304567053s ago: executing program 0 (id=848): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_MOD_AND={0x15, 0x1, {{{}, 0x0, 0x0, 0x0, 0x0, "baa417a5c71dfa86"}}}]}, 0x2c}}, 0x0) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, 0x0, 0x0) 14.200508773s ago: executing program 3 (id=849): r0 = gettid() r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = creat(0x0, 0x0) close(r2) userfaultfd(0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f0000000100), 0xff, 0x490, &(0x7f0000000f40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) 10.572542009s ago: executing program 1 (id=853): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000066930108205050088000002030109021b000100000000090402000191baf20509050b02ad"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 10.206311884s ago: executing program 0 (id=855): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000d80)) read$hidraw(0xffffffffffffffff, 0x0, 0x49) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 9.475912661s ago: executing program 0 (id=856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x54) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f0000000600)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0x10, 0xfffffffffffffffe}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) getresgid(0x0, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0xe0ffff, 0x4101, 0x3) 9.290589428s ago: executing program 3 (id=859): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e3ff0000d50ab281d359bc13000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x404042bbd) 7.968650221s ago: executing program 2 (id=860): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x0, 0x0) 7.876766839s ago: executing program 2 (id=861): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40), 0x8200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') preadv(r0, &(0x7f0000002b00)=[{&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x2, 0xe, 0x6) 7.615413514s ago: executing program 4 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) close_range(r2, 0xffffffffffffffff, 0x0) 7.585831777s ago: executing program 3 (id=863): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000002000040000000eccd"]) syz_emit_ethernet(0x3e, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 7.385792565s ago: executing program 1 (id=864): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x200000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 7.340736959s ago: executing program 4 (id=865): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"/3245], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 6.770584682s ago: executing program 2 (id=866): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000001000)=[{{&(0x7f0000000280)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="5935967560dbbe3d9d0ff39084f0b374fe4efae33488bcce1e9c895fa8ee21ce4560dce91ddf518d2d5e37ddc3d323747afdc84fc09440195eca3cb0868534929ac5255f1cce4eefe18befa7448dc0ea1d7ff4b0329f45afcf2a5fcc786d943bd466f3bf6d2931df205ad5f7b6a0a27761cb3d964ee1e5fa27179fac6b034de791848367c1cc958e96bc021278f831dcee05b0749857c893a1c6cfb77ea92b9bd2e0fa4df6c3523b64dd5613e26e87051347dca4c58fdb6074c11f343164c996815bcfcb6f5c83defc9dd1e8", 0xcc}], 0x1, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{&(0x7f00000005c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000600)="018e65faf8e8a72724e721c36424e52a046916a0849a07002bb9a4dc9ae2d2f45282e20c9a599df455c24248c406ae9f96dd17a8e1af48920598d21ee1c7db5251b37be1eb6c45667984b6150c2642f85f9b14f6b817c730a8cf21df67cb1d5b7d8c225947dd85109300adfb72bc4a2d122d5d7ddfdf26b5328fd84e74628b4de928d6f3ffbe8540d6df909f7798128f4b17e77929", 0x95}, {&(0x7f00000006c0)="9041851ab4ac821f0df699166d3ebe342ef83e9ccbc7b9b03e2d3aa2ab6498", 0x1f}, {&(0x7f0000000700)="f71b18066fe24557c6d88c78d8eb7bae", 0x10}, {&(0x7f0000000740)="1611bdca44cb6b1febc02fb66bf187cbbbc57e80798ad30cfe70b950c7fda005e26797982050efe9be3cb800bc965c6d500d3966421c0ebe442ad492fc50b223752d4fe3f585e953d23720c3c4269172525a7dea2b4e2fa33f06cad59736cd829549809d5c638a1a36bcc0506b1f193f72b0d45fdb3a5ddbecf4c95e8e6efa9ba5b4", 0x82}], 0x4}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)="cf2fd4bb83842c69641436bba7086088b9af5a5920a2b24d3053dd75af15c4600a438127d648d1c414ce04e61dc0fc70f005c671c628daba9c9e4c9de8df011a5bce0a4c5bbe7d1e4affd9845a8d150deabba944a0e571c762968218d580429761c7d69a4112cf336cc74d3fde3b1c30cd61376c92c1fb6c0d964c8c6d4db9d26dc5e2dd1e2de58e21f390f43db888c9369378239aab994820c5ad41697554ee2501f2d3091ec1c63a5a160acedff213055fd90ba5f7d7f47059e57ffc678ab56cd3c6", 0xc3}, {&(0x7f0000000980)="9aa00793516092e65185fa6142f8665c8a5bc647075b962b250ea9ca69869269587d", 0x22}, {&(0x7f0000000a00)="28e596d3da522abc305a347e6ad4d6089732fd250cdb1f93d263cff56d0abf69e5792988d87d17c5fbd0106c84078887ca35e8bb72fd6250a7884cb4a7adceb7f9ec14bfc21705cff2f108241e6eda93c9dff18283793a253eaeb6dccdf3686e7ff0e5f0d3b74352cde027beed7c545491ef44b750d44d45adb8a77d5260916cf595e4382ad0f64d3e124591b8d57b752a171ca34f7162f7df31", 0x9a}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="526506b478cac933489a42a7e9b8690892be2cc52c817ac7c7edd38e99ba34ac0d05e77cd9318cb875e58f4236258e095e244a93a484fdfbca6c0ed9fb7b14eb0894dc1a9df7d826e41bdfca998f51b7ab5e34d7c48b4c9ebccf0dc43c893c40ae50d58e52a664814b028a3f0f3b33e49dc29cb0dc2fd17cfd95f7f234cb2f264af90362158c5224cdd50648d76183af654add708e2bbdf6eaa4c05c1b530f707479b6135d415d31c9b26277a0eddc92d5a1eb94a9ccc11adc6d0edd", 0xbc}], 0x5, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000000000000200000003000000000000001100000000000000000000000100000003000000000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"], 0x128}}, {{&(0x7f0000000e00)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0xe}}], 0x18}}], 0x4, 0x20000000) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000000300)=""/104, 0x68) 6.606211857s ago: executing program 3 (id=867): r0 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000d80)) read$hidraw(r0, 0x0, 0x49) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x1068) 6.504837467s ago: executing program 1 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000380)={0x19980330, r0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) dup3(r4, r1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 5.406330609s ago: executing program 2 (id=869): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket(0x1e, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x4004014) 5.197958578s ago: executing program 4 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x3) ioctl$TUNSETLINK(r6, 0x400454cd, 0x337) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x1200}], 0x400000000000172, 0x4001c00) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000007f72a16975bddbff0000000000000000000016"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_CACHEINFO={0x14}]}, 0x2c}}, 0x0) 5.015188925s ago: executing program 1 (id=871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/320], 0x1, 0x5505, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x100803, &(0x7f00000008c0)=ANY=[@ANYBLOB="696f636861727365743d6d61636963656c616e642c646973636172642c646973636172642c6e616d65636173653d312c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c646973636172642c646d61736b3d30303030303030303030303030303030303030303030352c696f636861727365743d6b6f69382d72752c666d61736b3d30303030303030303030303030303030303030303030372c00b73b8d3a880c4aa10c61f5cd70e424fd6c91284a66c61612a0b31be44cecd148b90ad3994d211d2790e6b1ac3c6dab9c3aa4de754e18ce8049c23a297cf800f770b2a1092dba80cc21962a5941e79dc33ca8dfb250c9b1f2b3ab1957c35ebdfb1a595feb4526265c4022ff2eb52c329e98718c733a647b968dc9fcfb373398fb9e2a7494afd3acaf55643fe7e3fcf7d5086cfe2a4c2689ebb2d69ae64f11fe6099ee6d5649e5f2ee75c183abd532c2588c1d53a560d031d1097bb73af1fe0a4286a01b07c2235e994c2581"], 0x5, 0x1522, &(0x7f00000037c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) fallocate(r5, 0x0, 0x0, 0x8000001) fallocate(r5, 0x20, 0x2000, 0x140000) 4.4207375s ago: executing program 3 (id=872): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) 4.046697275s ago: executing program 4 (id=873): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x1509, &(0x7f0000002d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x80000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0xc0185879, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/73], 0x110) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) 2.968596105s ago: executing program 4 (id=874): mkdirat(0xffffffffffffff9c, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e3ff0000d50ab281d359bc13000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000001000100090000000100", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x0, 0x404042bbd) 1.919383372s ago: executing program 4 (id=875): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.740679609s ago: executing program 1 (id=876): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0) 1.285514931s ago: executing program 2 (id=877): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=@updsa={0x194, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@sec_ctx={0xc, 0x8, {0x8}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}}, @tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}}}, @replay_esn_val={0x28, 0x17, {0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x9, 0x5]}}]}, 0x194}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x14}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.19252993s ago: executing program 3 (id=878): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r8, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 1.19192552s ago: executing program 1 (id=879): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) capset(&(0x7f0000000380)={0x19980330, r0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000000c0)='./file0\x00', 0x0) 0s ago: executing program 2 (id=880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): = 8 limit=40427 [ 290.537591][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 290.701079][ T14] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 290.708746][ T14] usb 3-1: can't read configurations, error -61 [ 290.831959][ T3684] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 290.900714][ T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.990885][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 291.110857][ T14] usb 3-1: device descriptor read/all, error -71 [ 291.121242][ T14] usb usb3-port1: unable to enumerate USB device [ 291.416006][ T5962] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.424007][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.441807][ T3684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.458829][ T3684] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.469038][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.487934][ T3684] usb 1-1: config 0 descriptor?? [ 291.507358][ T5953] loop4: detected capacity change from 0 to 40427 [ 291.530795][ T5953] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 291.541792][ T5953] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 291.562052][ T5953] F2FS-fs (loop4): invalid crc value [ 291.632243][ T5953] F2FS-fs (loop4): Found nat_bits in checkpoint [ 291.808251][ T5953] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 291.828668][ T5953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 292.093020][ T5972] loop1: detected capacity change from 0 to 512 [ 292.110538][ T3684] hid (null): bogus close delimiter [ 292.252079][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.298317][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.428562][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.480: corrupted inode contents [ 292.486101][ T5972] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.480: mark_inode_dirty error [ 292.527249][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.480: corrupted inode contents [ 292.559735][ T5972] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.480: mark_inode_dirty error [ 292.586595][ T5972] Quota error (device loop1): write_blk: dquota write failed [ 292.615634][ T5972] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 292.638468][ T4910] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 292.655644][ T5972] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.480: Failed to acquire dquot type 0 [ 292.670894][ T4910] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 292.707146][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.480: corrupted inode contents [ 292.740674][ T5972] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.480: mark_inode_dirty error [ 292.796530][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.480: corrupted inode contents [ 292.834474][ T5972] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.480: mark_inode_dirty error [ 292.867808][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.480: corrupted inode contents [ 292.911374][ T5972] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 292.947787][ T5972] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.480: corrupted inode contents [ 292.992384][ T5972] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.480: mark_inode_dirty error [ 293.021183][ T5972] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 293.038905][ T5972] EXT4-fs (loop1): 1 truncate cleaned up [ 293.059643][ T5972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 293.089213][ T5972] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038 (0x7fffffff) [ 293.245830][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 293.512825][ T3678] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 293.908420][ T5996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.650956][ T3678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.675030][ T3678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.736094][ T3678] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 294.766268][ T3678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.809249][ T3678] usb 3-1: config 0 descriptor?? [ 294.885886][ T5986] loop3: detected capacity change from 0 to 40427 [ 294.890050][ T6001] loop4: detected capacity change from 0 to 256 [ 294.961885][ T6001] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 294.980618][ T5986] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.021085][ T27] audit: type=1800 audit(1727766216.396:57): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.488" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 295.164374][ T5986] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.201384][ T5360] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 295.425232][ T6007] syz.4.488: attempt to access beyond end of device [ 295.425232][ T6007] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 295.991017][ T5360] usb 2-1: Using ep0 maxpacket: 16 [ 296.171370][ T3678] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 296.243698][ T5360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 296.285863][ T5360] usb 2-1: can't read configurations, error -61 [ 296.321952][ T3678] usb 3-1: USB disconnect, device number 8 [ 296.423896][ T3638] syz-executor: attempt to access beyond end of device [ 296.423896][ T3638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 296.476070][ T5360] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 296.730825][ T5360] usb 2-1: Using ep0 maxpacket: 16 [ 296.901028][ T5360] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 296.918826][ T5360] usb 2-1: can't read configurations, error -61 [ 297.088598][ T5360] usb usb2-port1: attempt power cycle [ 297.511107][ T3684] usb 1-1: string descriptor 0 read error: -32 [ 297.663111][ T3684] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 297.740783][ T5360] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 298.180742][ T5360] usb 2-1: device descriptor read/8, error -71 [ 298.414448][ T6031] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 299.267493][ T6040] ipt_CLUSTERIP: Please specify destination IP [ 300.076734][ T6048] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 300.885526][ T6042] loop4: detected capacity change from 0 to 40427 [ 300.935313][ T6042] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 300.950656][ T6042] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 301.030971][ T6042] F2FS-fs (loop4): invalid crc value [ 301.059492][ T6042] F2FS-fs (loop4): Found nat_bits in checkpoint [ 301.151938][ T6042] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 301.159674][ T6042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 301.742803][ T3646] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.752995][ T3646] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.761385][ T3646] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.770866][ T3646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.783737][ T3651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 301.791062][ T3646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.893728][ T4896] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 301.904338][ T4896] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 302.197578][ T6047] loop1: detected capacity change from 0 to 40427 [ 302.222564][ T6047] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 302.230617][ T6047] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 302.290177][ T6047] F2FS-fs (loop1): invalid crc value [ 302.363393][ T6061] chnl_net:caif_netlink_parms(): no params data found [ 302.670368][ T6051] loop2: detected capacity change from 0 to 40427 [ 302.719325][ T6047] F2FS-fs (loop1): Found nat_bits in checkpoint [ 302.948975][ T6051] F2FS-fs (loop2): Found nat_bits in checkpoint [ 303.039090][ T6061] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.051422][ T6061] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.076820][ T6061] device bridge_slave_0 entered promiscuous mode [ 303.106733][ T6061] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.107847][ T6051] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 303.121712][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.187640][ T6061] device bridge_slave_1 entered promiscuous mode [ 303.350660][ T3683] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 303.379090][ T6061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.644813][ T6061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.832745][ T6061] team0: Port device team_slave_0 added [ 303.870697][ T3646] Bluetooth: hci4: command tx timeout [ 303.952177][ T3902] syz-executor: attempt to access beyond end of device [ 303.952177][ T3902] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 304.111198][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 304.270922][ T3683] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 304.288308][ T3683] usb 4-1: can't read configurations, error -61 [ 304.362088][ T6061] team0: Port device team_slave_1 added [ 304.368000][ T6087] sch_tbf: burst 53766 is lower than device lo mtu (65550) ! [ 304.490869][ T3683] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 304.737192][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.849941][ T6095] overlayfs: failed to resolve './file0': -2 [ 304.999550][ T5360] usb 1-1: USB disconnect, device number 6 [ 305.049519][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.376561][ T6061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.473369][ T6061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.480357][ T6061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.530841][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 305.756873][ T6061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.041844][ T3643] Bluetooth: hci4: command tx timeout [ 307.398998][ T4889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.553169][ T3683] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 307.561821][ T3683] usb 4-1: can't read configurations, error -71 [ 307.570986][ T3683] usb usb4-port1: attempt power cycle [ 307.583858][ T6112] loop1: detected capacity change from 0 to 512 [ 307.680739][ T6112] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 307.689102][ T6112] System zones: 1-12 [ 307.753443][ T6112] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.511: inode #1: comm syz.1.511: iget: illegal inode # [ 307.766914][ T6112] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.511: error while reading EA inode 1 err=-117 [ 307.791511][ T6112] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.511: inode #1: comm syz.1.511: iget: illegal inode # [ 307.853108][ T4889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.871341][ T6112] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.511: error while reading EA inode 1 err=-117 [ 307.904507][ T6112] EXT4-fs (loop1): 1 orphan inode deleted [ 307.910347][ T6112] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.960332][ T6061] device hsr_slave_0 entered promiscuous mode [ 308.133710][ T6061] device hsr_slave_1 entered promiscuous mode [ 308.140956][ T3643] Bluetooth: hci4: command tx timeout [ 308.435592][ T4889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.579026][ T6117] loop4: detected capacity change from 0 to 40427 [ 308.664584][ T6117] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 308.686759][ T6117] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 308.717514][ T4889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.731778][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 308.754431][ T6117] F2FS-fs (loop4): Found nat_bits in checkpoint [ 308.899641][ T6126] ipt_CLUSTERIP: Please specify destination IP [ 308.954530][ T6117] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 308.972147][ T6117] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.228746][ T4889] tipc: Disabling bearer [ 309.251984][ T4889] tipc: Left network mode [ 309.467655][ T6125] loop2: detected capacity change from 0 to 40427 [ 309.522862][ T6125] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 309.552767][ T6125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 309.631495][ T6125] F2FS-fs (loop2): invalid crc value [ 309.688479][ T6125] F2FS-fs (loop2): Found nat_bits in checkpoint [ 309.847364][ T6125] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 309.862531][ T6125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 310.210665][ T3643] Bluetooth: hci4: command tx timeout [ 310.528600][ T6131] loop1: detected capacity change from 0 to 40427 [ 310.667453][ T4887] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 310.686067][ T6155] loop3: detected capacity change from 0 to 256 [ 310.696566][ T4887] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 310.744265][ T6155] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 310.761594][ T6131] F2FS-fs (loop1): Found nat_bits in checkpoint [ 310.781048][ T27] audit: type=1800 audit(1727766232.156:58): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.516" name="file1" dev="loop3" ino=1048616 res=0 errno=0 [ 310.910680][ T6131] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 311.122134][ T6155] syz.3.516: attempt to access beyond end of device [ 311.122134][ T6155] loop3: rw=0, sector=184, nr_sectors = 120 limit=256 [ 311.725047][ T5555] syz-executor: attempt to access beyond end of device [ 311.725047][ T5555] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 311.747645][ T6061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.757668][ T6061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.783040][ T6061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.801247][ T6061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.894060][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'. [ 312.012554][ T6172] binder: 6167:6172 ioctl 4018620d 0 returned -22 [ 312.435970][ T6180] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 312.706509][ T6165] device syzkaller0 entered promiscuous mode [ 313.100163][ T6178] tipc: Enabled bearer , priority 10 [ 313.514365][ T6197] overlayfs: missing 'lowerdir' [ 313.560731][ T3683] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 313.840822][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 314.001587][ T3683] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 314.019655][ T3683] usb 4-1: can't read configurations, error -61 [ 314.194266][ T3683] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 314.679787][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 315.313956][ T3683] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 315.321837][ T3683] usb 4-1: can't read configurations, error -61 [ 315.328288][ T3683] usb usb4-port1: attempt power cycle [ 315.740798][ T3683] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 315.830793][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 315.991663][ T3683] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 315.999267][ T3683] usb 4-1: can't read configurations, error -71 [ 316.069809][ T6208] loop3: detected capacity change from 0 to 512 [ 316.110947][ T6208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 316.118949][ T6208] System zones: 1-12 [ 316.136097][ T6208] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.524: inode #1: comm syz.3.524: iget: illegal inode # [ 316.168057][ T6208] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.524: error while reading EA inode 1 err=-117 [ 316.182151][ T6208] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.524: inode #1: comm syz.3.524: iget: illegal inode # [ 316.203216][ T6208] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.524: error while reading EA inode 1 err=-117 [ 316.232125][ T6208] EXT4-fs (loop3): 1 orphan inode deleted [ 316.237899][ T6208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 317.096217][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103179][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.139696][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 317.550825][ T6212] ipt_CLUSTERIP: Please specify destination IP [ 319.266990][ T4889] device hsr_slave_0 left promiscuous mode [ 319.312362][ T4889] device hsr_slave_1 left promiscuous mode [ 319.362719][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.370172][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.392962][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.412678][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.458472][ T4889] device bridge_slave_1 left promiscuous mode [ 319.479218][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.506667][ T4889] device bridge_slave_0 left promiscuous mode [ 319.561798][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.593547][ T4889] device veth1_macvtap left promiscuous mode [ 319.599757][ T4889] device veth0_macvtap left promiscuous mode [ 319.626680][ T4889] device veth1_vlan left promiscuous mode [ 319.637371][ T4889] device veth0_vlan left promiscuous mode [ 321.203160][ T5360] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 321.323367][ T4889] team0 (unregistering): Port device team_slave_1 removed [ 321.360084][ T4889] team0 (unregistering): Port device team_slave_0 removed [ 321.394415][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.429805][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.453406][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 321.650736][ T5360] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 321.659691][ T5360] usb 4-1: can't read configurations, error -61 [ 321.796893][ T4889] bond0 (unregistering): Released all slaves [ 321.821135][ T5360] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 321.877192][ T6061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.911950][ T6061] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.946063][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 321.967132][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 321.980875][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 321.989742][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.998609][ T4887] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.005753][ T4887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.025799][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 322.049484][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 322.059717][ T4887] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.066856][ T4887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.078823][ T6242] device vlan2 entered promiscuous mode [ 322.084657][ T6242] device syz_tun entered promiscuous mode [ 322.097320][ T6242] device syz_tun left promiscuous mode [ 322.237548][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 322.246566][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 322.270644][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 322.461848][ T5360] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 322.504158][ T5360] usb 4-1: can't read configurations, error -61 [ 322.573219][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 322.939854][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 322.968317][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.043641][ T6256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 323.101183][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 323.159221][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.229541][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 323.286808][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.358107][ T6061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.376980][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.578903][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 323.588192][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.595720][ T6253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.648743][ T6061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.710651][ T5360] usb usb4-port1: attempt power cycle [ 323.717495][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.777711][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 323.812998][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.832152][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 323.848618][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 323.865668][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 323.883653][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 324.006843][ T6061] device veth0_vlan entered promiscuous mode [ 324.058444][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 324.080155][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 324.116618][ T6061] device veth1_vlan entered promiscuous mode [ 324.135616][ T6272] loop3: detected capacity change from 0 to 128 [ 324.162727][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 324.172607][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 324.214181][ T6272] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 324.228667][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 324.303049][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 324.322206][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 324.336991][ T3705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 324.359032][ T6061] device veth0_macvtap entered promiscuous mode [ 324.382494][ T6061] device veth1_macvtap entered promiscuous mode [ 324.421647][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.450987][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.478386][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.511920][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.545014][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.556736][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.567250][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.578177][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.590523][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.605576][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 324.618381][ T6268] ipt_CLUSTERIP: Please specify destination IP [ 324.619064][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 324.641026][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.646682][ T6275] loop1: detected capacity change from 0 to 256 [ 324.649856][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.674414][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.691786][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.706261][ T6275] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 324.718229][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.729989][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.746710][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.757622][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.773913][ T6061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.787987][ T6061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.805729][ T27] audit: type=1800 audit(1727766246.176:59): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.540" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 324.865047][ T6061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.881167][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.896236][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.990161][ T6061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.027907][ T6061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.098330][ T6278] syz.1.540: attempt to access beyond end of device [ 325.098330][ T6278] loop1: rw=0, sector=184, nr_sectors = 120 limit=256 [ 325.530170][ T6061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.593649][ T6061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.771158][ T6281] netlink: 'syz.3.539': attribute type 4 has an invalid length. [ 325.984152][ T6285] device syzkaller0 entered promiscuous mode [ 326.015371][ T4887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.158668][ T6281] syz.3.539 (6281) used greatest stack depth: 19552 bytes left [ 326.482880][ T4887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.084186][ T6298] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 330.265024][ T6309] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.819859][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 330.876507][ T6302] device vlan2 entered promiscuous mode [ 330.882177][ T6302] device syz_tun entered promiscuous mode [ 330.892525][ T6302] device syz_tun left promiscuous mode [ 331.024221][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.057040][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.099063][ T4887] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 331.416073][ T3684] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 331.680660][ T3684] usb 3-1: Using ep0 maxpacket: 16 [ 331.797708][ T6318] loop0: detected capacity change from 0 to 40427 [ 331.805890][ T6318] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 331.821043][ T3684] usb 3-1: config 0 has no interfaces? [ 331.847923][ T6318] F2FS-fs (loop0): invalid crc value [ 331.859679][ T6318] F2FS-fs (loop0): Found nat_bits in checkpoint [ 331.927443][ T6315] loop3: detected capacity change from 0 to 40427 [ 331.934261][ T6318] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 331.952463][ T6315] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 331.960219][ T6315] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 331.990867][ T3684] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 332.000264][ T3684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.043204][ T6315] F2FS-fs (loop3): invalid crc value [ 332.123059][ T6315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 332.180629][ T3684] usb 3-1: Product: syz [ 332.184831][ T3684] usb 3-1: Manufacturer: syz [ 332.189782][ T3684] usb 3-1: SerialNumber: syz [ 332.203298][ T3684] usb 3-1: config 0 descriptor?? [ 332.337897][ T6332] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1336/0x1f90 [ 332.349594][ T6332] syz.0.500: attempt to access beyond end of device [ 332.349594][ T6332] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 332.543355][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.714662][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.740093][ T6315] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 332.748685][ T6315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 333.893194][ T4898] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 333.916146][ T4898] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 333.975650][ T6342] loop1: detected capacity change from 0 to 512 [ 334.551695][ T6342] EXT4-fs (loop1): 1 orphan inode deleted [ 334.619935][ T6342] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 334.810542][ T26] usb 3-1: USB disconnect, device number 9 [ 334.828539][ T6342] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff) [ 334.907452][ T4867] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 334.993990][ T4867] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:19: Failed to release dquot type 1 [ 335.108642][ T6355] loop2: detected capacity change from 0 to 16 [ 335.772609][ T6353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 335.957668][ T6355] erofs: (device loop2): mounted with root inode @ nid 36. [ 336.059167][ T6355] syz.2.557: attempt to access beyond end of device [ 336.059167][ T6355] loop2: rw=0, sector=8, nr_sectors = 32 limit=16 [ 336.398816][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 336.723670][ T6370] device vlan2 entered promiscuous mode [ 336.729257][ T6370] device syz_tun entered promiscuous mode [ 336.738794][ T6370] device syz_tun left promiscuous mode [ 337.423576][ T6373] ipt_CLUSTERIP: Please specify destination IP [ 338.759834][ T6384] tap0: tun_chr_ioctl cmd 1074025677 [ 338.766046][ T6384] tap0: linktype set to 823 [ 341.318793][ T6396] loop4: detected capacity change from 0 to 1024 [ 341.363295][ T6396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 341.507689][ T6396] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 341.657168][ T6407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 342.237067][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 342.430648][ T3684] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 342.483648][ T6402] loop1: detected capacity change from 0 to 40427 [ 342.530214][ T6402] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 342.556692][ T6402] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 342.572658][ T6402] F2FS-fs (loop1): invalid crc value [ 342.609883][ T6402] F2FS-fs (loop1): Found nat_bits in checkpoint [ 342.732337][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 342.747263][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 342.755831][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 342.880819][ T3684] usb 4-1: Using ep0 maxpacket: 16 [ 343.014291][ T3684] usb 4-1: config 0 has no interfaces? [ 343.051561][ T6402] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 343.107680][ T6402] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 343.201695][ T3684] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 343.255433][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.276952][ T3684] usb 4-1: Product: syz [ 343.297180][ T3684] usb 4-1: Manufacturer: syz [ 343.313225][ T3684] usb 4-1: SerialNumber: syz [ 343.328987][ T3684] usb 4-1: config 0 descriptor?? [ 344.336917][ T6404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.363290][ T6404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.420108][ T4887] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 344.438855][ T4887] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 345.707218][ T3678] usb 4-1: USB disconnect, device number 19 [ 345.738797][ T6434] loop1: detected capacity change from 0 to 1024 [ 345.831461][ T6434] EXT4-fs: Ignoring removed oldalloc option [ 346.099611][ T6434] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 347.970756][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.002854][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.010912][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.019602][ T3646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.027904][ T3646] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.035430][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.184938][ T6459] loop4: detected capacity change from 0 to 1024 [ 348.232106][ T6459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 348.276434][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 348.288578][ T6459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 348.448765][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 349.443465][ T6476] device vlan2 entered promiscuous mode [ 349.449111][ T6476] device syz_tun entered promiscuous mode [ 349.465581][ T6476] device syz_tun left promiscuous mode [ 350.014776][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 350.061775][ T3646] Bluetooth: hci3: command tx timeout [ 350.940705][ T3715] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 350.977182][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.985886][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.157846][ T6452] device bridge_slave_0 entered promiscuous mode [ 351.237200][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.253065][ T3715] usb 5-1: Using ep0 maxpacket: 16 [ 351.278617][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.328632][ T6452] device bridge_slave_1 entered promiscuous mode [ 351.370835][ T3715] usb 5-1: config 0 has no interfaces? [ 351.417127][ T6493] device syzkaller0 entered promiscuous mode [ 351.426618][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.448855][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.513157][ T6452] team0: Port device team_slave_0 added [ 351.531003][ T3715] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 351.532657][ T6452] team0: Port device team_slave_1 added [ 351.546785][ T3715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.580774][ T3715] usb 5-1: Product: syz [ 351.596598][ T3715] usb 5-1: Manufacturer: syz [ 351.603624][ T3715] usb 5-1: SerialNumber: syz [ 351.631249][ T3715] usb 5-1: config 0 descriptor?? [ 351.645101][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.654252][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.686878][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.699776][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.713478][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.865795][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.932995][ T6504] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 352.130684][ T3646] Bluetooth: hci3: command tx timeout [ 352.137319][ T6491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.172346][ T6491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.215275][ T6452] device hsr_slave_0 entered promiscuous mode [ 352.223097][ T6452] device hsr_slave_1 entered promiscuous mode [ 352.229782][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.238818][ T6452] Cannot create hsr debugfs directory [ 353.495005][ T6511] loop0: detected capacity change from 0 to 40427 [ 353.502378][ T3678] usb 5-1: USB disconnect, device number 9 [ 353.599745][ T6511] F2FS-fs (loop0): Found nat_bits in checkpoint [ 353.647193][ T6511] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 354.210697][ T3646] Bluetooth: hci3: command tx timeout [ 354.384890][ T6519] loop4: detected capacity change from 0 to 40427 [ 354.395310][ T6519] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 354.402249][ T6519] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 354.460228][ T6061] syz-executor: attempt to access beyond end of device [ 354.460228][ T6061] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.491745][ T6519] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 354.633057][ T6519] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 354.641809][ T6519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 354.720015][ T6519] syz.4.594: attempt to access beyond end of device [ 354.720015][ T6519] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 354.752815][ T6519] syz.4.594: attempt to access beyond end of device [ 354.752815][ T6519] loop4: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 354.773126][ T27] audit: type=1804 audit(1727766276.146:60): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.594" name="/newroot/135/file1/file1" dev="loop4" ino=10 res=1 errno=0 [ 354.775140][ T6519] syz.4.594: attempt to access beyond end of device [ 354.775140][ T6519] loop4: rw=2049, sector=53264, nr_sectors = 64 limit=40427 [ 354.895970][ T3635] syz-executor: attempt to access beyond end of device [ 354.895970][ T3635] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 356.295172][ T3646] Bluetooth: hci3: command tx timeout [ 356.389711][ T6529] device vlan2 entered promiscuous mode [ 356.395455][ T6529] device syz_tun entered promiscuous mode [ 356.411073][ T6529] device syz_tun left promiscuous mode [ 357.393934][ T6539] loop0: detected capacity change from 0 to 512 [ 357.447433][ T6539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 357.458802][ T6539] System zones: 1-12 [ 357.470694][ T6539] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.598: inode #1: comm syz.0.598: iget: illegal inode # [ 357.494007][ T6539] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.598: error while reading EA inode 1 err=-117 [ 359.369621][ T6539] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.598: inode #1: comm syz.0.598: iget: illegal inode # [ 359.414873][ T6539] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.598: error while reading EA inode 1 err=-117 [ 359.624283][ T6552] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 359.644651][ T6452] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.662017][ T6539] EXT4-fs (loop0): 1 orphan inode deleted [ 359.667793][ T6539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.981600][ T6561] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 360.110112][ T6452] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.791487][ T6452] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.093574][ T6061] EXT4-fs (loop0): unmounting filesystem. [ 361.243222][ T6452] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.771251][ T6575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 362.548775][ T6559] loop1: detected capacity change from 0 to 40427 [ 362.580015][ T6577] device syzkaller0 entered promiscuous mode [ 362.639385][ T6559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 362.735891][ T6452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.746113][ T6559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 362.756528][ T6452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.844452][ T6452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.883209][ T6452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.523043][ T6565] loop3: detected capacity change from 0 to 40427 [ 363.609030][ T6565] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 363.627253][ T5555] syz-executor: attempt to access beyond end of device [ 363.627253][ T5555] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.646233][ T6565] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 363.758396][ T6565] F2FS-fs (loop3): invalid crc value [ 363.908432][ T6565] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 366.523353][ T6606] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.373526][ T6608] loop3: detected capacity change from 0 to 512 [ 367.426948][ T6608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 367.442349][ T6608] System zones: 1-12 [ 367.455158][ T6608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.616: inode #1: comm syz.3.616: iget: illegal inode # [ 367.486641][ T6608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.616: error while reading EA inode 1 err=-117 [ 367.499438][ T6608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.616: inode #1: comm syz.3.616: iget: illegal inode # [ 367.544554][ T6608] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.616: error while reading EA inode 1 err=-117 [ 367.565399][ T6608] EXT4-fs (loop3): 1 orphan inode deleted [ 367.585347][ T6608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 368.032388][ T6604] tipc: Started in network mode [ 368.067630][ T6604] tipc: Node identity ac1414aa, cluster identity 4711 [ 368.269914][ T6604] tipc: New replicast peer: 100.1.1.1 [ 368.276995][ T6604] tipc: Enabled bearer , priority 10 [ 368.346558][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.580481][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 368.609756][ T6616] device vlan2 entered promiscuous mode [ 368.615732][ T6616] device syz_tun entered promiscuous mode [ 368.639125][ T6616] device syz_tun left promiscuous mode [ 368.871496][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.908814][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 369.066035][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.177398][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 369.247305][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 369.301155][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.308328][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.375118][ T26] tipc: Node number set to 2886997162 [ 369.381819][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 370.516969][ T6452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.560245][ T6452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.666223][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 370.701330][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 370.739445][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.746638][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.924501][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 370.934084][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 370.944215][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 371.857505][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 371.901795][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 371.951339][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 371.980392][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 372.002417][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 372.037796][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 372.062632][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 372.150649][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.159693][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.167183][ T6643] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.186766][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 372.211646][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 372.574799][ T6632] loop4: detected capacity change from 0 to 40427 [ 372.591067][ T6632] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 372.598944][ T6632] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 372.897184][ T6632] F2FS-fs (loop4): invalid crc value [ 373.060984][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 373.230901][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.242935][ T6632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 373.260696][ T3715] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 373.289983][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.302173][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.340434][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 373.347705][ T6632] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 373.350165][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 373.362688][ T6632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 373.379464][ T6452] device veth0_vlan entered promiscuous mode [ 373.390811][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 373.399505][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 373.407434][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 373.417741][ T6452] device veth1_vlan entered promiscuous mode [ 373.425589][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 373.434596][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 373.444091][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 373.567241][ T6452] device veth0_macvtap entered promiscuous mode [ 373.585863][ T6452] device veth1_macvtap entered promiscuous mode [ 373.618737][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.637343][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.649587][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.675344][ T3715] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.694382][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.707555][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.755151][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.766050][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.776937][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.787840][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.800231][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.801593][ T26] usb 2-1: config 0 has no interfaces? [ 373.888979][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.022835][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.084011][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.153120][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.217347][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.241861][ T26] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 374.265729][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.300681][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.331497][ T26] usb 2-1: Product: syz [ 374.357823][ T26] usb 2-1: Manufacturer: syz [ 374.404809][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.427581][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.448511][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.460875][ T3715] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.461430][ T26] usb 2-1: SerialNumber: syz [ 374.504823][ T3715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.523323][ T6452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.544493][ T3715] usb 1-1: Product: syz [ 374.557799][ T3715] usb 1-1: Manufacturer: syz [ 374.566958][ T26] usb 2-1: config 0 descriptor?? [ 374.572502][ T6452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.575639][ T3715] usb 1-1: SerialNumber: syz [ 374.584169][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.617858][ T4885] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 374.637930][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.655343][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 374.667701][ T4885] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 374.685615][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 374.717113][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 374.751679][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 374.760476][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 374.769414][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 374.778279][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 374.791063][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 375.486117][ T6452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.496035][ T6452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.506941][ T6452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.535128][ T6452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.617369][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.673516][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.714948][ T6676] ÿÿÿÿÿÿ: renamed from vlan1 [ 375.828515][ T4900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.854257][ T4900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.889780][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.921310][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.934154][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 375.951794][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 376.740810][ T3715] cdc_ncm 1-1:1.0: failed to get mac address [ 376.771138][ T3715] cdc_ncm 1-1:1.0: bind() failure [ 376.804995][ T3715] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 376.840802][ T3715] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 376.880792][ T3715] usbtest: probe of 1-1:1.1 failed with error -71 [ 376.885636][ T6682] loop4: detected capacity change from 0 to 40427 [ 376.897319][ T3715] usb 1-1: USB disconnect, device number 7 [ 376.897793][ T3681] usb 2-1: USB disconnect, device number 9 [ 376.992385][ T6682] F2FS-fs (loop4): Found nat_bits in checkpoint [ 377.200231][ T6682] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 378.407251][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.413716][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.601093][ T3635] syz-executor: attempt to access beyond end of device [ 378.601093][ T3635] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 380.399339][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 380.553810][ T6704] ªªªªªª: renamed from vlan0 [ 380.582423][ T6705] tap0: tun_chr_ioctl cmd 1074025677 [ 380.587911][ T6705] tap0: linktype set to 823 [ 380.597438][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 380.606717][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 380.614270][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.542342][ T6719] device vlan1 entered promiscuous mode [ 381.548536][ T6719] device syz_tun entered promiscuous mode [ 381.715959][ T6717] loop4: detected capacity change from 0 to 512 [ 381.768573][ T6719] device syz_tun left promiscuous mode [ 382.291258][ T3681] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 382.328980][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.641: corrupted inode contents [ 382.714656][ T6717] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.641: mark_inode_dirty error [ 382.758861][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.641: corrupted inode contents [ 382.792405][ T6717] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.641: mark_inode_dirty error [ 382.827319][ T6717] Quota error (device loop4): write_blk: dquota write failed [ 382.840776][ T6717] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 382.860724][ T6717] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.641: Failed to acquire dquot type 0 [ 382.918821][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.641: corrupted inode contents [ 382.952026][ T6717] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.641: mark_inode_dirty error [ 382.975859][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.641: corrupted inode contents [ 383.044287][ T6717] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.641: mark_inode_dirty error [ 383.075062][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.641: corrupted inode contents [ 383.116632][ T6717] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 383.149410][ T6717] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.641: corrupted inode contents [ 383.200829][ T3681] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 383.225580][ T3681] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.258673][ T6743] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.271041][ T6717] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.641: mark_inode_dirty error [ 383.511990][ T3681] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.638491][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.840649][ T6717] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 383.871442][ T3681] usb 2-1: config 0 descriptor?? [ 383.878276][ T6717] EXT4-fs (loop4): 1 truncate cleaned up [ 383.891176][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 383.900463][ T6717] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff) [ 384.066995][ T3681] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 384.077998][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 385.205995][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 385.581003][ T3646] Bluetooth: hci1: command 0x0406 tx timeout [ 385.879679][ T3715] usb 2-1: USB disconnect, device number 10 [ 386.235844][ T6764] tap0: tun_chr_ioctl cmd 1074025677 [ 386.242030][ T6764] tap0: linktype set to 823 [ 386.872823][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 386.911980][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.919465][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 387.550113][ T6773] loop0: detected capacity change from 0 to 1024 [ 387.665629][ T6773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 387.784593][ T6781] loop3: detected capacity change from 0 to 512 [ 387.937393][ T6777] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.951394][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.660: corrupted inode contents [ 387.981180][ T6781] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #3: comm syz.3.660: mark_inode_dirty error [ 388.070479][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #3: comm syz.3.660: corrupted inode contents [ 388.224496][ T6781] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #3: comm syz.3.660: mark_inode_dirty error [ 388.276923][ T6781] Quota error (device loop3): write_blk: dquota write failed [ 388.313295][ T6781] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 388.364171][ T6781] EXT4-fs error (device loop3): ext4_acquire_dquot:6800: comm syz.3.660: Failed to acquire dquot type 0 [ 388.494867][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.660: corrupted inode contents [ 388.508298][ T6781] EXT4-fs error (device loop3): ext4_dirty_inode:6086: inode #16: comm syz.3.660: mark_inode_dirty error [ 388.520981][ T6061] EXT4-fs (loop0): unmounting filesystem. [ 388.549168][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.660: corrupted inode contents [ 388.631602][ T6781] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.660: mark_inode_dirty error [ 388.672282][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.660: corrupted inode contents [ 388.702919][ T6781] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 388.747523][ T6781] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #16: comm syz.3.660: corrupted inode contents [ 388.787842][ T6781] EXT4-fs error (device loop3): ext4_truncate:4311: inode #16: comm syz.3.660: mark_inode_dirty error [ 388.860255][ T6792] loop0: detected capacity change from 0 to 256 [ 388.876647][ T6781] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 388.938297][ T6792] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 388.965488][ T6781] EXT4-fs (loop3): 1 truncate cleaned up [ 388.987237][ T6781] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 389.034989][ T6781] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038 (0x7fffffff) [ 389.209325][ T6781] fuse: Unknown parameter 'grou00000000000000000000' [ 389.563260][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 391.009657][ T6813] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.648442][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.664865][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 391.673466][ T6819] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 391.863134][ T6821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.173499][ T6823] loop1: detected capacity change from 0 to 512 [ 392.243197][ T6823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 392.255053][ T6823] System zones: 1-12 [ 392.271247][ T6823] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.671: inode #1: comm syz.1.671: iget: illegal inode # [ 392.296335][ T6823] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.671: error while reading EA inode 1 err=-117 [ 392.321322][ T6823] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.671: inode #1: comm syz.1.671: iget: illegal inode # [ 392.343124][ T6823] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.671: error while reading EA inode 1 err=-117 [ 392.373305][ T6823] EXT4-fs (loop1): 1 orphan inode deleted [ 392.379101][ T6823] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 392.462976][ T3684] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 392.690252][ T6812] loop0: detected capacity change from 0 to 40427 [ 393.010877][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.040262][ T6812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 393.059525][ T3684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.091188][ T3684] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 393.141035][ T3684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.195037][ T3684] usb 4-1: config 0 descriptor?? [ 393.221367][ T6812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 393.265616][ T3682] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 393.287509][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 393.695137][ T3684] hid (null): bogus close delimiter [ 394.121097][ T6061] syz-executor: attempt to access beyond end of device [ 394.121097][ T6061] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 394.171156][ T3682] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 394.221421][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.276200][ T3682] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.307604][ T6842] loop4: detected capacity change from 0 to 512 [ 394.314445][ T3682] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 394.355026][ T3684] usb 4-1: string descriptor 0 read error: -71 [ 394.410845][ T3682] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 394.420121][ T3682] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 394.435267][ T3682] usb 3-1: Manufacturer: syz [ 394.466534][ T3682] usb 3-1: config 0 descriptor?? [ 394.488721][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.675: corrupted inode contents [ 394.514509][ T6842] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.675: mark_inode_dirty error [ 394.565669][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.675: corrupted inode contents [ 394.618489][ T6842] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.675: mark_inode_dirty error [ 394.624860][ T3684] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 394.647744][ T3684] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 394.658697][ T3684] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 394.669859][ T6842] Quota error (device loop4): write_blk: dquota write failed [ 394.683963][ T6842] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 394.696797][ T3684] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 394.800785][ T6842] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.675: Failed to acquire dquot type 0 [ 394.838633][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.675: corrupted inode contents [ 394.858278][ T3684] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 394.868530][ T3684] usb 4-1: USB disconnect, device number 20 [ 394.884921][ T6842] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.675: mark_inode_dirty error [ 394.897966][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.675: corrupted inode contents [ 394.911058][ T6842] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.675: mark_inode_dirty error [ 394.923308][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.675: corrupted inode contents [ 395.522917][ T6855] device vlan0 entered promiscuous mode [ 395.537146][ T6855] device syz_tun entered promiscuous mode [ 395.633407][ T6842] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 395.686110][ T6842] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.675: corrupted inode contents [ 395.773737][ T6842] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.675: mark_inode_dirty error [ 395.815242][ T6842] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 395.835730][ T6842] EXT4-fs (loop4): 1 truncate cleaned up [ 395.854619][ T6842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 395.869561][ T6842] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038 (0x7fffffff) [ 395.942853][ T6842] fuse: Unknown parameter 'grou00000000000000000000' [ 395.978015][ T3682] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 395.989371][ T3682] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 395.999281][ T3682] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 396.016880][ T3682] usb 3-1: USB disconnect, device number 10 [ 396.036805][ T6855] device syz_tun left promiscuous mode [ 396.067223][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 397.292147][ T6877] loop3: detected capacity change from 0 to 512 [ 397.406904][ T6877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 397.645387][ T6877] System zones: 1-12 [ 397.678275][ T6877] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.683: inode #1: comm syz.3.683: iget: illegal inode # [ 397.704859][ T6877] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.683: error while reading EA inode 1 err=-117 [ 397.812061][ T6877] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.683: inode #1: comm syz.3.683: iget: illegal inode # [ 397.861051][ T6877] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.683: error while reading EA inode 1 err=-117 [ 397.894614][ T6877] EXT4-fs (loop3): 1 orphan inode deleted [ 397.910113][ T6877] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 399.284256][ T6896] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 400.036521][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 400.209691][ T6903] loop4: detected capacity change from 0 to 512 [ 400.374633][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.690: corrupted inode contents [ 400.435105][ T6903] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.690: mark_inode_dirty error [ 400.626038][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.690: corrupted inode contents [ 401.057412][ T6903] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.690: mark_inode_dirty error [ 401.134390][ T6903] Quota error (device loop4): write_blk: dquota write failed [ 401.158967][ T6903] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 401.184939][ T6903] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.690: Failed to acquire dquot type 0 [ 401.200268][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.690: corrupted inode contents [ 401.220035][ T6903] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.690: mark_inode_dirty error [ 401.234600][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.690: corrupted inode contents [ 401.248555][ T6903] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.690: mark_inode_dirty error [ 401.273467][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.690: corrupted inode contents [ 401.303710][ T6903] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 401.319910][ T6903] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.690: corrupted inode contents [ 401.338888][ T6903] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.690: mark_inode_dirty error [ 401.356797][ T6903] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 401.384745][ T6903] EXT4-fs (loop4): 1 truncate cleaned up [ 401.395528][ T6903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 401.413880][ T6903] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038 (0x7fffffff) [ 401.462057][ T6903] fuse: Unknown parameter 'grou00000000000000000000' [ 401.486158][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 401.597138][ T6904] loop0: detected capacity change from 0 to 40427 [ 401.620039][ T6904] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 401.639977][ T6904] F2FS-fs (loop0): invalid crc value [ 401.660785][ T3684] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 401.678940][ T6904] F2FS-fs (loop0): Found nat_bits in checkpoint [ 401.884237][ T6924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 402.436672][ T6904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 402.862039][ T6933] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x1336/0x1f90 [ 402.873743][ T6933] syz.0.691: attempt to access beyond end of device [ 402.873743][ T6933] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 402.991181][ T3684] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 403.087165][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.159814][ T3684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.208444][ T3684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 403.360843][ T3684] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 403.393499][ T3684] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 403.413867][ T3684] usb 3-1: Manufacturer: syz [ 403.444235][ T3684] usb 3-1: config 0 descriptor?? [ 404.041063][ T6923] loop1: detected capacity change from 0 to 40427 [ 404.132749][ T3684] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 404.140117][ T3684] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 404.158235][ T6923] F2FS-fs (loop1): invalid crc value [ 404.201264][ T3684] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 404.248306][ T6923] F2FS-fs (loop1): Found nat_bits in checkpoint [ 404.388531][ T6923] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 404.409327][ T3684] usb 3-1: USB disconnect, device number 11 [ 404.453231][ T6923] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 404.804492][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.812643][ T6948] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 404.999863][ T6948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.019024][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.027977][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.035511][ T6949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.659092][ T6960] loop0: detected capacity change from 0 to 512 [ 405.788444][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.706: corrupted inode contents [ 405.834007][ T6960] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #3: comm syz.0.706: mark_inode_dirty error [ 405.869451][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.706: corrupted inode contents [ 405.894722][ T6960] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.706: mark_inode_dirty error [ 405.910326][ T6960] Quota error (device loop0): write_blk: dquota write failed [ 405.927040][ T6960] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 405.939231][ T6960] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.706: Failed to acquire dquot type 0 [ 405.953842][ T6968] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 405.960916][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.706: corrupted inode contents [ 405.981029][ T6960] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #16: comm syz.0.706: mark_inode_dirty error [ 405.993194][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.706: corrupted inode contents [ 406.005789][ T6960] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.706: mark_inode_dirty error [ 406.019605][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.706: corrupted inode contents [ 406.037258][ T6960] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 406.047079][ T6960] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.706: corrupted inode contents [ 406.064263][ T6954] loop4: detected capacity change from 0 to 40427 [ 406.068197][ T6960] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.706: mark_inode_dirty error [ 406.087010][ T6960] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 406.097744][ T6960] EXT4-fs (loop0): 1 truncate cleaned up [ 406.104247][ T6960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 406.111609][ T6954] F2FS-fs (loop4): Found nat_bits in checkpoint [ 406.114451][ T6960] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038 (0x7fffffff) [ 406.182497][ T6960] fuse: Unknown parameter 'group_i00000000000000000000' [ 406.246431][ T6954] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 406.620795][ T6977] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.211422][ T6061] EXT4-fs (loop0): unmounting filesystem. [ 407.340735][ T3635] syz-executor: attempt to access beyond end of device [ 407.340735][ T3635] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 408.055265][ T6984] device syzkaller0 entered promiscuous mode [ 409.486016][ T3626] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 409.649845][ T6980] loop1: detected capacity change from 0 to 40427 [ 409.669623][ T6980] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 409.713491][ T6980] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 409.731169][ T3626] usb 1-1: Using ep0 maxpacket: 16 [ 409.753603][ T6980] F2FS-fs (loop1): invalid crc value [ 409.784859][ T6980] F2FS-fs (loop1): Found nat_bits in checkpoint [ 409.847365][ T6980] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 409.850723][ T3626] usb 1-1: config 0 has no interfaces? [ 409.854636][ T6980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 411.071612][ T7013] overlayfs: failed to resolve './file0': -2 [ 411.159472][ T3626] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 411.169854][ T3626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.178299][ T3626] usb 1-1: Product: syz [ 411.182898][ T3626] usb 1-1: Manufacturer: syz [ 411.187690][ T3626] usb 1-1: SerialNumber: syz [ 411.190210][ T4861] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 411.202992][ T3626] usb 1-1: config 0 descriptor?? [ 411.212432][ T4861] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 411.380664][ T3681] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 411.457344][ T3626] usb 1-1: USB disconnect, device number 8 [ 411.666945][ T7029] loop1: detected capacity change from 0 to 512 [ 411.757797][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.720: corrupted inode contents [ 411.770443][ T7029] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.720: mark_inode_dirty error [ 411.782356][ T3681] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 411.793792][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.805748][ T3681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.815839][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.720: corrupted inode contents [ 411.828122][ T3681] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 411.845648][ T7029] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.720: mark_inode_dirty error [ 411.861690][ T7029] Quota error (device loop1): write_blk: dquota write failed [ 411.869404][ T7029] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 411.879923][ T7029] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.720: Failed to acquire dquot type 0 [ 411.902513][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.720: corrupted inode contents [ 411.925055][ T7029] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.720: mark_inode_dirty error [ 411.936788][ T3681] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 411.946479][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.720: corrupted inode contents [ 411.960227][ T3681] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 411.968774][ T3681] usb 5-1: Manufacturer: syz [ 411.975121][ T7029] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.720: mark_inode_dirty error [ 411.999901][ T3681] usb 5-1: config 0 descriptor?? [ 412.007220][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.720: corrupted inode contents [ 412.030436][ T7029] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 412.052520][ T7029] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.720: corrupted inode contents [ 412.083720][ T7029] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.720: mark_inode_dirty error [ 412.109449][ T7029] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 412.136471][ T7029] EXT4-fs (loop1): 1 truncate cleaned up [ 412.152101][ T7029] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 412.162267][ T7029] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038 (0x7fffffff) [ 412.255426][ T7029] fuse: Unknown parameter 'group_i00000000000000000000' [ 412.277913][ T7026] loop0: detected capacity change from 0 to 40427 [ 412.344596][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 412.352377][ T7026] F2FS-fs (loop0): Found nat_bits in checkpoint [ 412.450852][ T7026] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 412.649749][ T3681] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 412.657857][ T3681] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 412.680017][ T3681] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 412.950159][ T3681] usb 5-1: USB disconnect, device number 10 [ 413.224834][ T6061] syz-executor: attempt to access beyond end of device [ 413.224834][ T6061] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 414.826908][ T7056] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 416.617803][ T7069] loop4: detected capacity change from 0 to 256 [ 417.546245][ T3682] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 417.679201][ T7064] loop1: detected capacity change from 0 to 40427 [ 417.693170][ T7064] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 417.701242][ T7064] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 417.721085][ T7064] F2FS-fs (loop1): invalid crc value [ 417.748453][ T7064] F2FS-fs (loop1): Found nat_bits in checkpoint [ 417.808072][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 417.855813][ T7064] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 417.870817][ T7064] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 417.942886][ T3682] usb 1-1: config 0 has no interfaces? [ 418.101864][ T3682] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 418.148107][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.194218][ T3682] usb 1-1: Product: syz [ 418.198419][ T3682] usb 1-1: Manufacturer: syz [ 418.232212][ T3682] usb 1-1: SerialNumber: syz [ 418.240836][ T7082] overlayfs: failed to resolve './file0': -2 [ 418.260083][ T3682] usb 1-1: config 0 descriptor?? [ 418.480324][ T3643] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 418.490694][ T3643] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 418.506288][ T3643] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 418.518314][ T3643] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 418.518591][ T4861] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 418.530954][ T3643] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 418.542898][ T3643] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 418.616121][ T4861] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 418.628723][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.686602][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.809803][ T4891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.831607][ T7081] loop3: detected capacity change from 0 to 40427 [ 418.905236][ T7081] F2FS-fs (loop3): Found nat_bits in checkpoint [ 418.970097][ T4891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.062618][ T7081] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 419.593108][ T7099] overlayfs: missing 'lowerdir' [ 420.206879][ T3684] usb 1-1: USB disconnect, device number 9 [ 420.327011][ T4891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.371601][ T3638] syz-executor: attempt to access beyond end of device [ 420.371601][ T3638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 420.445393][ T7085] chnl_net:caif_netlink_parms(): no params data found [ 420.509227][ T4891] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.640665][ T3643] Bluetooth: hci6: command tx timeout [ 420.664914][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 421.091638][ T22] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 421.314689][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.432644][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.442685][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 421.452120][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.489597][ T7085] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.664169][ T22] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 421.673355][ T22] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 421.681598][ T22] usb 2-1: Manufacturer: syz [ 421.689198][ T22] usb 2-1: config 0 descriptor?? [ 421.881549][ T7116] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 421.974558][ T7085] device bridge_slave_0 entered promiscuous mode [ 422.287631][ T22] appleir 0003:05AC:8243.0010: unknown main item tag 0x0 [ 422.364662][ T22] appleir 0003:05AC:8243.0010: No inputs registered, leaving [ 422.534701][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.548789][ T7085] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.556843][ T22] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 422.574808][ T7085] device bridge_slave_1 entered promiscuous mode [ 422.598211][ T22] usb 2-1: USB disconnect, device number 11 [ 422.690820][ T3646] Bluetooth: hci6: command tx timeout [ 423.484692][ T7131] tap0: tun_chr_ioctl cmd 1074025677 [ 423.490190][ T7131] tap0: linktype set to 823 [ 423.516884][ T7085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.545150][ T7085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.432676][ T7137] syz.4.745[7137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.432777][ T7137] syz.4.745[7137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.791837][ T3643] Bluetooth: hci6: command tx timeout [ 425.313177][ T7085] team0: Port device team_slave_0 added [ 425.350244][ T7085] team0: Port device team_slave_1 added [ 425.373445][ T7157] loop4: detected capacity change from 0 to 512 [ 425.504929][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.750: corrupted inode contents [ 425.555859][ T7157] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.750: mark_inode_dirty error [ 425.619112][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.750: corrupted inode contents [ 425.655302][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.680599][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.682714][ T7157] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.750: mark_inode_dirty error [ 425.755923][ T7157] Quota error (device loop4): write_blk: dquota write failed [ 425.783014][ T7085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.799302][ T7157] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 425.854443][ T7085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.860584][ T7157] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.750: Failed to acquire dquot type 0 [ 425.872543][ T7085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.872569][ T7085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.956588][ T7085] device hsr_slave_0 entered promiscuous mode [ 426.002615][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.750: corrupted inode contents [ 426.020815][ T7157] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.750: mark_inode_dirty error [ 426.040991][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.750: corrupted inode contents [ 426.063430][ T7157] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.750: mark_inode_dirty error [ 426.082758][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.750: corrupted inode contents [ 426.104874][ T7157] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 426.120029][ T7085] device hsr_slave_1 entered promiscuous mode [ 426.141324][ T7085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.163018][ T7157] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.750: corrupted inode contents [ 426.345329][ T7157] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.750: mark_inode_dirty error [ 426.359865][ T7085] Cannot create hsr debugfs directory [ 426.530887][ T3643] Bluetooth: hci4: command 0x0406 tx timeout [ 426.587664][ T7157] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 426.827676][ T7157] EXT4-fs (loop4): 1 truncate cleaned up [ 426.840700][ T7157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 426.849776][ T7157] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038 (0x7fffffff) [ 426.860648][ T3646] Bluetooth: hci6: command tx timeout [ 426.888270][ T7145] ipt_CLUSTERIP: Please specify destination IP [ 426.894682][ T7179] tap0: tun_chr_ioctl cmd 1074025677 [ 426.900139][ T7179] tap0: linktype set to 823 [ 427.113024][ T7187] fuse: Unknown parameter 'group_id00000000000000000000' [ 427.193375][ T7188] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.967639][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 428.170804][ T14] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 428.348948][ T4891] device hsr_slave_0 left promiscuous mode [ 428.367119][ T4891] device hsr_slave_1 left promiscuous mode [ 428.381244][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.397214][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.405884][ T4891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.425105][ T4891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.444036][ T4891] device bridge_slave_1 left promiscuous mode [ 428.461165][ T4891] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.470714][ T4891] device bridge_slave_0 left promiscuous mode [ 428.477326][ T4891] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.491005][ T3626] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 428.517710][ T4891] device veth1_macvtap left promiscuous mode [ 428.523924][ T4891] device veth0_macvtap left promiscuous mode [ 428.530184][ T4891] device veth1_vlan left promiscuous mode [ 428.543246][ T4891] device veth0_vlan left promiscuous mode [ 428.550826][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.574582][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.610235][ T14] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.637443][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.687722][ T14] usb 4-1: config 0 descriptor?? [ 428.863858][ T3626] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 428.889085][ T3626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.920660][ T3626] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.930460][ T3626] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 429.040839][ T3626] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 429.049926][ T3626] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 429.089460][ T3626] usb 5-1: Manufacturer: syz [ 429.142472][ T3626] usb 5-1: config 0 descriptor?? [ 429.187823][ T7213] loop0: detected capacity change from 0 to 1024 [ 429.196439][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 429.221084][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 429.233305][ T7213] EXT4-fs: Ignoring removed oldalloc option [ 429.256438][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 429.772500][ T7213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 430.390600][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.398224][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.406550][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.414884][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.422847][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.430458][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.440185][ T14] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 430.448642][ T14] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 430.491067][ T3626] usbhid 5-1:0.0: can't add hid device: -71 [ 430.498509][ T3626] usbhid: probe of 5-1:0.0 failed with error -71 [ 430.512694][ T14] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 430.574585][ T3626] usb 5-1: USB disconnect, device number 11 [ 431.168863][ T6061] EXT4-fs (loop0): unmounting filesystem. [ 431.462824][ T14] usb 4-1: USB disconnect, device number 21 [ 431.899201][ T7238] loop4: detected capacity change from 0 to 256 [ 432.216474][ T7238] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 432.540441][ T4891] team0 (unregistering): Port device team_slave_1 removed [ 432.556250][ T27] audit: type=1800 audit(1727766353.926:61): pid=7238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.765" name="file1" dev="loop4" ino=1048624 res=0 errno=0 [ 432.719299][ T4891] team0 (unregistering): Port device team_slave_0 removed [ 432.865380][ T7244] syz.4.765: attempt to access beyond end of device [ 432.865380][ T7244] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 433.466476][ T4891] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.482926][ T7233] loop0: detected capacity change from 0 to 40427 [ 433.520241][ T7233] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 433.528836][ T7233] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 433.559513][ T7233] F2FS-fs (loop0): invalid crc value [ 433.567192][ T4891] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.612295][ T7233] F2FS-fs (loop0): Found nat_bits in checkpoint [ 433.713778][ T7233] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 433.722150][ T7233] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 434.225322][ T7254] overlayfs: failed to resolve './file0': -2 [ 434.385427][ T7255] loop1: detected capacity change from 0 to 512 [ 434.486343][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.766: corrupted inode contents [ 434.517459][ T7255] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.766: mark_inode_dirty error [ 434.554972][ T4893] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 434.558696][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.766: corrupted inode contents [ 434.570593][ T4893] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 434.597446][ T7255] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.766: mark_inode_dirty error [ 434.624489][ T7255] Quota error (device loop1): write_blk: dquota write failed [ 434.642799][ T7255] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 434.667169][ T7255] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.766: Failed to acquire dquot type 0 [ 434.706580][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.766: corrupted inode contents [ 434.737879][ T7255] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.766: mark_inode_dirty error [ 434.772536][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.766: corrupted inode contents [ 434.800990][ T7255] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.766: mark_inode_dirty error [ 434.820140][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.766: corrupted inode contents [ 434.832603][ T7255] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 434.866823][ T7255] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.766: corrupted inode contents [ 434.896197][ T7255] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.766: mark_inode_dirty error [ 434.908604][ T7255] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 434.923008][ T7255] EXT4-fs (loop1): 1 truncate cleaned up [ 434.928761][ T7255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 434.945425][ T7255] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038 (0x7fffffff) [ 434.997714][ T7255] fuse: Unknown parameter 'group_id00000000000000000000' [ 435.113700][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 435.348010][ T4891] bond0 (unregistering): Released all slaves [ 435.456763][ T7241] tap0: tun_chr_ioctl cmd 1074025677 [ 435.462300][ T7241] tap0: linktype set to 823 [ 435.942094][ T7279] loop4: detected capacity change from 0 to 256 [ 436.052010][ T7279] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 436.270621][ T3626] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 436.308409][ T7085] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 436.358755][ T7085] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 436.417791][ T7085] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 436.448646][ T7085] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.548935][ T7291] ipt_CLUSTERIP: Please specify destination IP [ 436.647286][ T7296] loop4: detected capacity change from 0 to 512 [ 436.739468][ T7085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.740766][ T3626] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.757220][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.777: corrupted inode contents [ 436.797344][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 436.810987][ T7296] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.777: mark_inode_dirty error [ 436.814974][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 436.837289][ T3626] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 436.848589][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.777: corrupted inode contents [ 436.850454][ T3626] usb 4-1: can't read configurations, error -71 [ 436.883656][ T7296] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.777: mark_inode_dirty error [ 436.900398][ T7085] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.929374][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 436.946932][ T7296] Quota error (device loop4): write_blk: dquota write failed [ 436.958595][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 436.976266][ T7296] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 436.986024][ T4891] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.993352][ T4891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.008867][ T7296] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.777: Failed to acquire dquot type 0 [ 437.063286][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.071620][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.777: corrupted inode contents [ 437.084454][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.094658][ T7296] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.777: mark_inode_dirty error [ 437.119484][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.130192][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.777: corrupted inode contents [ 437.148622][ T4891] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.155813][ T4891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.169947][ T7296] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.777: mark_inode_dirty error [ 437.198556][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.221047][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.777: corrupted inode contents [ 437.262182][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.278078][ T7296] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 437.281227][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.311988][ T7296] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.777: corrupted inode contents [ 437.313521][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.353163][ T7296] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.777: mark_inode_dirty error [ 437.385789][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.394531][ T7296] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 437.418058][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.443273][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.455292][ T7296] EXT4-fs (loop4): 1 truncate cleaned up [ 437.467296][ T7296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 437.478964][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.491923][ T7085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 437.502770][ T7296] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038 (0x7fffffff) [ 437.548045][ T7085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 437.571866][ T7296] fuse: Unknown parameter 'group_id00000000000000000000' [ 437.586992][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.612753][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.649435][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.661848][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 437.875697][ T7312] loop4: detected capacity change from 0 to 1024 [ 437.963792][ T7312] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.070349][ T7312] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 438.246739][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.277107][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.315204][ T7085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.323999][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 438.415355][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.447287][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.663503][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.986326][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.254885][ T7337] tap0: tun_chr_ioctl cmd 1074025677 [ 439.261425][ T7337] tap0: linktype set to 823 [ 439.331798][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.401009][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.481622][ T7085] device veth0_vlan entered promiscuous mode [ 439.498915][ T7085] device veth1_vlan entered promiscuous mode [ 439.525547][ T7085] device veth0_macvtap entered promiscuous mode [ 439.533229][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 439.578563][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 439.610335][ T7085] device veth1_macvtap entered promiscuous mode [ 439.647854][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.708237][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.725398][ T7308] loop3: detected capacity change from 0 to 40427 [ 439.765499][ T7308] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 439.773643][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.789002][ T7308] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 439.802553][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.814076][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.821948][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.830552][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.837386][ T7308] F2FS-fs (loop3): invalid crc value [ 439.861803][ T7308] F2FS-fs (loop3): Found nat_bits in checkpoint [ 439.890638][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.931289][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 439.963028][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 439.992998][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.005097][ T7308] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 440.020597][ T7308] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 440.043645][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.072172][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.079862][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.105886][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 440.153888][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 440.212076][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 440.285379][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.310544][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.331340][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.860621][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.950570][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.984770][ T7362] loop0: detected capacity change from 0 to 512 [ 441.010999][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.074196][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.108898][ T7362] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 441.131171][ T7330] loop4: detected capacity change from 0 to 40427 [ 441.138678][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.149553][ T7085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.161509][ T7085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.177066][ T7085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.177933][ T4893] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 441.188091][ T7085] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.202365][ T7085] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.211451][ T7362] System zones: 1-12 [ 441.221167][ T7085] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.238119][ T7362] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.786: inode #1: comm syz.0.786: iget: illegal inode # [ 441.253367][ T7085] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.267405][ T7330] F2FS-fs (loop4): Found nat_bits in checkpoint [ 441.270894][ T4893] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 441.307861][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.310841][ T7362] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.786: error while reading EA inode 1 err=-117 [ 441.341475][ T4873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.393294][ T7362] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.786: inode #1: comm syz.0.786: iget: illegal inode # [ 441.482239][ T4873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.491015][ T7362] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.786: error while reading EA inode 1 err=-117 [ 441.491053][ T4873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.568260][ T7362] EXT4-fs (loop0): 1 orphan inode deleted [ 441.598190][ T7362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 441.634136][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 441.634236][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.659785][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.691408][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 443.137597][ T6061] EXT4-fs (loop0): unmounting filesystem. [ 443.671867][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.790'. [ 444.315498][ T7396] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 445.121559][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 445.130640][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.138571][ T7411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.427767][ T7419] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 445.589582][ T7389] loop4: detected capacity change from 0 to 40427 [ 445.917821][ T7389] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 446.162991][ T7389] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 446.299745][ T7389] F2FS-fs (loop4): invalid crc value [ 446.340143][ T7389] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 447.732498][ T7442] loop4: detected capacity change from 0 to 512 [ 447.830913][ T7442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 447.839057][ T7442] System zones: 1-12 [ 447.897620][ T7442] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.799: inode #1: comm syz.4.799: iget: illegal inode # [ 447.986027][ T7442] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.799: error while reading EA inode 1 err=-117 [ 448.038928][ T7442] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.799: inode #1: comm syz.4.799: iget: illegal inode # [ 448.077326][ T7442] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.799: error while reading EA inode 1 err=-117 [ 448.140647][ T7442] EXT4-fs (loop4): 1 orphan inode deleted [ 448.146428][ T7442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 448.416362][ T7428] loop3: detected capacity change from 0 to 40427 [ 448.599046][ T7428] F2FS-fs (loop3): Found nat_bits in checkpoint [ 448.925647][ T3635] EXT4-fs (loop4): unmounting filesystem. [ 448.933275][ T7428] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 450.120736][ T7474] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.332420][ T3638] syz-executor: attempt to access beyond end of device [ 450.332420][ T3638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 450.853824][ T7484] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 451.008759][ T7488] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 452.681028][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 453.603097][ T7499] device hsr_slave_1 left promiscuous mode [ 453.721791][ T3683] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 453.876235][ T7492] ipt_CLUSTERIP: Please specify destination IP [ 453.980586][ T3683] usb 4-1: Using ep0 maxpacket: 16 [ 454.100827][ T3683] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 454.111082][ T3683] usb 4-1: config 0 has no interface number 0 [ 454.123597][ T3683] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 454.142655][ T7516] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 454.261897][ T3683] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 454.319277][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 454.355492][ T3683] usb 4-1: Product: syz [ 454.369242][ T3683] usb 4-1: SerialNumber: syz [ 454.379943][ T7518] loop1: detected capacity change from 0 to 512 [ 454.394695][ T3683] usb 4-1: config 0 descriptor?? [ 454.414996][ T7505] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.502763][ T7518] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 454.521766][ T7518] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038 (0x7fffffff) [ 454.676432][ T3683] usb 4-1: invalid MIDI in EP 0 [ 454.871582][ T3683] snd-usb-audio: probe of 4-1:0.2 failed with error -22 [ 454.912151][ T7228] udevd[7228]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 454.938408][ T3683] usb 4-1: USB disconnect, device number 24 [ 456.164346][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 456.617307][ T7537] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 456.733360][ T4893] Bluetooth: hci3: Frame reassembly failed (-84) [ 456.830634][ T4893] Bluetooth: hci3: Frame reassembly failed (-84) [ 456.966375][ T7532] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 459.236703][ T3643] Bluetooth: hci3: command 0x1003 tx timeout [ 459.240606][ T3646] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 459.566521][ T3683] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 461.486014][ T7575] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 461.810763][ T3683] usb 5-1: device not accepting address 12, error -71 [ 463.688588][ T7583] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.944563][ T7578] loop4: detected capacity change from 0 to 40427 [ 463.970416][ T7578] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 464.010607][ T7578] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 464.082960][ T7578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 464.124401][ T7604] loop1: detected capacity change from 0 to 512 [ 464.147252][ T7578] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 464.165794][ T7578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 464.189813][ T7604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c098, mo2=0002] [ 464.228512][ T7604] System zones: 1-12 [ 464.487054][ T7604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.841: inode #1: comm syz.1.841: iget: illegal inode # [ 464.666175][ T7604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.841: error while reading EA inode 1 err=-117 [ 464.823462][ T7604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.841: inode #1: comm syz.1.841: iget: illegal inode # [ 464.963728][ T7604] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.841: error while reading EA inode 1 err=-117 [ 465.106624][ T7604] EXT4-fs (loop1): 1 orphan inode deleted [ 465.130639][ T7604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 465.157666][ T7617] loop3: detected capacity change from 0 to 256 [ 465.193679][ T7617] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 465.961843][ T5555] EXT4-fs (loop1): unmounting filesystem. [ 466.322468][ T7629] tap0: tun_chr_ioctl cmd 1074025677 [ 466.328554][ T7629] tap0: linktype set to 823 [ 466.338127][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 467.298636][ T7618] tipc: Enabled bearer , priority 0 [ 468.579443][ T7642] loop3: detected capacity change from 0 to 512 [ 468.670360][ T7642] EXT4-fs (loop3): 1 truncate cleaned up [ 468.740915][ T7642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 469.010589][ T3681] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 469.260359][ T3681] usb 2-1: Using ep0 maxpacket: 32 [ 469.387009][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 469.404057][ T3681] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 469.416176][ T3681] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 469.426544][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.453368][ T3681] usb 2-1: config 0 descriptor?? [ 469.476571][ T7646] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 469.520951][ T3681] hub 2-1:0.0: USB hub found [ 469.589905][ T7648] loop4: detected capacity change from 0 to 40427 [ 469.624684][ T7648] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 469.635909][ T7648] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 469.658901][ T7648] F2FS-fs (loop4): invalid crc value [ 469.683524][ T7648] F2FS-fs (loop4): Found nat_bits in checkpoint [ 469.737793][ T7648] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 469.743222][ T3681] hub 2-1:0.0: 5 ports detected [ 469.752411][ T7648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 469.770600][ T3681] hub 2-1:0.0: insufficient power available to use all downstream ports [ 470.477641][ T4910] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 470.494961][ T4910] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 470.720650][ T3681] hub 2-1:0.0: set hub depth failed [ 470.834387][ T3681] usb 2-1: USB disconnect, device number 12 [ 471.641448][ T3681] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 471.779569][ T7667] overlayfs: missing 'workdir' [ 472.466809][ T7669] loop0: detected capacity change from 0 to 16 [ 472.481145][ T7669] erofs: (device loop0): mounted with root inode @ nid 36. [ 472.493771][ T7669] syz.0.856: attempt to access beyond end of device [ 472.493771][ T7669] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 472.527339][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 472.550730][ T3681] usb 2-1: Using ep0 maxpacket: 16 [ 472.626191][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.857'. [ 472.636878][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 472.741129][ T3681] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 472.762865][ T3681] usb 2-1: config 0 has no interface number 0 [ 472.794443][ T3681] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 173 [ 472.971677][ T3681] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 473.007876][ T3681] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 473.078397][ T3681] usb 2-1: Product: syz [ 473.120932][ T3681] usb 2-1: SerialNumber: syz [ 473.264221][ T3681] usb 2-1: config 0 descriptor?? [ 473.301021][ T7661] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 473.573256][ T3681] usb 2-1: invalid MIDI in EP 0 [ 473.616353][ T3681] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 473.656922][ T4074] udevd[4074]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.798692][ T3681] usb 2-1: USB disconnect, device number 13 [ 474.609838][ T7695] hub 6-0:1.0: USB hub found [ 474.620164][ T7695] hub 6-0:1.0: 1 port detected [ 476.190536][ T7712] overlayfs: missing 'workdir' [ 476.964704][ T7717] tap0: tun_chr_ioctl cmd 1074025677 [ 476.970902][ T7717] tap0: linktype set to 823 [ 476.980657][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 477.829473][ T7729] loop4: detected capacity change from 0 to 256 [ 477.858004][ T7729] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 477.917896][ T27] audit: type=1800 audit(1727766399.286:62): pid=7729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.873" name="file1" dev="loop4" ino=1048628 res=0 errno=0 [ 477.999381][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 478.083106][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 478.130315][ T7730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.241669][ T7732] syz.4.873: attempt to access beyond end of device [ 478.241669][ T7732] loop4: rw=0, sector=184, nr_sectors = 120 limit=256 [ 478.980452][ T7722] loop1: detected capacity change from 0 to 40427 [ 479.003011][ T7722] F2FS-fs (loop1): invalid crc value [ 479.070614][ T7722] F2FS-fs (loop1): Found nat_bits in checkpoint [ 479.193032][ T7722] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 480.111161][ T5555] syz-executor: attempt to access beyond end of device [ 480.111161][ T5555] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 480.790571][ T7752] loop3: detected capacity change from 0 to 256 [ 480.805680][ T7752] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 481.340623][ T7757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 482.181933][ T7761] tipc: Enabling of bearer rejected, already enabled [ 482.394546][ T28] INFO: task syz.2.557:6355 blocked for more than 144 seconds. [ 482.410040][ T28] Not tainted 6.1.112-syzkaller #0 [ 482.450556][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.490610][ T28] task:syz.2.557 state:D stack:23352 pid:6355 ppid:3902 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 482.602205][ T28] Call Trace: [ 482.624724][ T28] [ 482.627698][ T28] __schedule+0x143f/0x4570 [ 482.674957][ T28] ? release_firmware_map_entry+0x186/0x186 [ 482.680975][ T28] ? blk_check_plugged+0x250/0x250 [ 482.691203][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 482.697233][ T28] ? blk_check_plugged+0x250/0x250 [ 482.702433][ T28] ? print_irqtrace_events+0x210/0x210 [ 482.707907][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 482.713115][ T28] schedule+0xbf/0x180 [ 482.718149][ T28] io_schedule+0x88/0x100 [ 482.722555][ T28] folio_wait_bit_common+0x878/0x1290 [ 482.727970][ T28] ? folio_wait_bit+0x20/0x20 [ 482.732734][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 482.739175][ T28] ? erofs_map_blocks+0x14d0/0x14d0 [ 482.751488][ T28] ? bio_add_page+0x3a4/0x750 [ 482.756208][ T28] z_erofs_runqueue+0x993/0x1ca0 [ 482.761958][ T28] ? z_erofs_do_read_page+0x3bd0/0x3bd0 [ 482.767534][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 482.774533][ T28] ? z_erofs_pcluster_readmore+0x41a/0x450 [ 482.780379][ T28] z_erofs_readahead+0xc26/0x1030 [ 482.785526][ T28] ? z_erofs_read_folio+0x760/0x760 [ 482.790823][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 482.795877][ T28] ? blk_start_plug+0x95/0x110 [ 482.800717][ T28] read_pages+0x17f/0x830 [ 482.805063][ T28] ? folio_add_lru+0x34d/0xd70 [ 482.809835][ T28] ? folio_add_lru+0x34d/0xd70 [ 482.814682][ T28] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 482.821350][ T28] ? __lock_acquire+0x125b/0x1f80 [ 482.826401][ T28] ? __filemap_add_folio+0x1ba0/0x1ba0 [ 482.831986][ T28] page_cache_ra_unbounded+0x68b/0x7b0 [ 482.837477][ T28] force_page_cache_ra+0x2a3/0x300 [ 482.842657][ T28] generic_fadvise+0x553/0x7b0 [ 482.847436][ T28] ? dump_task+0x620/0x620 [ 482.851927][ T28] ? __fget_files+0x28/0x4a0 [ 482.856533][ T28] ? __fdget+0x182/0x210 [ 482.860849][ T28] __x64_sys_fadvise64+0x138/0x180 [ 482.866065][ T28] do_syscall_64+0x3b/0xb0 [ 482.871372][ T28] ? clear_bhb_loop+0x45/0xa0 [ 482.876079][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.890343][ T28] RIP: 0033:0x7f6339b7dff9 [ 482.894876][ T28] RSP: 002b:00007f63399ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 482.909441][ T28] RAX: ffffffffffffffda RBX: 00007f6339d35f80 RCX: 00007f6339b7dff9 [ 482.917621][ T28] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000008 [ 482.927668][ T28] RBP: 00007f6339bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 482.936072][ T28] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 482.944322][ T28] R13: 0000000000000000 R14: 00007f6339d35f80 R15: 00007ffccabd9bb8 [ 482.953153][ T28] [ 482.956236][ T28] [ 482.956236][ T28] Showing all locks held in the system: [ 482.960379][ T3651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.964599][ T28] 1 lock held by rcu_tasks_kthre/12: [ 482.964624][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 482.964687][ T28] 1 lock held by rcu_tasks_trace/13: [ 482.964698][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 482.964754][ T28] 1 lock held by khungtaskd/28: [ 482.964764][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 482.964856][ T28] 2 locks held by getty/3398: [ 482.964866][ T28] #0: ffff88814b55f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 482.964919][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 482.964972][ T28] 1 lock held by syz-executor/3635: [ 482.964983][ T28] #0: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 482.965033][ T28] 3 locks held by kworker/u5:4/3646: [ 482.965044][ T28] #0: ffff888027515938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 482.965096][ T28] #1: ffffc90003dafd20 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 482.965147][ T28] #2: ffff88807e2010b8 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bc/0x6f0 [ 482.965197][ T28] 3 locks held by kworker/u5:7/3651: [ 482.965210][ T28] 2 locks held by kworker/1:5/3681: [ 482.965226][ T28] 1 lock held by syz-executor/5555: [ 482.965236][ T28] #0: ffff88807f1340e0 (&type->s_umount_key#48){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 482.965296][ T28] 1 lock held by syz.2.557/6355: [ 482.965306][ T28] #0: ffff888075768de8 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 482.965375][ T28] 1 lock held by syz.0.856/7669: [ 482.965385][ T28] #0: ffff8880510c0338 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xed/0x7b0 [ 482.965447][ T28] [ 482.965452][ T28] ============================================= [ 482.965452][ T28] [ 482.965472][ T28] NMI backtrace for cpu 0 [ 482.965484][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 482.965502][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.965512][ T28] Call Trace: [ 482.965518][ T28] [ 482.965526][ T28] dump_stack_lvl+0x1e3/0x2cb [ 482.965554][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 482.965578][ T28] ? panic+0x764/0x764 [ 482.965594][ T28] ? vprintk_emit+0x622/0x740 [ 482.965620][ T28] ? printk_sprint+0x490/0x490 [ 482.965642][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 482.965663][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 482.965685][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 482.965701][ T28] ? _printk+0xd1/0x111 [ 482.965717][ T28] ? panic+0x764/0x764 [ 483.240662][ T28] ? __wake_up_klogd+0xcc/0x100 [ 483.245508][ T28] ? panic+0x764/0x764 [ 483.249565][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 483.255621][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 483.261684][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 483.267655][ T28] watchdog+0xf88/0xfd0 [ 483.271808][ T28] ? watchdog+0x1f8/0xfd0 [ 483.276478][ T28] kthread+0x28d/0x320 [ 483.280537][ T28] ? hungtask_pm_notify+0x50/0x50 [ 483.285810][ T28] ? kthread_blkcg+0xd0/0xd0 [ 483.290395][ T28] ret_from_fork+0x1f/0x30 [ 483.294898][ T28] [ 483.298954][ T28] Sending NMI from CPU 0 to CPUs 1: [ 483.304556][ C1] NMI backtrace for cpu 1 [ 483.304566][ C1] CPU: 1 PID: 4900 Comm: kworker/u4:29 Not tainted 6.1.112-syzkaller #0 [ 483.304582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.304591][ C1] Workqueue: events_unbound bpf_map_free_deferred [ 483.304616][ C1] RIP: 0010:rcu_is_watching+0x56/0xb0 [ 483.304632][ C1] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 50 c8 6e 00 48 c7 c3 a8 56 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 1e 8b 03 65 ff 0d f5 05 8f 7e 74 0c 83 e0 04 c1 e8 02 5b [ 483.304653][ C1] RSP: 0018:ffffc9000383f8a0 EFLAGS: 00000802 [ 483.304665][ C1] RAX: 0000000000000000 RBX: ffff8880b8f356a8 RCX: ffffffff816aaa17 [ 483.304676][ C1] RDX: 0000000000000000 RSI: ffffffff8b5d7160 RDI: ffffffff8b5d7120 [ 483.304686][ C1] RBP: ffffc9000383f9f0 R08: dffffc0000000000 R09: fffffbfff1d33f2e [ 483.304697][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000707f24 [ 483.304707][ C1] R13: ffffffff843ea225 R14: ffffffff8cd8c878 R15: dffffc0000000000 [ 483.304717][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 483.304729][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 483.304740][ C1] CR2: 00007f9cff5f6d00 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 483.304752][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 483.304760][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 483.304769][ C1] Call Trace: [ 483.304774][ C1] [ 483.304779][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 483.304794][ C1] ? read_lock_is_recursive+0x10/0x10 [ 483.304816][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 483.304831][ C1] ? nmi_handle+0x25/0x440 [ 483.304859][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 483.304880][ C1] ? nmi_handle+0x12e/0x440 [ 483.304900][ C1] ? nmi_handle+0x25/0x440 [ 483.304920][ C1] ? rcu_is_watching+0x56/0xb0 [ 483.304932][ C1] ? default_do_nmi+0x62/0x150 [ 483.304948][ C1] ? exc_nmi+0xa8/0x100 [ 483.304961][ C1] ? end_repeat_nmi+0x16/0x31 [ 483.304982][ C1] ? debug_check_no_obj_freed+0x455/0x4e0 [ 483.304999][ C1] ? lock_release+0xc7/0xa20 [ 483.305018][ C1] ? rcu_is_watching+0x56/0xb0 [ 483.305032][ C1] ? rcu_is_watching+0x56/0xb0 [ 483.305046][ C1] ? rcu_is_watching+0x56/0xb0 [ 483.305065][ C1] [ 483.305069][ C1] [ 483.305074][ C1] lock_release+0xd6/0xa20 [ 483.305095][ C1] ? read_lock_is_recursive+0x10/0x10 [ 483.305115][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 483.305130][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 483.305151][ C1] ? __rwlock_init+0x140/0x140 [ 483.305166][ C1] ? _raw_spin_lock_irqsave+0xac/0x120 [ 483.305186][ C1] _raw_spin_unlock_irqrestore+0x75/0x130 [ 483.305204][ C1] ? _raw_spin_unlock+0x40/0x40 [ 483.305226][ C1] debug_check_no_obj_freed+0x455/0x4e0 [ 483.305246][ C1] free_unref_page_prepare+0x319/0x1120 [ 483.305267][ C1] free_unref_page+0x33/0x3e0 [ 483.305284][ C1] ringbuf_map_free+0xbe/0x110 [ 483.305299][ C1] ? process_one_work+0x7a9/0x11d0 [ 483.305316][ C1] process_one_work+0x8a9/0x11d0 [ 483.305339][ C1] ? worker_detach_from_pool+0x260/0x260 [ 483.305357][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 483.305374][ C1] ? kthread_data+0x4e/0xc0 [ 483.305395][ C1] ? wq_worker_running+0x97/0x190 [ 483.305410][ C1] worker_thread+0xa47/0x1200 [ 483.305428][ C1] ? release_firmware_map_entry+0x186/0x186 [ 483.305451][ C1] kthread+0x28d/0x320 [ 483.305463][ C1] ? worker_clr_flags+0x190/0x190 [ 483.305477][ C1] ? kthread_blkcg+0xd0/0xd0 [ 483.305491][ C1] ret_from_fork+0x1f/0x30 [ 483.305517][ C1] [ 483.666183][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 483.673147][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 483.681045][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.691148][ T28] Call Trace: [ 483.694427][ T28] [ 483.697377][ T28] dump_stack_lvl+0x1e3/0x2cb [ 483.702106][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 483.707556][ T28] ? panic+0x764/0x764 [ 483.711611][ T28] ? llist_add_batch+0x160/0x1d0 [ 483.716541][ T28] ? vscnprintf+0x59/0x80 [ 483.720861][ T28] panic+0x318/0x764 [ 483.724744][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 483.730884][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 483.736249][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 483.742390][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 483.748533][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 483.754675][ T28] watchdog+0xfc7/0xfd0 [ 483.758829][ T28] ? watchdog+0x1f8/0xfd0 [ 483.763181][ T28] kthread+0x28d/0x320 [ 483.767235][ T28] ? hungtask_pm_notify+0x50/0x50 [ 483.772264][ T28] ? kthread_blkcg+0xd0/0xd0 [ 483.776840][ T28] ret_from_fork+0x1f/0x30 [ 483.781339][ T28] [ 483.784597][ T28] Kernel Offset: disabled [ 483.788980][ T28] Rebooting in 86400 seconds..