last executing test programs: 8m44.916017563s ago: executing program 1 (id=69): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 8m44.572975674s ago: executing program 1 (id=70): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r0, 0x200, {0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1, 0x412, 0x10, "900ecb97131cceed1e7c145ac78759993c7bfe0444db8d305a0b333ad692cef487a0792b289d179593d3a42ec7ccd9c465cc9b65d6bccb732e2b8b4d9b0573bd", "b5f90cb4a18f5c70b2afdfa1eb9adb058d31c408ab80393c032ad6af01a9293de1d316d79efd5d4de4b0e3d9c2b95e5373e4ac214fdef75238f466fff58b442e", "916385b752bc44972050a1c94516a5298e5f46f430ed8853c563efbf1ad7aa4f", [0xfffffffffffffffe, 0xf6af]}}) 8m42.393661746s ago: executing program 1 (id=76): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYBLOB="3a4be99f9f727e8d0262285f8311dc64a122b0328932c72b2382283dcb1539cb6d4840c2d90f6bb77b5e93c4b5", @ANYRESOCT], 0x1, 0x5530, &(0x7f000000c740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write(r5, &(0x7f0000002200)="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", 0x154) 8m36.769467113s ago: executing program 1 (id=86): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1000, 0x1) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000003c0)={r0, 0x200, {0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1, 0x412, 0x10, "900ecb97131cceed1e7c145ac78759993c7bfe0444db8d305a0b333ad692cef487a0792b289d179593d3a42ec7ccd9c465cc9b65d6bccb732e2b8b4d9b0573bd", "b5f90cb4a18f5c70b2afdfa1eb9adb058d31c408ab80393c032ad6af01a9293de1d316d79efd5d4de4b0e3d9c2b95e5373e4ac214fdef75238f466fff58b442e", "916385b752bc44972050a1c94516a5298e5f46f430ed8853c563efbf1ad7aa4f", [0xfffffffffffffffe, 0xf6af]}}) 8m36.668352903s ago: executing program 1 (id=87): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000640), &(0x7f0000000000)='./file0\x00', 0x2204014, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2bc, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x101) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{0x0}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r1], 0x1000f) 8m36.533952703s ago: executing program 1 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d9) socket$inet(0x2, 0x4000000000000001, 0x0) 8m21.360524752s ago: executing program 32 (id=89): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @timestamp, @window, @mss, @window, @window], 0x200002d9) socket$inet(0x2, 0x4000000000000001, 0x0) 5m26.393467046s ago: executing program 2 (id=601): mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) getrlimit(0x5, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1480e, &(0x7f0000000a00)=ANY=[@ANYRES64, @ANYBLOB="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", @ANYRESOCT, @ANYRES64=r1], 0x20, 0x6a9, &(0x7f0000001c80)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) r4 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @rand_addr=0x64010102}, 0x2}}, 0x2e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x23, 0x0, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) 5m25.356924098s ago: executing program 2 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000019c0)={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, 0x40000, 0x40, 0x3, 0x100, 0xfffffffffffffffe, 0x400006}) 5m24.152572069s ago: executing program 2 (id=606): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m23.06168203s ago: executing program 2 (id=616): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x2) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000000)=0x4) write$P9_RREADDIR(r0, &(0x7f0000000ec0)={0xb}, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair(0x25, 0x5, 0x3, &(0x7f00000008c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) chdir(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) 5m18.733286926s ago: executing program 2 (id=629): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) bind$inet6(r1, 0x0, 0x0) 5m11.740914404s ago: executing program 2 (id=646): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7}]}}, 0x0, 0x26, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000007000000000000000100000d020000000000000047e18e63"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5m10.535062105s ago: executing program 33 (id=646): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7}]}}, 0x0, 0x26, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000007000000000000000100000d020000000000000047e18e63"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) 25.727794535s ago: executing program 6 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0xa8) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)={0x10}, 0x10) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) 25.407293564s ago: executing program 6 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') 25.318994904s ago: executing program 6 (id=1265): bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r3, &(0x7f0000000480)=""/4081, 0x103a) 24.246266999s ago: executing program 6 (id=1266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(&(0x7f0000001240)=[{0xffffffffffffffff, 0x20}], 0x1, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x3, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 23.192708135s ago: executing program 6 (id=1268): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000600)={0x120, 0x4, &(0x7f0000000200)}) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @local, 0x5}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0xba, 0x0, 0x7fffffff}]}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 21.872819789s ago: executing program 6 (id=1271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) restart_syscall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 10.110902581s ago: executing program 5 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x103, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r6, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) capset(&(0x7f00000020c0)={0x19980330}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 8.009773453s ago: executing program 5 (id=1300): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00b0000", @ANYRES16=r6, @ANYBLOB="01000000000000000000830000008c000e80880000800a000100ffffffffffff00006c000380040001806400018014000180050003000000000005000500000000003800018004000900050005000c000000050006000000000006000400000000000400080004000a000500030000000000050005000000000014000180080002000000000005000700000000000a0001000802110000070000"], 0xa0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}]}}}]}, 0x50}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth0\x00', {0x2, 0x0, @loopback}}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r10 = gettid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100", @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) 6.963164669s ago: executing program 5 (id=1302): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x45, {0x45, 0x24, "61639c545d2ce9daa76026209610aa4b68e2aac937b1b0d2363bdd25b67c5bdfd51207b2908fceb485a8995d91efa214479f03bc251ffdff9ebab19ba6613600e553d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.198938985s ago: executing program 34 (id=1271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x0, 0x0}) restart_syscall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) 6.110024635s ago: executing program 0 (id=1305): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c", 0x11) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.962056054s ago: executing program 4 (id=1306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28180, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000003c0)=r9}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[], 0x0) 5.881326264s ago: executing program 0 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$random(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.800550484s ago: executing program 4 (id=1309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x2, 0x7]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x6a, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@remote, @multicast2}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.0103469s ago: executing program 0 (id=1310): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") r0 = syz_open_dev$loop(0x0, 0x81, 0x2a00) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) io_setup(0x7ff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1}, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000400)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000580)) fallocate(r0, 0x20, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 4.831013089s ago: executing program 3 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') 4.704622469s ago: executing program 3 (id=1312): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="a00b0000", @ANYRES16=r6, @ANYBLOB="01000000000000000000830000008c000e80880000800a000100ffffffffffff00006c000380040001806400018014000180050003000000000005000500000000003800018004000900050005000c000000050006000000000006000400000000000400080004000a000500030000000000050005000000000014000180080002000000000005000700000000000a0001000802110000070000"], 0xa0}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x4}]}}}]}, 0x50}}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000040)={'veth0\x00', {0x2, 0x0, @loopback}}) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) unshare(0x62040200) r10 = gettid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100", @ANYRES32=r9, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r10], 0x28}}, 0x0) 3.785504465s ago: executing program 0 (id=1313): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@max_batch_time={'max_batch_time', 0x3d, 0x23f}}, {@test_dummy_encryption}, {@mblk_io_submit}]}, 0x3, 0x44b, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrpP09+sroZRHS4FAhYh4JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IwQUJVYIz4ojEX8CNCwKuXOGOKlXQSwunoF3vtrZr59E4cag/H2nbGe9sZr6eHe/sjh1A3xrN/kkidkbEbxExXM82Fxit/3fj2sXq39cuVpNYWnrrzyQvd/3axWpZtDxuR5EZSyPST5Kikmbz5y+cnq7VZs8V+YmFM+9NzJ+/8OypM9MnZ0/Onp06evTI4ckXnp96ritxZnFd3//h3IF9r71z+fXq8cvv/vxd1t6dxf7GOLplNAv8r6Vc674nul1Zj+1qSCcDPWwIa1KJiKy7BvPxPxyVuNV5w/Hqxz1tHLChsmvTts67F5eAu1gSvW4B0BvlhT67/y23TZp6bAlXX6rfAGVx3yi2+p6BSIsygy33t900GhHHF//5Ottig55DAAA0+rz61bF4pt38L437G8rtLtZQRiLinojYExH3RsTeiLgvIi/7QEQ8uMb6W5eGbp//pFfuKLBVyuZ/LxZrW83zv3L2FyOVIrcrj38wOXGqNnuoeE/GYnBblp9cpo4fXvn1i077Gud/2ZbVX84Fi3ZcGWh5QDczvTCdT0q74OpHEfsH2sWf3FwJSCJiX0TsX9uf3l0mTj317YFOhVaOfxldWGda+ibiyXr/L0ZL/KVk+fXJif9FbfbQRHlW3O6XHfFmp/rXFX8XZP2/vfn8by0ykjSu186vvY5Pf/+s4z3NnZ7/Q8nbeb8MFa99ML2wcG4yYig5luebXp+6dWyZL8tn8Y8dbD/+9xTHZPU8FBHZSfxwRDwSEY8WbX8sIh6PiIPLxP/Ty533bYX+n2n7+Xfz/G/p/7UnKqd//L5T/avr/yN5aqx4Jf/8W8FqG7ie9w4AAAD+K9L8O/BJOn4znabj4/Xv8O+N7Wltbn7h6RNz75+dqX9XfiQG0/JJ13DD89DJZLH4i/X8VPGsuNx/uHhu/GXl/3l+vDpXm+lx7NDvdnQY/5k/Kr1uHbDh2q2jTQ31oCHApmsd/2lz9tIbtx+SbGiDgE3j99rQv1YY/+lmtQPYfK7/0L/ajf9LLXlrAXB3cv2H/mX8Q/8y/qF/Gf/Ql9bzu36Jfk5EuiWaIbFBiV5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//USLthA==") ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r0], 0xff34, 0x0) 3.698870565s ago: executing program 5 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)={0x10}, 0x10) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r4) 3.698521145s ago: executing program 3 (id=1315): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c00"], 0x50}}], 0x1, 0x0) 3.478228664s ago: executing program 5 (id=1316): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0x1c}}}, 0x24}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c", 0x11) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.60410567s ago: executing program 3 (id=1317): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.216721529s ago: executing program 4 (id=1318): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28180, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[], 0x0) 2.013439718s ago: executing program 5 (id=1319): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x74) 1.193902015s ago: executing program 0 (id=1320): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r4, 0x4b4a, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x800]}, 0x8, 0x0) timerfd_create(0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x27c}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, 0x0) 1.059631544s ago: executing program 4 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_INIT(r2, &(0x7f0000000240)={0x50}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') 805.908353ms ago: executing program 4 (id=1322): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = dup2(r1, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) mknodat(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) linkat(r3, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 569.279862ms ago: executing program 4 (id=1323): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 424.915151ms ago: executing program 3 (id=1324): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000340)) 233.88379ms ago: executing program 3 (id=1325): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x40, 0xa, 0x45, {0x45, 0x24, "61639c545d2ce9daa76026209610aa4b68e2aac937b1b0d2363bdd25b67c5bdfd51207b2908fceb485a8995d91efa214479f03bc251ffdff9ebab19ba6613600e553d7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=1326): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x32, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002240)=[{{&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="3000000000000000000000000700000000830b4be0000001e0000001008911e44833856ee8b25633f47d13d5e4aa00001c00"], 0x50}}], 0x1, 0x0) kernel console output (not intermixed with test programs): system without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.347864][ T6716] Trying to write to read-only block-device loop2 [ 299.403552][ T23] usb 6-1: USB disconnect, device number 5 [ 299.447523][ T6716] Trying to write to read-only block-device loop2 [ 299.486717][ T6716] Trying to write to read-only block-device loop2 [ 299.580825][ T6716] Trying to write to read-only block-device loop2 [ 299.612772][ T6716] Trying to write to read-only block-device loop2 [ 299.700553][ T6716] Trying to write to read-only block-device loop2 [ 299.796638][ T6716] Trying to write to read-only block-device loop2 [ 299.968630][ T6716] Trying to write to read-only block-device loop2 [ 299.997683][ T6716] Trying to write to read-only block-device loop2 [ 300.185990][ T6716] F2FS-fs (loop2) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2bf/0x5b0 [ 301.353159][ T6718] loop3: detected capacity change from 0 to 512 [ 301.388612][ T6732] loop5: detected capacity change from 0 to 164 [ 301.521016][ T6718] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.624: invalid indirect mapped block 10 (level 1) [ 301.550594][ T4168] F2FS-fs (loop2): access invalid blkaddr:2816 [ 301.598823][ T4168] CPU: 0 PID: 4168 Comm: syz-executor Not tainted 5.15.173-syzkaller #0 [ 301.607192][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.617266][ T4168] Call Trace: [ 301.620555][ T4168] [ 301.623499][ T4168] dump_stack_lvl+0x1e3/0x2d0 [ 301.628207][ T4168] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 301.633861][ T4168] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 301.639698][ T4168] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 301.645090][ T4168] f2fs_map_blocks+0x159a/0x3720 [ 301.650085][ T4168] ? f2fs_force_buffered_io+0x630/0x630 [ 301.655667][ T4168] f2fs_mpage_readpages+0xe98/0x27c0 [ 301.661009][ T4168] ? dquot_release_reservation_block+0x90/0x90 [ 301.667209][ T4168] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 301.673400][ T4168] ? f2fs_readahead+0x16e/0x310 [ 301.678267][ T4168] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 301.684006][ T4168] read_pages+0x159/0x8e0 [ 301.688362][ T4168] ? page_cache_ra_unbounded+0x930/0x930 [ 301.694011][ T4168] ? add_to_page_cache_locked+0x40/0x40 [ 301.699577][ T4168] ? down_read+0x1b3/0x2e0 [ 301.704010][ T4168] page_cache_ra_unbounded+0x7b0/0x930 [ 301.709502][ T4168] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 301.716017][ T4168] ? blk_cgroup_congested+0x30c/0x390 [ 301.721410][ T4168] f2fs_readdir+0x546/0xef0 [ 301.725950][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 301.731175][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 301.736395][ T4168] ? iterate_dir+0x10a/0x570 [ 301.741004][ T4168] ? fsnotify_perm+0x442/0x590 [ 301.745784][ T4168] iterate_dir+0x224/0x570 [ 301.750219][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 301.755444][ T4168] __se_sys_getdents64+0x209/0x4f0 [ 301.758667][ T6718] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.624: invalid indirect mapped block 8 (level 1) [ 301.760577][ T4168] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 301.779585][ T4168] ? __x64_sys_getdents64+0x80/0x80 [ 301.784802][ T4168] ? filldir+0x720/0x720 [ 301.789071][ T4168] ? syscall_enter_from_user_mode+0x2e/0x240 [ 301.793420][ T6718] EXT4-fs (loop3): 1 truncate cleaned up [ 301.795061][ T4168] ? lockdep_hardirqs_on+0x94/0x130 [ 301.795092][ T4168] ? syscall_enter_from_user_mode+0x2e/0x240 [ 301.800720][ T6718] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,user_xattr,,errors=continue. Quota mode: none. [ 301.805989][ T4168] do_syscall_64+0x3b/0xb0 [ 301.806012][ T4168] ? clear_bhb_loop+0x15/0x70 [ 301.806039][ T4168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.838754][ T4168] RIP: 0033:0x7f6a4cdb3873 [ 301.843186][ T4168] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 92 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 301.862976][ T4168] RSP: 002b:00007fff7f684e28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 301.871394][ T4168] RAX: ffffffffffffffda RBX: 000055559139b600 RCX: 00007f6a4cdb3873 [ 301.879365][ T4168] RDX: 0000000000008000 RSI: 000055559139b600 RDI: 0000000000000005 [ 301.887337][ T4168] RBP: 000055559139b5d4 R08: 0000000000000000 R09: 0000000000000000 [ 301.895305][ T4168] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 301.903273][ T4168] R13: 0000000000000010 R14: 000055559139b5d0 R15: 00007fff7f6870d0 [ 301.911252][ T4168] [ 301.961070][ T6737] 9pnet: Insufficient options for proto=fd [ 302.049668][ T6737] 9pnet: Insufficient options for proto=fd [ 302.434031][ T4168] F2FS-fs (loop2): access invalid blkaddr:2816 [ 302.440328][ T4168] CPU: 1 PID: 4168 Comm: syz-executor Not tainted 5.15.173-syzkaller #0 [ 302.448677][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.458752][ T4168] Call Trace: [ 302.462045][ T4168] [ 302.464985][ T4168] dump_stack_lvl+0x1e3/0x2d0 [ 302.469687][ T4168] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 302.475354][ T4168] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 302.481211][ T4168] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 302.486630][ T4168] f2fs_map_blocks+0x159a/0x3720 [ 302.491645][ T4168] ? f2fs_force_buffered_io+0x630/0x630 [ 302.497240][ T4168] f2fs_mpage_readpages+0xe98/0x27c0 [ 302.502581][ T4168] ? dquot_release_reservation_block+0x90/0x90 [ 302.508784][ T4168] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 302.514957][ T4168] ? f2fs_readahead+0x16e/0x310 [ 302.519823][ T4168] ? f2fs_set_data_page_dirty+0xa90/0xa90 [ 302.525567][ T4168] read_pages+0x159/0x8e0 [ 302.529927][ T4168] ? page_cache_ra_unbounded+0x930/0x930 [ 302.535578][ T4168] ? add_to_page_cache_locked+0x40/0x40 [ 302.541147][ T4168] ? down_read+0x1b3/0x2e0 [ 302.545580][ T4168] page_cache_ra_unbounded+0x7b0/0x930 [ 302.551069][ T4168] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 302.557626][ T4168] ? blk_cgroup_congested+0x30c/0x390 [ 302.563017][ T4168] f2fs_readdir+0x546/0xef0 [ 302.567559][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 302.572780][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 302.577990][ T4168] ? iterate_dir+0x10a/0x570 [ 302.582594][ T4168] ? fsnotify_perm+0x442/0x590 [ 302.587376][ T4168] iterate_dir+0x224/0x570 [ 302.591807][ T4168] ? f2fs_fill_dentries+0xd60/0xd60 [ 302.597366][ T4168] __se_sys_getdents64+0x209/0x4f0 [ 302.602494][ T4168] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 302.608493][ T4168] ? __x64_sys_getdents64+0x80/0x80 [ 302.613708][ T4168] ? filldir+0x720/0x720 [ 302.617969][ T4168] ? syscall_enter_from_user_mode+0x2e/0x240 [ 302.623957][ T4168] ? lockdep_hardirqs_on+0x94/0x130 [ 302.629165][ T4168] ? syscall_enter_from_user_mode+0x2e/0x240 [ 302.635160][ T4168] do_syscall_64+0x3b/0xb0 [ 302.639585][ T4168] ? clear_bhb_loop+0x15/0x70 [ 302.644274][ T4168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.650178][ T4168] RIP: 0033:0x7f6a4cdb3873 [ 302.654606][ T4168] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 92 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 302.674220][ T4168] RSP: 002b:00007fff7f684e28 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 302.682649][ T4168] RAX: ffffffffffffffda RBX: 000055559139b600 RCX: 00007f6a4cdb3873 [ 302.690627][ T4168] RDX: 0000000000008000 RSI: 000055559139b600 RDI: 0000000000000005 [ 302.698685][ T4168] RBP: 000055559139b5d4 R08: 0000000000000000 R09: 0000000000000000 [ 302.706655][ T4168] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 302.714625][ T4168] R13: 0000000000000010 R14: 000055559139b5d0 R15: 00007fff7f6870d0 [ 302.722610][ T4168] [ 304.391013][ T4168] attempt to access beyond end of device [ 304.391013][ T4168] loop2: rw=0, want=45072, limit=40427 [ 305.259538][ T144] bio_check_ro: 19 callbacks suppressed [ 305.259581][ T144] Trying to write to read-only block-device loop2 [ 305.473576][ T144] Trying to write to read-only block-device loop2 [ 305.539414][ T144] Trying to write to read-only block-device loop2 [ 305.566060][ T144] attempt to access beyond end of device [ 305.566060][ T144] loop2: rw=2049, want=40984, limit=40427 [ 305.972285][ T5461] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 306.272262][ T5461] usb 6-1: Using ep0 maxpacket: 16 [ 306.423481][ T5461] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.631332][ T5461] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 306.671548][ T5461] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.743935][ T5461] usb 6-1: config 0 descriptor?? [ 306.897328][ T6774] loop0: detected capacity change from 0 to 164 [ 307.286818][ T5461] apple 0003:05AC:024B.000E: unknown main item tag 0x6 [ 307.295040][ T5461] apple 0003:05AC:024B.000E: unknown main item tag 0x1 [ 307.311843][ T5461] apple 0003:05AC:024B.000E: unknown main item tag 0xe [ 307.318825][ T5461] apple 0003:05AC:024B.000E: bogus close delimiter [ 307.326443][ T5461] apple 0003:05AC:024B.000E: item 0 0 2 10 parsing failed [ 307.342317][ T5461] apple 0003:05AC:024B.000E: parse failed [ 307.348112][ T5461] apple: probe of 0003:05AC:024B.000E failed with error -22 [ 308.365979][ T6005] usb 6-1: USB disconnect, device number 6 [ 308.417616][ T4316] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.592929][ T4316] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.225286][ T4316] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.698644][ T4316] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.249728][ T4316] device hsr_slave_0 left promiscuous mode [ 311.268891][ T4316] device hsr_slave_1 left promiscuous mode [ 311.290703][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.315268][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.351179][ T4316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.373055][ T4316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.399744][ T4316] device bridge_slave_1 left promiscuous mode [ 311.416340][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.425747][ T4316] device bridge_slave_0 left promiscuous mode [ 311.441983][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.472267][ T4316] device veth1_macvtap left promiscuous mode [ 311.479939][ T4316] device veth0_macvtap left promiscuous mode [ 311.501580][ T4316] device veth1_vlan left promiscuous mode [ 311.508935][ T4316] device veth0_vlan left promiscuous mode [ 311.695766][ T6808] loop5: detected capacity change from 0 to 40427 [ 311.777409][ T6829] loop0: detected capacity change from 0 to 164 [ 311.966867][ T6808] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 311.985155][ T6808] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 312.087737][ T6808] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 312.108358][ T4316] team0 (unregistering): Port device team_slave_1 removed [ 312.181528][ T4316] team0 (unregistering): Port device team_slave_0 removed [ 312.238448][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.285864][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.299452][ T6808] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 312.310462][ T6808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 312.451890][ T5461] Bluetooth: hci1: command 0x0409 tx timeout [ 312.508738][ T4316] bond0 (unregistering): Released all slaves [ 312.618885][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 312.711263][ T4690] attempt to access beyond end of device [ 312.711263][ T4690] loop5: rw=2049, want=45104, limit=40427 [ 312.902606][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.911229][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.931740][ T6803] device bridge_slave_0 entered promiscuous mode [ 312.940914][ T6803] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.986041][ T6803] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.053140][ T6803] device bridge_slave_1 entered promiscuous mode [ 313.155768][ T6803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.214810][ T6803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.338225][ T6803] team0: Port device team_slave_0 added [ 313.369668][ T6803] team0: Port device team_slave_1 added [ 313.479985][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.502188][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.605582][ T6803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.097949][ T6803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.361809][ T6803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.463850][ T6803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.532018][ T5464] Bluetooth: hci1: command 0x041b tx timeout [ 314.647509][ T6858] loop0: detected capacity change from 0 to 512 [ 314.725865][ T6803] device hsr_slave_0 entered promiscuous mode [ 314.746653][ T6858] EXT4-fs (loop0): Unrecognized mount option "fsname=]" or missing value [ 314.946926][ T6803] device hsr_slave_1 entered promiscuous mode [ 315.181081][ T6803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.511818][ T6803] Cannot create hsr debugfs directory [ 316.603742][ T6803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 316.612193][ T5464] Bluetooth: hci1: command 0x040f tx timeout [ 316.675135][ T6803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 316.733328][ T6803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 316.778893][ T6803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 316.925081][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.931420][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.949834][ T6879] netlink: 'syz.0.656': attribute type 13 has an invalid length. [ 317.010145][ T6879] gretap0: refused to change device tx_queue_len [ 317.038680][ T6879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 317.212607][ T6803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.276899][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 317.295738][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.334943][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.369853][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 317.398259][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.429418][ T4549] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.436584][ T4549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.544824][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.573808][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.592446][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.610941][ T4549] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.618188][ T4549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.624039][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.681874][ T5463] Bluetooth: hci1: command 0x0419 tx timeout [ 318.712577][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.751523][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.811126][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.853724][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.881507][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 319.041278][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 319.055223][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 319.089621][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 319.117317][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 319.153969][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 319.177961][ T6803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 319.321908][ T6910] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 319.647511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 319.678569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.748889][ T6803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.722325][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 322.756273][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 322.876713][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 322.926689][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 322.987975][ T6803] device veth0_vlan entered promiscuous mode [ 323.015970][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 323.063143][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 323.138228][ T6803] device veth1_vlan entered promiscuous mode [ 323.307486][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 323.342662][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 323.422283][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 323.472660][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 323.490480][ T6803] device veth0_macvtap entered promiscuous mode [ 323.560270][ T6803] device veth1_macvtap entered promiscuous mode [ 323.578291][ T6953] loop5: detected capacity change from 0 to 512 [ 323.633952][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.672080][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.672924][ T6953] EXT4-fs (loop5): orphan cleanup on readonly fs [ 323.741307][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.777410][ T6953] EXT4-fs (loop5): 1 orphan inode deleted [ 323.785768][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.801893][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.815316][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.825492][ T6953] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 323.831955][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.869072][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.891091][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.910372][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 323.928373][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 323.975306][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 324.000656][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 324.055350][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.084414][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.104160][ T6941] loop3: detected capacity change from 0 to 40427 [ 324.110755][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.139911][ T6941] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 324.149218][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.162583][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.164600][ T6941] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 324.173184][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.191526][ T6803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.198071][ T6941] F2FS-fs (loop3): invalid crc value [ 324.202726][ T6803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.250013][ T6941] F2FS-fs (loop3): Found nat_bits in checkpoint [ 324.264565][ T6803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.300571][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 324.320943][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 324.345281][ T6803] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.367588][ T6803] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.417697][ T6803] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.454842][ T6803] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.482661][ T6941] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 324.489991][ T6941] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.875405][ T26] audit: type=1800 audit(1733822472.587:13): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.669" name="file0" dev="loop3" ino=10 res=0 errno=0 [ 325.326312][ T4175] attempt to access beyond end of device [ 325.326312][ T4175] loop3: rw=2049, want=45104, limit=40427 [ 325.443188][ T6978] loop0: detected capacity change from 0 to 128 [ 325.640267][ T6978] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 325.733956][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.747827][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.780075][ T6978] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 325.883449][ T6978] ext2 filesystem being mounted at /155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 325.928198][ T4756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.928918][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.947785][ T4756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.976567][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 328.725669][ T7006] loop3: detected capacity change from 0 to 256 [ 329.630865][ T7020] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 331.471164][ T5709] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 331.592537][ T5709] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.460249][ T7044] loop0: detected capacity change from 0 to 40427 [ 332.646272][ T7044] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 332.689080][ T7044] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 332.758065][ T7044] F2FS-fs (loop0): invalid crc value [ 332.787620][ T7044] F2FS-fs (loop0): Found nat_bits in checkpoint [ 332.940740][ T7044] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 332.960624][ T7044] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 333.011843][ T5461] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 333.255576][ T26] audit: type=1800 audit(1733822480.977:14): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.684" name="file0" dev="loop0" ino=10 res=0 errno=0 [ 333.470240][ T4167] attempt to access beyond end of device [ 333.470240][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 333.554944][ T5461] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 333.762135][ T5461] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.790691][ T5461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.819885][ T7077] loop3: detected capacity change from 0 to 40427 [ 333.821821][ T5461] usb 7-1: Product: syz [ 333.830653][ T5461] usb 7-1: Manufacturer: syz [ 333.850910][ T5461] usb 7-1: SerialNumber: syz [ 333.891066][ T7077] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 333.942157][ T7077] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 334.003586][ T7077] F2FS-fs (loop3): Found nat_bits in checkpoint [ 334.130823][ T7077] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 334.144806][ T7077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 334.480995][ T7103] loop0: detected capacity change from 0 to 256 [ 335.482364][ T5461] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 335.489995][ T5461] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 335.516439][ T5461] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 335.692206][ T5461] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 335.775723][ T5461] cdc_ncm 7-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 335.844029][ T5461] usb 7-1: USB disconnect, device number 2 [ 335.871207][ T5461] cdc_ncm 7-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 336.212074][ T5464] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 336.472050][ T5464] usb 1-1: Using ep0 maxpacket: 8 [ 336.782689][ T5464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.967138][ T5464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.171123][ T5464] usb 1-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 337.442238][ T5464] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.497409][ T5464] usb 1-1: config 0 descriptor?? [ 337.542181][ T5464] usb 1-1: can't set config #0, error -71 [ 337.592231][ T5464] usb 1-1: USB disconnect, device number 6 [ 337.697993][ T7133] loop4: detected capacity change from 0 to 8192 [ 337.717024][ T7139] loop3: detected capacity change from 0 to 256 [ 340.795347][ T7150] loop0: detected capacity change from 0 to 40427 [ 340.901452][ T7150] F2FS-fs (loop0): invalid crc value [ 341.132611][ T7150] F2FS-fs (loop0): Found nat_bits in checkpoint [ 341.374736][ T7150] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 342.495388][ T4167] attempt to access beyond end of device [ 342.495388][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 345.194935][ T7189] loop6: detected capacity change from 0 to 256 [ 345.466181][ T26] audit: type=1326 audit(1733822493.187:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7195 comm="syz.4.713" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72d17f9f19 code=0x0 [ 351.642021][ T6005] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 351.911851][ T6005] usb 7-1: Using ep0 maxpacket: 32 [ 351.999869][ T7295] loop4: detected capacity change from 0 to 512 [ 352.052603][ T6005] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.089573][ T6005] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 352.149301][ T7295] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.727: casefold flag without casefold feature [ 352.151884][ T6005] usb 7-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 352.181676][ T7295] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.727: couldn't read orphan inode 15 (err -117) [ 352.209833][ T7295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 352.223291][ T6005] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.283708][ T6005] usb 7-1: config 0 descriptor?? [ 353.101994][ T6005] usbhid 7-1:0.0: can't add hid device: -71 [ 353.108013][ T6005] usbhid: probe of 7-1:0.0 failed with error -71 [ 353.151971][ T6005] usb 7-1: USB disconnect, device number 3 [ 353.223606][ T7325] loop0: detected capacity change from 0 to 512 [ 353.400361][ T7325] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.729: casefold flag without casefold feature [ 353.438452][ T7325] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.729: couldn't read orphan inode 15 (err -117) [ 353.738565][ T7325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 356.481982][ T5461] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 356.511987][ T5722] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 356.781891][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 356.877630][ T5461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.900395][ T5461] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.936129][ T5461] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.942279][ T5722] usb 6-1: unable to get BOS descriptor or descriptor too short [ 356.974601][ T5461] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.009319][ T5461] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.041061][ T5461] usb 7-1: config 0 descriptor?? [ 357.063292][ T5722] usb 6-1: config 130 has an invalid interface number: 247 but max is 1 [ 357.091972][ T5722] usb 6-1: config 130 has an invalid interface number: 52 but max is 1 [ 357.130850][ T5722] usb 6-1: config 130 has no interface number 0 [ 357.151140][ T5722] usb 6-1: config 130 has no interface number 1 [ 357.191698][ T5722] usb 6-1: config 130 interface 247 has no altsetting 0 [ 357.228058][ T5722] usb 6-1: config 130 interface 52 has no altsetting 0 [ 357.482057][ T5722] usb 6-1: string descriptor 0 read error: -22 [ 357.488342][ T5722] usb 6-1: New USB device found, idVendor=033c, idProduct=6f73, bcdDevice=40.fc [ 357.507664][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.559958][ T5461] plantronics 0003:047F:FFFF.0010: ignoring exceeding usage max [ 357.580024][ T5461] plantronics 0003:047F:FFFF.0010: unbalanced collection at end of report description [ 357.603123][ T5722] usb-storage 6-1:130.247: USB Mass Storage device detected [ 357.611272][ T5461] plantronics 0003:047F:FFFF.0010: parse failed [ 357.630845][ T5461] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22 [ 357.765413][ T5461] usb 7-1: USB disconnect, device number 4 [ 357.809017][ T5709] usb 6-1: USB disconnect, device number 7 [ 358.499893][ T7424] 9pnet: Insufficient options for proto=fd [ 358.504336][ T7425] loop5: detected capacity change from 0 to 512 [ 358.537979][ T7424] 9pnet: Insufficient options for proto=fd [ 358.706184][ T7425] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.743: casefold flag without casefold feature [ 358.780293][ T7425] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.743: couldn't read orphan inode 15 (err -117) [ 358.847786][ T7425] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 358.962018][ T5722] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 361.661939][ T5722] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.681829][ T5722] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.691881][ T5722] usb 7-1: string descriptor 0 read error: -71 [ 362.699295][ T5722] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.737065][ T7461] 9pnet: Insufficient options for proto=fd [ 362.767551][ T5722] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.801620][ T7461] 9pnet: Insufficient options for proto=fd [ 362.872360][ T5722] usb 7-1: can't set config #1, error -71 [ 362.914555][ T5722] usb 7-1: USB disconnect, device number 5 [ 363.796811][ T7474] loop4: detected capacity change from 0 to 512 [ 363.918716][ T26] audit: type=1326 audit(1733822511.637:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 363.976915][ T26] audit: type=1326 audit(1733822511.677:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.008796][ T26] audit: type=1326 audit(1733822511.677:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.037768][ T7474] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.760: casefold flag without casefold feature [ 364.044571][ T7482] loop6: detected capacity change from 0 to 256 [ 364.074661][ T26] audit: type=1326 audit(1733822511.677:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.098056][ T26] audit: type=1326 audit(1733822511.677:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.120732][ T26] audit: type=1326 audit(1733822511.687:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.128244][ T7474] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.760: couldn't read orphan inode 15 (err -117) [ 364.143533][ T26] audit: type=1326 audit(1733822511.687:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.177571][ T26] audit: type=1326 audit(1733822511.687:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.204222][ T26] audit: type=1326 audit(1733822511.687:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.226620][ T7474] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 364.253526][ T26] audit: type=1326 audit(1733822511.797:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.6.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb7c5d2f19 code=0x7ffc0000 [ 364.313024][ T7479] capability: warning: `syz.6.761' uses deprecated v2 capabilities in a way that may be insecure [ 364.838788][ T7488] overlayfs: failed to resolve './file2': -2 [ 367.658735][ T4316] attempt to access beyond end of device [ 367.658735][ T4316] loop6: rw=1, want=544, limit=256 [ 367.687617][ T4316] attempt to access beyond end of device [ 367.687617][ T4316] loop6: rw=1, want=776, limit=256 [ 368.382003][ T5464] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 368.574035][ T7508] 9pnet: Insufficient options for proto=fd [ 368.594022][ T7508] 9pnet: Insufficient options for proto=fd [ 368.811851][ T5464] usb 5-1: Using ep0 maxpacket: 16 [ 368.962349][ T5464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.185368][ T5464] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 369.529726][ T5464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.642176][ T5464] usb 5-1: config 0 descriptor?? [ 370.301890][ T5464] apple 0003:05AC:024B.0011: unknown main item tag 0x6 [ 370.756505][ T5464] apple 0003:05AC:024B.0011: unknown main item tag 0x1 [ 370.764175][ T5464] apple 0003:05AC:024B.0011: unknown main item tag 0xe [ 370.771148][ T5464] apple 0003:05AC:024B.0011: bogus close delimiter [ 370.778113][ T5464] apple 0003:05AC:024B.0011: item 0 0 2 10 parsing failed [ 370.786033][ T5464] apple 0003:05AC:024B.0011: parse failed [ 370.792081][ T5464] apple: probe of 0003:05AC:024B.0011 failed with error -22 [ 370.843061][ T5464] usb 5-1: USB disconnect, device number 12 [ 370.991312][ T7530] loop3: detected capacity change from 0 to 512 [ 371.269845][ T7530] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.774: casefold flag without casefold feature [ 371.335653][ T7530] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.774: couldn't read orphan inode 15 (err -117) [ 371.418929][ T7530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 371.612820][ T7539] overlayfs: failed to resolve './file0': -2 [ 372.790002][ T5461] kernel write not supported for file bpf-prog (pid: 5461 comm: kworker/1:15) [ 374.314331][ T7562] loop3: detected capacity change from 0 to 1024 [ 374.430971][ T7567] loop6: detected capacity change from 0 to 512 [ 375.789532][ T7562] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 376.021057][ T7562] EXT4-fs (loop3): orphan cleanup on readonly fs [ 376.119426][ T7571] input: syz0 as /devices/virtual/input/input11 [ 376.240780][ T7562] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 376.312433][ T7567] EXT4-fs (loop6): orphan cleanup on readonly fs [ 376.338140][ T7567] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.784: bg 0: block 248: padding at end of block bitmap is not set [ 376.360480][ T7567] __quota_error: 41 callbacks suppressed [ 376.360504][ T7567] Quota error (device loop6): write_blk: dquota write failed [ 376.374422][ T7567] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 376.385105][ T7567] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.784: Failed to acquire dquot type 1 [ 376.413451][ T7567] EXT4-fs (loop6): 1 truncate cleaned up [ 376.423284][ T7567] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 376.555476][ T7567] device pim6reg1 entered promiscuous mode [ 376.665645][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 376.851926][ T7562] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.785: mark_inode_dirty error [ 376.889664][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 376.946522][ T7562] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.785: Invalid block bitmap block 3 in block_group 0 [ 377.041987][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.099418][ T7562] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 377.136825][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.155632][ T7562] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.785: mark_inode_dirty error [ 377.195721][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.224269][ T7562] Quota error (device loop3): write_blk: dquota write failed [ 377.248043][ T7562] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #3: block 1: comm syz.3.785: lblock 6 mapped to illegal pblock 1 (length 1) [ 377.298475][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.318814][ T7562] Quota error (device loop3): write_blk: dquota write failed [ 377.344411][ T7562] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 377.364279][ T5709] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 377.384570][ T7562] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #3: block 48: comm syz.3.785: lblock 0 mapped to illegal pblock 48 (length 1) [ 377.430174][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.450018][ T7562] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 377.476265][ T7562] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.785: Failed to acquire dquot type 0 [ 377.515977][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.545517][ T7562] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #3: block 49: comm syz.3.785: lblock 1 mapped to illegal pblock 49 (length 1) [ 377.590833][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.609118][ T7562] Quota error (device loop3): do_insert_tree: Can't read tree quota block 1 [ 377.621921][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 377.649036][ T7562] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 377.679945][ T7562] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.785: Failed to acquire dquot type 0 [ 377.717867][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.742149][ T5709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.761869][ T7562] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 377.781620][ T5709] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 377.809680][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.818388][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.832734][ T7562] EXT4-fs error (device loop3): ext4_evict_inode:282: inode #15: comm syz.3.785: mark_inode_dirty error [ 377.867016][ T5709] usb 1-1: config 0 descriptor?? [ 377.884197][ T7562] EXT4-fs (loop3): Remounting filesystem read-only [ 377.908120][ T7562] EXT4-fs warning (device loop3): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 377.948795][ T7562] EXT4-fs (loop3): 1 orphan inode deleted [ 377.967369][ T7562] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,data_err=abort,init_itable,errors=remount-ro,abort,noblock_validity,barrier,min_batch_time=0x0000000000000577,. Quota mode: none. [ 378.372830][ T5709] apple 0003:05AC:024B.0012: unknown main item tag 0x6 [ 378.396060][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.402519][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.417154][ T7587] loop3: detected capacity change from 0 to 512 [ 378.442088][ T5709] apple 0003:05AC:024B.0012: unknown main item tag 0x1 [ 379.290196][ T5709] apple 0003:05AC:024B.0012: unknown main item tag 0xe [ 379.298501][ T5709] apple 0003:05AC:024B.0012: bogus close delimiter [ 379.305187][ T5709] apple 0003:05AC:024B.0012: item 0 0 2 10 parsing failed [ 379.317290][ T7593] loop4: detected capacity change from 0 to 256 [ 379.324219][ T5709] apple 0003:05AC:024B.0012: parse failed [ 379.330006][ T5709] apple: probe of 0003:05AC:024B.0012 failed with error -22 [ 379.353348][ T7587] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.788: casefold flag without casefold feature [ 379.382084][ T5709] usb 1-1: USB disconnect, device number 7 [ 379.396907][ T7587] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.788: couldn't read orphan inode 15 (err -117) [ 379.405849][ T7593] exfat: Deprecated parameter 'namecase' [ 379.419416][ T7587] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 379.528112][ T7593] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 380.508574][ T7607] loop0: detected capacity change from 0 to 512 [ 380.635053][ T7613] loop4: detected capacity change from 0 to 256 [ 380.678592][ T7607] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.797: casefold flag without casefold feature [ 380.702706][ T7613] exfat: Deprecated parameter 'namecase' [ 380.741234][ T7613] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 380.846260][ T7607] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.797: couldn't read orphan inode 15 (err -117) [ 380.931043][ T7607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 384.598313][ T7624] loop4: detected capacity change from 0 to 40427 [ 384.904315][ T7624] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 385.312818][ T7624] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 385.392157][ T7624] F2FS-fs (loop4): invalid crc value [ 385.461915][ T7624] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 385.514165][ T7636] loop0: detected capacity change from 0 to 512 [ 385.712188][ T7636] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.803: casefold flag without casefold feature [ 385.741559][ T7636] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.803: couldn't read orphan inode 15 (err -117) [ 385.762255][ T7636] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 386.292202][ T6005] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 386.561970][ T6005] usb 1-1: Using ep0 maxpacket: 16 [ 386.651259][ T7638] loop5: detected capacity change from 0 to 40427 [ 386.667782][ T4158] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 386.726509][ T6005] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.745040][ T7638] F2FS-fs (loop5): invalid crc value [ 386.778953][ T7638] F2FS-fs (loop5): Found nat_bits in checkpoint [ 386.910687][ T7638] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 386.922037][ T6005] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 386.951857][ T4158] usb 5-1: Using ep0 maxpacket: 16 [ 386.957320][ T6005] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.987586][ T6005] usb 1-1: Product: syz [ 387.000391][ T6005] usb 1-1: Manufacturer: syz [ 387.181809][ T6005] usb 1-1: SerialNumber: syz [ 387.193338][ T6005] usb 1-1: config 0 descriptor?? [ 387.252253][ T4158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.944328][ T4158] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 387.954261][ T4158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.012878][ T4158] usb 5-1: config 0 descriptor?? [ 388.093536][ T7654] loop6: detected capacity change from 0 to 512 [ 388.100755][ T4690] attempt to access beyond end of device [ 388.100755][ T4690] loop5: rw=2049, want=45104, limit=40427 [ 388.238265][ T7654] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.808: casefold flag without casefold feature [ 388.318076][ T7654] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.808: couldn't read orphan inode 15 (err -117) [ 388.363522][ T7654] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 388.496126][ T4158] apple 0003:05AC:024B.0013: unknown main item tag 0x6 [ 388.504179][ T4158] apple 0003:05AC:024B.0013: unknown main item tag 0x1 [ 388.534513][ T4158] apple 0003:05AC:024B.0013: unknown main item tag 0xe [ 388.541487][ T4158] apple 0003:05AC:024B.0013: bogus close delimiter [ 388.554397][ T4158] apple 0003:05AC:024B.0013: item 0 0 2 10 parsing failed [ 388.609691][ T4158] apple 0003:05AC:024B.0013: parse failed [ 388.626071][ T4158] apple: probe of 0003:05AC:024B.0013 failed with error -22 [ 388.699442][ T5722] usb 5-1: USB disconnect, device number 13 [ 390.698306][ T4158] usb 1-1: USB disconnect, device number 8 [ 390.862796][ T7672] Zero length message leads to an empty skb [ 391.617184][ T7684] loop4: detected capacity change from 0 to 512 [ 391.861717][ T7688] loop0: detected capacity change from 0 to 512 [ 391.873765][ T7684] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.816: casefold flag without casefold feature [ 391.982836][ T7684] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.816: couldn't read orphan inode 15 (err -117) [ 392.000622][ T7688] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.818: casefold flag without casefold feature [ 392.037891][ T7684] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 392.080098][ T7688] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.818: couldn't read orphan inode 15 (err -117) [ 392.111975][ T7681] loop3: detected capacity change from 0 to 40427 [ 392.122159][ T7688] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 392.172025][ T7681] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 392.223969][ T7681] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 392.262793][ T7681] F2FS-fs (loop3): invalid crc value [ 392.290710][ T7681] F2FS-fs (loop3): Found nat_bits in checkpoint [ 392.508695][ T7681] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 392.517809][ T7681] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 392.781442][ T7668] loop5: detected capacity change from 0 to 40427 [ 392.918916][ T7668] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 393.296587][ T26] audit: type=1800 audit(1733822540.997:67): pid=7697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.817" name="file0" dev="loop3" ino=10 res=0 errno=0 [ 393.321424][ T7668] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 393.371531][ T7668] F2FS-fs (loop5): invalid crc value [ 393.511310][ T7668] F2FS-fs (loop5): Found nat_bits in checkpoint [ 393.532813][ T4175] attempt to access beyond end of device [ 393.532813][ T4175] loop3: rw=2049, want=45104, limit=40427 [ 393.652799][ T7668] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 393.672025][ T7668] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 394.446853][ T7707] loop5: detected capacity change from 0 to 512 [ 394.885941][ T7707] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.820: casefold flag without casefold feature [ 395.192388][ T7707] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.820: couldn't read orphan inode 15 (err -117) [ 395.288062][ T7707] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 396.832839][ T5464] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 397.309506][ T4158] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 397.571995][ T5464] usb 7-1: Using ep0 maxpacket: 16 [ 397.591848][ T4158] usb 6-1: Using ep0 maxpacket: 16 [ 397.699582][ T5464] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.894352][ T4158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.905847][ T4158] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 397.916082][ T4158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.933532][ T4158] usb 6-1: config 0 descriptor?? [ 398.392579][ T5464] usb 7-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 398.635437][ T5464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.824247][ T5464] usb 7-1: Product: syz [ 398.829052][ T5464] usb 7-1: Manufacturer: syz [ 398.896342][ T5464] usb 7-1: SerialNumber: syz [ 398.928814][ T5464] usb 7-1: config 0 descriptor?? [ 399.064445][ T4158] apple 0003:05AC:024B.0014: unknown main item tag 0x6 [ 399.071379][ T4158] apple 0003:05AC:024B.0014: unknown main item tag 0x1 [ 399.083959][ T4158] apple 0003:05AC:024B.0014: unknown main item tag 0xe [ 399.090929][ T4158] apple 0003:05AC:024B.0014: bogus close delimiter [ 399.097888][ T4158] apple 0003:05AC:024B.0014: item 0 0 2 10 parsing failed [ 399.105828][ T4158] apple 0003:05AC:024B.0014: parse failed [ 399.119270][ T4158] apple: probe of 0003:05AC:024B.0014 failed with error -22 [ 399.259470][ T4635] usb 6-1: USB disconnect, device number 8 [ 399.508032][ T7730] loop0: detected capacity change from 0 to 40427 [ 399.588358][ T7730] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 399.617682][ T7730] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 399.649185][ T7730] F2FS-fs (loop0): invalid crc value [ 399.666170][ T7730] F2FS-fs (loop0): Found nat_bits in checkpoint [ 399.771808][ T7730] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 399.778890][ T7730] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 400.154083][ T26] audit: type=1800 audit(1733822547.767:68): pid=7730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.829" name="file0" dev="loop0" ino=10 res=0 errno=0 [ 400.195544][ T4167] attempt to access beyond end of device [ 400.195544][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 400.837390][ T7739] loop4: detected capacity change from 0 to 40427 [ 401.082217][ T5464] usb 7-1: USB disconnect, device number 6 [ 401.149036][ T7739] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 401.185528][ T7755] loop6: detected capacity change from 0 to 512 [ 401.201822][ T7739] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 401.238303][ T7739] F2FS-fs (loop4): invalid crc value [ 401.290193][ T7739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 401.307847][ T7755] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.834: casefold flag without casefold feature [ 401.357923][ T7755] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.834: couldn't read orphan inode 15 (err -117) [ 401.412444][ T7755] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 401.470843][ T7739] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 401.481376][ T7739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 401.692977][ T26] audit: type=1800 audit(1733822549.417:69): pid=7739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.830" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 401.810405][ T4176] attempt to access beyond end of device [ 401.810405][ T4176] loop4: rw=2049, want=45104, limit=40427 [ 403.727516][ T7794] loop4: detected capacity change from 0 to 512 [ 404.624583][ T7794] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.837: casefold flag without casefold feature [ 404.662190][ T7794] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.837: couldn't read orphan inode 15 (err -117) [ 404.692130][ T7794] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 405.787249][ T7807] 9pnet: Insufficient options for proto=fd [ 405.803172][ T7807] 9pnet: Insufficient options for proto=fd [ 406.007803][ T7800] loop3: detected capacity change from 0 to 40427 [ 406.082228][ T7800] F2FS-fs (loop3): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 406.091130][ T7800] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 406.150818][ T7800] F2FS-fs (loop3): invalid crc value [ 406.174775][ T7800] F2FS-fs (loop3): Found nat_bits in checkpoint [ 406.191882][ T5722] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 406.333279][ T7800] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 406.350631][ T7800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 406.431804][ T5722] usb 6-1: Using ep0 maxpacket: 16 [ 406.531130][ T7813] loop0: detected capacity change from 0 to 512 [ 406.552034][ T5722] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.620459][ T26] audit: type=1800 audit(1733822554.337:70): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.843" name="file0" dev="loop3" ino=10 res=0 errno=0 [ 406.715887][ T7813] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.846: casefold flag without casefold feature [ 406.732412][ T4175] attempt to access beyond end of device [ 406.732412][ T4175] loop3: rw=2049, want=45104, limit=40427 [ 406.757407][ T7813] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.846: couldn't read orphan inode 15 (err -117) [ 406.771931][ T5722] usb 6-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 406.772537][ T7813] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 406.781100][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.801163][ T5722] usb 6-1: Product: syz [ 406.805563][ T5722] usb 6-1: Manufacturer: syz [ 406.810181][ T5722] usb 6-1: SerialNumber: syz [ 406.832666][ T5722] usb 6-1: config 0 descriptor?? [ 408.200158][ T7817] loop0: detected capacity change from 0 to 40427 [ 409.817748][ T5722] usb 6-1: USB disconnect, device number 9 [ 409.878777][ T7841] 9pnet: Insufficient options for proto=fd [ 409.879870][ T7841] 9pnet: Insufficient options for proto=fd [ 409.962129][ T7817] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 410.088261][ T7817] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 410.145936][ T7817] F2FS-fs (loop0): invalid crc value [ 410.176754][ T7847] loop4: detected capacity change from 0 to 512 [ 410.184453][ T7817] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 410.308163][ T7847] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.858: casefold flag without casefold feature [ 410.378736][ T7847] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.858: couldn't read orphan inode 15 (err -117) [ 410.469404][ T7847] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 411.077646][ T7862] loop4: detected capacity change from 0 to 512 [ 411.312652][ T7862] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.862: casefold flag without casefold feature [ 411.347250][ T7862] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.862: couldn't read orphan inode 15 (err -117) [ 411.362112][ T7862] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 411.898512][ T7858] loop0: detected capacity change from 0 to 40427 [ 412.022379][ T7858] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 412.081532][ T7858] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 412.108421][ T7858] F2FS-fs (loop0): invalid crc value [ 412.137920][ T7858] F2FS-fs (loop0): Found nat_bits in checkpoint [ 412.294814][ T7858] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 412.310739][ T7858] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 412.615867][ T26] audit: type=1800 audit(1733822560.337:71): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.860" name="file0" dev="loop0" ino=10 res=0 errno=0 [ 412.737939][ T4167] attempt to access beyond end of device [ 412.737939][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 413.366836][ T5709] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 413.612956][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 413.700166][ T7880] 9pnet: Insufficient options for proto=fd [ 413.737905][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.758181][ T7880] 9pnet: Insufficient options for proto=fd [ 413.932441][ T5709] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 413.941536][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.999187][ T5709] usb 4-1: Product: syz [ 414.132623][ T5709] usb 4-1: Manufacturer: syz [ 414.165129][ T5709] usb 4-1: SerialNumber: syz [ 414.222461][ T5709] usb 4-1: config 0 descriptor?? [ 414.398905][ T7889] overlayfs: failed to get inode (-116) [ 414.456319][ T7889] overlayfs: failed to get inode (-116) [ 416.398430][ T5709] usb 4-1: USB disconnect, device number 10 [ 416.850057][ T7914] loop3: detected capacity change from 0 to 512 [ 417.043581][ T7914] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.877: casefold flag without casefold feature [ 417.189547][ T7914] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.877: couldn't read orphan inode 15 (err -117) [ 417.208417][ T7914] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 420.639403][ T7939] loop4: detected capacity change from 0 to 512 [ 420.930503][ T7944] overlayfs: failed to get inode (-116) [ 420.953856][ T7939] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.882: casefold flag without casefold feature [ 420.977700][ T7944] overlayfs: failed to get inode (-116) [ 421.011971][ T7939] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.882: couldn't read orphan inode 15 (err -117) [ 421.368966][ T7939] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 422.816905][ T5461] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 423.112147][ T5461] usb 6-1: Using ep0 maxpacket: 16 [ 423.258017][ T5461] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.478249][ T5461] usb 6-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 423.507524][ T5461] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.541947][ T5461] usb 6-1: Product: syz [ 423.558183][ T5461] usb 6-1: Manufacturer: syz [ 423.576777][ T5461] usb 6-1: SerialNumber: syz [ 423.669310][ T5461] usb 6-1: config 0 descriptor?? [ 424.652378][ T4274] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 426.112255][ T4158] usb 6-1: USB disconnect, device number 10 [ 426.185380][ T7990] overlayfs: failed to get inode (-116) [ 426.191101][ T7990] overlayfs: failed to get inode (-116) [ 429.901925][ T5461] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 430.353388][ T5461] usb 4-1: Using ep0 maxpacket: 16 [ 430.522662][ T5461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.599153][ T5461] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 430.840734][ T5461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.223840][ T5461] usb 4-1: config 0 descriptor?? [ 431.693735][ T5461] apple 0003:05AC:024B.0015: unknown main item tag 0x6 [ 431.721578][ T5461] apple 0003:05AC:024B.0015: unknown main item tag 0x1 [ 431.775480][ T5461] apple 0003:05AC:024B.0015: unknown main item tag 0xe [ 431.821830][ T5461] apple 0003:05AC:024B.0015: bogus close delimiter [ 431.828380][ T5461] apple 0003:05AC:024B.0015: item 0 0 2 10 parsing failed [ 431.912280][ T5461] apple 0003:05AC:024B.0015: parse failed [ 431.948896][ T5461] apple: probe of 0003:05AC:024B.0015 failed with error -22 [ 432.015575][ T5461] usb 4-1: USB disconnect, device number 11 [ 432.307899][ T8034] overlayfs: failed to get inode (-116) [ 432.333084][ T8034] overlayfs: failed to get inode (-116) [ 432.362141][ T4158] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 433.152056][ T4158] usb 1-1: Using ep0 maxpacket: 16 [ 435.751934][ T4158] usb 1-1: unable to read config index 0 descriptor/all [ 435.758950][ T4158] usb 1-1: can't read configurations, error -71 [ 436.667516][ T8067] overlayfs: failed to get inode (-116) [ 436.711932][ T8067] overlayfs: failed to get inode (-116) [ 437.322776][ T4158] Bluetooth: hci1: command 0x0406 tx timeout [ 439.373678][ T8084] loop0: detected capacity change from 0 to 512 [ 439.493405][ T8084] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.926: casefold flag without casefold feature [ 439.632146][ T4158] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 439.666331][ T8084] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.926: couldn't read orphan inode 15 (err -117) [ 439.828343][ T8084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 439.962545][ T4158] usb 5-1: Using ep0 maxpacket: 16 [ 440.113404][ T4158] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.232370][ T4158] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 440.248055][ T4158] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.258428][ T4158] usb 5-1: config 0 descriptor?? [ 440.267536][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274012][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.106903][ T4158] apple 0003:05AC:024B.0016: unknown main item tag 0x6 [ 441.578119][ T4158] apple 0003:05AC:024B.0016: unknown main item tag 0x1 [ 441.759809][ T4158] apple 0003:05AC:024B.0016: unknown main item tag 0xe [ 441.781874][ T4158] apple 0003:05AC:024B.0016: bogus close delimiter [ 441.813855][ T4158] apple 0003:05AC:024B.0016: item 0 0 2 10 parsing failed [ 441.847449][ T4158] apple 0003:05AC:024B.0016: parse failed [ 441.877781][ T4158] apple: probe of 0003:05AC:024B.0016 failed with error -22 [ 441.932061][ T4158] usb 5-1: USB disconnect, device number 15 [ 443.551828][ T8109] loop5: detected capacity change from 0 to 512 [ 443.681113][ T8109] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.932: casefold flag without casefold feature [ 443.789353][ T5709] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 443.966801][ T8109] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.932: couldn't read orphan inode 15 (err -117) [ 443.999388][ T8109] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.621865][ T5719] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 447.877697][ T5719] usb 6-1: Using ep0 maxpacket: 32 [ 448.002043][ T5719] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.031901][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 448.060099][ T5719] usb 6-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.00 [ 448.076988][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.112879][ T5719] usb 6-1: config 0 descriptor?? [ 448.215498][ T5464] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 448.473226][ T5464] usb 5-1: Using ep0 maxpacket: 32 [ 448.632416][ T5464] usb 5-1: config 1 has an invalid interface number: 186 but max is 0 [ 448.697168][ T5464] usb 5-1: config 1 has no interface number 0 [ 449.004316][ T5464] usb 5-1: config 1 interface 186 altsetting 16 endpoint 0xD has invalid maxpacket 1951, setting to 1024 [ 449.055480][ T5464] usb 5-1: config 1 interface 186 altsetting 16 bulk endpoint 0xD has invalid maxpacket 1024 [ 449.145777][ T5464] usb 5-1: config 1 interface 186 altsetting 16 bulk endpoint 0x83 has invalid maxpacket 80 [ 449.176473][ T5464] usb 5-1: config 1 interface 186 has no altsetting 0 [ 449.261888][ T5719] usbhid 6-1:0.0: can't add hid device: -71 [ 449.278206][ T5719] usbhid: probe of 6-1:0.0 failed with error -71 [ 449.307733][ T5719] usb 6-1: USB disconnect, device number 11 [ 449.383284][ T5464] usb 5-1: New USB device found, idVendor=0403, idProduct=e0f5, bcdDevice=4a.a2 [ 449.402378][ T5464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.420805][ T5464] usb 5-1: Product: syz [ 449.426255][ T8157] loop0: detected capacity change from 0 to 512 [ 449.430992][ T5464] usb 5-1: Manufacturer: syz [ 449.437659][ T5464] usb 5-1: SerialNumber: syz [ 449.483476][ T8142] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 449.499242][ T8142] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 449.565010][ T8157] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.946: casefold flag without casefold feature [ 449.589714][ T8157] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.946: couldn't read orphan inode 15 (err -117) [ 449.607620][ T8157] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 449.619001][ T5709] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 449.871853][ T5709] usb 4-1: Using ep0 maxpacket: 16 [ 449.885577][ T5464] ftdi_sio 5-1:1.186: FTDI USB Serial Device converter detected [ 449.978786][ T5464] usb 5-1: Detected FT-X [ 450.181950][ T5464] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 450.203133][ T5464] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 450.216981][ T8159] loop6: detected capacity change from 0 to 40427 [ 450.242069][ T5464] ftdi_sio 5-1:1.186: GPIO initialisation failed: -71 [ 450.261397][ T8166] loop5: detected capacity change from 0 to 512 [ 450.270429][ T5464] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 450.288822][ T5464] usb 5-1: USB disconnect, device number 16 [ 450.304761][ T5464] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 450.322724][ T5464] ftdi_sio 5-1:1.186: device disconnected [ 450.472749][ T8159] F2FS-fs (loop6): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 450.490129][ T8166] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.948: casefold flag without casefold feature [ 450.503959][ T8159] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 450.517523][ T8166] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.948: couldn't read orphan inode 15 (err -117) [ 450.531002][ T8159] F2FS-fs (loop6): invalid crc value [ 450.532233][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.546881][ T8166] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 450.585044][ T8159] F2FS-fs (loop6): Found nat_bits in checkpoint [ 450.739910][ T8159] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 450.754418][ T8159] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 450.832099][ T5709] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 450.859808][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.881830][ T5709] usb 4-1: Product: syz [ 450.886026][ T5709] usb 4-1: Manufacturer: syz [ 450.906383][ T5709] usb 4-1: SerialNumber: syz [ 451.678816][ T26] audit: type=1800 audit(1733822599.397:72): pid=8179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.947" name="file0" dev="loop6" ino=10 res=0 errno=0 [ 451.777026][ T5709] usb 4-1: config 0 descriptor?? [ 452.227900][ T8189] 9pnet: Insufficient options for proto=fd [ 452.235638][ T8189] 9pnet: Insufficient options for proto=fd [ 452.322223][ T5709] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 452.328858][ T5709] usb 4-1: No valid video chain found. [ 452.372326][ T5709] usb 4-1: USB disconnect, device number 12 [ 453.252825][ T6803] attempt to access beyond end of device [ 453.252825][ T6803] loop6: rw=2049, want=45104, limit=40427 [ 456.507444][ T8218] loop6: detected capacity change from 0 to 512 [ 456.535787][ T8221] 9pnet: Insufficient options for proto=fd [ 456.588221][ T8221] 9pnet: Insufficient options for proto=fd [ 456.828866][ T8218] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.959: casefold flag without casefold feature [ 456.888651][ T8218] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.959: couldn't read orphan inode 15 (err -117) [ 457.032250][ T8218] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 457.412141][ T5461] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 457.831825][ T5461] usb 5-1: Using ep0 maxpacket: 8 [ 458.152352][ T5461] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 458.168274][ T5461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.207542][ T5461] usb 5-1: Product: syz [ 458.221786][ T5461] usb 5-1: Manufacturer: syz [ 458.226416][ T5461] usb 5-1: SerialNumber: syz [ 458.262610][ T5461] usb 5-1: config 0 descriptor?? [ 458.898151][ T5461] usb 5-1: USB disconnect, device number 17 [ 459.247783][ T8236] loop0: detected capacity change from 0 to 40427 [ 459.698655][ T8236] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 459.751852][ T8236] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 459.790384][ T8257] loop4: detected capacity change from 0 to 1024 [ 459.816229][ T8236] F2FS-fs (loop0): invalid crc value [ 459.846571][ T8236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 459.962752][ T8257] EXT4-fs (loop4): Test dummy encryption mode enabled [ 460.024895][ T8257] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,nombcache,barrier=0x0000000001000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 460.139939][ T8236] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 460.161297][ T8236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 463.681597][ T8282] overlayfs: failed to get inode (-116) [ 463.687395][ T8282] overlayfs: failed to get inode (-116) [ 463.835379][ T8284] loop5: detected capacity change from 0 to 256 [ 463.884425][ T8286] overlayfs: failed to resolve './file2': -2 [ 463.939564][ T8284] exfat: Unknown parameter 'øÿÿÿÿÿÿÿ1 k‘ØÌ0x0000000000000000' [ 465.400785][ T8298] loop4: detected capacity change from 0 to 40427 [ 465.488806][ T8298] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 465.570498][ T8298] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 465.637464][ T8298] F2FS-fs (loop4): invalid crc value [ 465.659208][ T8298] F2FS-fs (loop4): Found nat_bits in checkpoint [ 466.466249][ T8298] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 466.481913][ T8298] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.561860][ T5709] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 466.942167][ T26] audit: type=1800 audit(1733822614.587:73): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.986" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 467.141990][ T5709] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 467.170572][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.223987][ T5709] usb 4-1: config 0 has no interface number 0 [ 467.382024][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 467.411789][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.466018][ T5709] usb 4-1: Product: syz [ 467.481513][ T5709] usb 4-1: Manufacturer: syz [ 467.503820][ T5709] usb 4-1: SerialNumber: syz [ 467.521349][ T4176] attempt to access beyond end of device [ 467.521349][ T4176] loop4: rw=2049, want=45104, limit=40427 [ 467.530124][ T8363] overlayfs: failed to get inode (-116) [ 467.539991][ T5709] usb 4-1: config 0 descriptor?? [ 467.574228][ T8363] overlayfs: failed to get inode (-116) [ 467.598411][ T5709] usb 4-1: Found UVC 0.08 device syz (046d:0823) [ 467.610562][ T5709] usb 4-1: No valid video chain found. [ 467.805081][ T5709] usb 4-1: USB disconnect, device number 13 [ 470.122219][ T8387] loop4: detected capacity change from 0 to 2048 [ 470.531875][ T8387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 472.924474][ T8400] overlayfs: failed to get inode (-116) [ 472.930366][ T8400] overlayfs: failed to get inode (-116) [ 473.588282][ T8418] loop6: detected capacity change from 0 to 128 [ 473.773400][ T8418] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 473.835222][ T8418] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.969154][ T8423] overlayfs: failed to resolve './file2': -2 [ 474.035347][ T8402] loop4: detected capacity change from 0 to 40427 [ 474.700365][ T8425] loop5: detected capacity change from 0 to 512 [ 474.780433][ T8402] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 474.831178][ T8427] loop6: detected capacity change from 0 to 512 [ 474.837750][ T8402] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 474.866244][ T8425] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 474.875044][ T8402] F2FS-fs (loop4): invalid crc value [ 474.895354][ T8425] EXT4-fs (loop5): Unrecognized mount option "seclabel" or missing value [ 474.911093][ T8402] F2FS-fs (loop4): Found nat_bits in checkpoint [ 474.986310][ T8427] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 475.034512][ T8402] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 475.048622][ T8402] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 475.095172][ T8427] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.441122][ T26] audit: type=1800 audit(1733822623.157:74): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1003" name="file0" dev="loop4" ino=10 res=0 errno=0 [ 477.284961][ T4176] attempt to access beyond end of device [ 477.284961][ T4176] loop4: rw=2049, want=45104, limit=40427 [ 477.368280][ T8445] overlayfs: failed to get inode (-116) [ 477.387682][ T8445] overlayfs: failed to get inode (-116) [ 477.651933][ T5709] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 477.680135][ T5719] kernel write not supported for file bpf-prog (pid: 5719 comm: kworker/0:13) [ 479.808598][ T8473] overlayfs: failed to resolve './file2': -2 [ 480.552124][ T5709] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 480.601640][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.646647][ T5709] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.659091][ T5709] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 480.679167][ T5709] usb 6-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 480.697083][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.785292][ T5709] usb 6-1: config 0 descriptor?? [ 480.880362][ T8480] loop4: detected capacity change from 0 to 128 [ 481.042437][ T8483] syz.3.1026[8483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.043043][ T8483] syz.3.1026[8483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.149908][ T8483] loop3: detected capacity change from 0 to 1024 [ 481.762002][ T8483] EXT4-fs (loop3): Unrecognized mount option "fscontext=sysadm_u" or missing value [ 481.802189][ T5709] usbhid 6-1:0.0: can't add hid device: -71 [ 481.808202][ T5709] usbhid: probe of 6-1:0.0 failed with error -71 [ 481.848914][ T5709] usb 6-1: USB disconnect, device number 12 [ 482.169253][ T8495] loop3: detected capacity change from 0 to 128 [ 482.262547][ T8498] overlayfs: failed to get inode (-116) [ 482.268398][ T8498] overlayfs: failed to get inode (-116) [ 483.498509][ T8517] loop4: detected capacity change from 0 to 512 [ 483.561872][ T5719] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 487.191958][ T5719] usb 6-1: Using ep0 maxpacket: 16 [ 487.238826][ T8538] loop0: detected capacity change from 0 to 4096 [ 487.311823][ T5719] usb 6-1: device descriptor read/all, error -71 [ 487.845315][ T8544] overlayfs: failed to get inode (-116) [ 487.851028][ T8544] overlayfs: failed to get inode (-116) [ 487.915940][ T8549] loop3: detected capacity change from 0 to 512 [ 487.926959][ T8538] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 487.949232][ T8538] syz.0.1041[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.949341][ T8538] syz.0.1041[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.975640][ T8538] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.0.1041: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 488.017060][ T8538] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.1041: directory missing '..' [ 488.446713][ T8549] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 488.772071][ T8549] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.982945][ T8561] loop6: detected capacity change from 0 to 512 [ 490.364979][ T8573] loop4: detected capacity change from 0 to 256 [ 490.441657][ T8561] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1048: casefold flag without casefold feature [ 490.656369][ T8561] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1048: couldn't read orphan inode 15 (err -117) [ 490.899878][ T8561] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 491.691803][ T8573] exfat: Deprecated parameter 'namecase' [ 491.929639][ T8573] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab90) [ 491.940129][ T8573] exFAT-fs (loop4): invalid boot region [ 491.945855][ T8573] exFAT-fs (loop4): failed to recognize exfat type [ 493.152069][ T4158] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 493.419306][ T4158] usb 6-1: Using ep0 maxpacket: 16 [ 493.494206][ T8587] loop4: detected capacity change from 0 to 128 [ 493.582182][ T4158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.606476][ T8587] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 493.777490][ T4158] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 493.787431][ T4158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.801523][ T4158] usb 6-1: config 0 descriptor?? [ 493.807932][ T8587] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,nobarrier,,errors=continue. Quota mode: none. [ 493.822742][ T8587] ext2 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 494.000382][ T8597] loop6: detected capacity change from 0 to 256 [ 494.385947][ T4158] apple 0003:05AC:024B.0017: unknown main item tag 0x6 [ 494.550873][ T4158] apple 0003:05AC:024B.0017: unknown main item tag 0x1 [ 494.571118][ T4158] apple 0003:05AC:024B.0017: unknown main item tag 0xe [ 494.578965][ T4158] apple 0003:05AC:024B.0017: bogus close delimiter [ 494.781512][ T4158] apple 0003:05AC:024B.0017: item 0 0 2 10 parsing failed [ 494.799771][ T4158] apple 0003:05AC:024B.0017: parse failed [ 494.809531][ T4158] apple: probe of 0003:05AC:024B.0017 failed with error -22 [ 495.491412][ T4158] usb 6-1: USB disconnect, device number 15 [ 495.528618][ T8597] exfat: Deprecated parameter 'namecase' [ 495.613234][ T8597] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 496.705914][ T8621] loop4: detected capacity change from 0 to 512 [ 497.770617][ T8621] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1063: casefold flag without casefold feature [ 498.017090][ T8621] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1063: couldn't read orphan inode 15 (err -117) [ 498.092215][ T8621] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 498.752109][ T8638] overlayfs: missing 'lowerdir' [ 498.797772][ T8634] loop6: detected capacity change from 0 to 512 [ 500.121931][ T8643] capability: warning: `syz.3.1065' uses 32-bit capabilities (legacy support in use) [ 500.686421][ T5463] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 500.724480][ T8634] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1066: casefold flag without casefold feature [ 500.748532][ T8634] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1066: couldn't read orphan inode 15 (err -117) [ 500.764875][ T8634] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 501.081869][ T5463] usb 1-1: Using ep0 maxpacket: 16 [ 501.244327][ T5463] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.425236][ T5463] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 501.728300][ T5463] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.760881][ T5463] usb 1-1: config 0 descriptor?? [ 502.453618][ T5463] apple 0003:05AC:024B.0018: unknown main item tag 0x6 [ 502.460531][ T5463] apple 0003:05AC:024B.0018: unknown main item tag 0x1 [ 502.517807][ T5463] apple 0003:05AC:024B.0018: unknown main item tag 0xe [ 502.561383][ T5463] apple 0003:05AC:024B.0018: bogus close delimiter [ 502.597171][ T5463] apple 0003:05AC:024B.0018: item 0 0 2 10 parsing failed [ 502.634876][ T5463] apple 0003:05AC:024B.0018: parse failed [ 502.645621][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.652015][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.673791][ T5463] apple: probe of 0003:05AC:024B.0018 failed with error -22 [ 502.712715][ T5463] usb 1-1: USB disconnect, device number 11 [ 503.001400][ T8669] loop6: detected capacity change from 0 to 16 [ 503.113985][ T8669] erofs: Unknown parameter 'õ' [ 503.839048][ T8675] 9pnet: Insufficient options for proto=fd [ 504.204272][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 504.309723][ T8678] device syz_tun entered promiscuous mode [ 504.364440][ T8678] device syz_tun left promiscuous mode [ 504.776187][ T8665] loop5: detected capacity change from 0 to 40427 [ 504.865834][ T8665] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 504.892359][ T8665] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 504.925772][ T8665] F2FS-fs (loop5): invalid crc value [ 504.947528][ T8665] F2FS-fs (loop5): Found nat_bits in checkpoint [ 505.081102][ T8665] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 505.118794][ T8665] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 505.152044][ T5463] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 505.714394][ T5463] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.805553][ T5463] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.582739][ T5463] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.711841][ T26] audit: type=1800 audit(1733822654.417:75): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1074" name="file0" dev="loop5" ino=10 res=0 errno=0 [ 506.739709][ T5463] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.758527][ T5463] usb 7-1: SerialNumber: syz [ 507.014166][ T4690] attempt to access beyond end of device [ 507.014166][ T4690] loop5: rw=2049, want=45104, limit=40427 [ 507.346252][ T5463] usb 7-1: 0:2 : does not exist [ 507.832628][ T5463] usb 7-1: USB disconnect, device number 8 [ 508.250065][ T4159] udevd[4159]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 511.833590][ T8726] overlayfs: failed to resolve './file2': -2 [ 513.860712][ T8746] loop4: detected capacity change from 0 to 40427 [ 513.974152][ T8746] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 514.017456][ T8746] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 514.056481][ T8746] F2FS-fs (loop4): invalid crc value [ 514.100974][ T8746] F2FS-fs (loop4): Found nat_bits in checkpoint [ 514.972760][ T8746] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 514.979844][ T8746] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 517.282819][ T146] Bluetooth: hci2: sending frame failed (-49) [ 517.717692][ T8780] loop0: detected capacity change from 0 to 40427 [ 517.830660][ T8780] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 517.883037][ T8780] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 517.902429][ T8780] F2FS-fs (loop0): invalid crc value [ 517.948242][ T8780] F2FS-fs (loop0): Found nat_bits in checkpoint [ 518.078088][ T8780] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 518.093907][ T8780] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 518.465787][ T26] audit: type=1800 audit(1733822666.187:76): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1107" name="file0" dev="loop0" ino=10 res=0 errno=0 [ 519.043395][ T8799] overlayfs: failed to resolve './file2': -2 [ 519.522766][ T4158] Bluetooth: hci2: command 0x1003 tx timeout [ 519.761049][ T146] Bluetooth: hci2: sending frame failed (-49) [ 519.824095][ T8803] loop6: detected capacity change from 0 to 512 [ 520.162256][ T8803] EXT4-fs (loop6): Test dummy encryption mode enabled [ 520.299220][ T8803] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 520.553859][ T8803] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1111: inode #1: comm syz.6.1111: iget: illegal inode # [ 520.690709][ T8815] netlink: 'syz.5.1114': attribute type 29 has an invalid length. [ 520.702844][ T8803] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1111: error while reading EA inode 1 err=-117 [ 520.760855][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 520.803865][ T8803] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1111: inode #1: comm syz.6.1111: iget: illegal inode # [ 520.864026][ T8815] netlink: 'syz.5.1114': attribute type 29 has an invalid length. [ 520.904975][ T8803] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1111: error while reading EA inode 1 err=-117 [ 520.932602][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1114'. [ 520.994889][ T8803] EXT4-fs (loop6): 1 orphan inode deleted [ 521.052843][ T8803] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x000000000000023f,test_dummy_encryption,mblk_io_submit,,errors=continue. Quota mode: none. [ 521.234622][ T8819] loop5: detected capacity change from 0 to 256 [ 521.532978][ T8819] exfat: Deprecated parameter 'namecase' [ 521.811841][ T4158] Bluetooth: hci2: command 0x1001 tx timeout [ 521.820008][ T146] Bluetooth: hci2: sending frame failed (-49) [ 522.404220][ T8819] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 522.612159][ T4167] attempt to access beyond end of device [ 522.612159][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 523.590905][ T8832] loop3: detected capacity change from 0 to 512 [ 523.702831][ T8834] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.892128][ T6005] Bluetooth: hci2: command 0x1009 tx timeout [ 523.980392][ T8832] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1120: casefold flag without casefold feature [ 524.379000][ T8832] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1120: couldn't read orphan inode 15 (err -117) [ 524.482090][ T8829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1119'. [ 524.501762][ T8832] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 525.491787][ T5719] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 525.765983][ T8838] loop0: detected capacity change from 0 to 40427 [ 526.119503][ T8838] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 526.291046][ T8838] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 526.598842][ T8838] F2FS-fs (loop0): invalid crc value [ 526.615990][ T8838] F2FS-fs (loop0): Found nat_bits in checkpoint [ 526.631958][ T5719] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 526.661755][ T5719] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 526.670810][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.705149][ T5719] usb 6-1: config 0 descriptor?? [ 526.744230][ T5719] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 526.937577][ T8838] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 527.113428][ T8838] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 527.980907][ T8864] loop4: detected capacity change from 0 to 512 [ 528.128871][ T8865] xt_TCPMSS: Only works on TCP SYN packets [ 528.298202][ T8864] EXT4-fs (loop4): orphan cleanup on readonly fs [ 528.317531][ T8864] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1127: bg 0: block 248: padding at end of block bitmap is not set [ 528.340002][ T8864] Quota error (device loop4): write_blk: dquota write failed [ 528.348506][ T8864] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 528.358663][ T8864] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1127: Failed to acquire dquot type 1 [ 528.383066][ T8864] EXT4-fs (loop4): 1 truncate cleaned up [ 528.405892][ T8864] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 528.505338][ T8864] device pim6reg1 entered promiscuous mode [ 530.073550][ T23] usb 6-1: USB disconnect, device number 16 [ 530.871144][ T8871] loop5: detected capacity change from 0 to 256 [ 531.305736][ T8871] exfat: Deprecated parameter 'namecase' [ 531.501352][ T8871] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 532.507561][ T8889] loop3: detected capacity change from 0 to 512 [ 532.524961][ T26] audit: type=1326 audit(1733822680.247:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8886 comm="syz.0.1132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f01c5bf19 code=0x0 [ 532.747302][ T8889] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1133: casefold flag without casefold feature [ 532.940048][ T8897] loop6: detected capacity change from 0 to 1024 [ 532.948526][ T8889] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1133: couldn't read orphan inode 15 (err -117) [ 533.173798][ T8889] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 534.211220][ T8897] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.428178][ T26] audit: type=1804 audit(1733822682.147:78): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1135" name="/newroot/102/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 534.544394][ T8913] loop3: detected capacity change from 0 to 128 [ 534.685100][ T8916] loop6: detected capacity change from 0 to 256 [ 534.752608][ T8916] exfat: Deprecated parameter 'namecase' [ 534.819337][ T8916] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 535.028356][ T8918] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 535.177452][ T8921] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 535.788890][ T8902] loop0: detected capacity change from 0 to 40427 [ 535.976835][ T8902] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 536.030831][ T8902] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 536.077406][ T8902] F2FS-fs (loop0): invalid crc value [ 536.103536][ T8902] F2FS-fs (loop0): Found nat_bits in checkpoint [ 536.255443][ T8932] loop6: detected capacity change from 0 to 512 [ 536.322544][ T8902] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 536.330109][ T8902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 536.431593][ T8932] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1143: casefold flag without casefold feature [ 536.459329][ T8932] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1143: couldn't read orphan inode 15 (err -117) [ 536.477652][ T8932] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 538.855516][ T8951] loop6: detected capacity change from 0 to 8192 [ 541.267367][ T8964] overlayfs: failed to resolve './file2': -2 [ 541.559966][ T8969] loop3: detected capacity change from 0 to 512 [ 544.002332][ T8986] syz.6.1156[8986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.002438][ T8986] syz.6.1156[8986] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.762590][ T8969] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1151: casefold flag without casefold feature [ 544.810195][ T8969] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1151: couldn't read orphan inode 15 (err -117) [ 544.870026][ T8969] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 545.690013][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.697900][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.812060][ T9000] loop0: detected capacity change from 0 to 512 [ 545.862255][ T8998] device bridge_slave_1 left promiscuous mode [ 545.891633][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.950829][ T9000] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 545.961802][ T9000] EXT4-fs (loop0): Unrecognized mount option "seclabel" or missing value [ 546.003237][ T8998] device bridge_slave_0 left promiscuous mode [ 546.034007][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.143478][ T8989] loop5: detected capacity change from 0 to 40427 [ 547.271909][ T8989] F2FS-fs (loop5): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 547.280810][ T8989] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 547.294103][ T8989] F2FS-fs (loop5): invalid crc value [ 547.328136][ T8989] F2FS-fs (loop5): Found nat_bits in checkpoint [ 547.620234][ T8989] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 547.719955][ T8989] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 548.188342][ T9023] loop3: detected capacity change from 0 to 256 [ 548.347580][ T9023] FAT-fs (loop3): Directory bread(block 64) failed [ 548.355224][ T9026] loop6: detected capacity change from 0 to 256 [ 548.421778][ T26] audit: type=1800 audit(1733822696.137:79): pid=9027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1158" name="file0" dev="loop5" ino=10 res=0 errno=0 [ 548.481921][ T9023] FAT-fs (loop3): Directory bread(block 65) failed [ 548.493437][ T9026] exfat: Deprecated parameter 'namecase' [ 548.509595][ T9023] FAT-fs (loop3): Directory bread(block 66) failed [ 548.565600][ T9026] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 548.590646][ T9023] FAT-fs (loop3): Directory bread(block 67) failed [ 548.629530][ T9023] FAT-fs (loop3): Directory bread(block 68) failed [ 548.690443][ T9023] FAT-fs (loop3): Directory bread(block 69) failed [ 548.853885][ T9023] FAT-fs (loop3): Directory bread(block 70) failed [ 548.860451][ T9023] FAT-fs (loop3): Directory bread(block 71) failed [ 548.867516][ T9023] FAT-fs (loop3): Directory bread(block 72) failed [ 548.874269][ T9023] FAT-fs (loop3): Directory bread(block 73) failed [ 549.028147][ T4690] attempt to access beyond end of device [ 549.028147][ T4690] loop5: rw=2049, want=45104, limit=40427 [ 550.112963][ T9036] loop6: detected capacity change from 0 to 1024 [ 550.205264][ T4756] attempt to access beyond end of device [ 550.205264][ T4756] loop3: rw=1048577, want=1832, limit=256 [ 550.242783][ T9036] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 550.323612][ T4756] attempt to access beyond end of device [ 550.323612][ T4756] loop3: rw=1, want=1936, limit=256 [ 550.410938][ T9023] attempt to access beyond end of device [ 550.410938][ T9023] loop3: rw=2049, want=1288, limit=256 [ 550.450284][ T9023] Buffer I/O error on dev loop3, logical block 321, lost async page write [ 553.832540][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 554.374561][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.394426][ T23] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.591877][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.600965][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.635261][ T23] usb 4-1: Product: syz [ 554.639587][ T23] usb 4-1: Manufacturer: syz [ 554.647166][ T23] usb 4-1: SerialNumber: syz [ 554.891816][ T1107] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 555.134967][ T9085] loop4: detected capacity change from 0 to 512 [ 555.352724][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.375159][ T9085] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1184: casefold flag without casefold feature [ 555.391845][ T1107] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 555.401222][ T9085] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1184: couldn't read orphan inode 15 (err -117) [ 555.401381][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.518193][ T9085] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 555.892246][ T1107] usb 7-1: config 0 descriptor?? [ 556.121965][ T23] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 556.161997][ T23] cdc_ncm 4-1:1.0: bind() failure [ 556.452011][ T23] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 556.458829][ T23] cdc_ncm 4-1:1.1: bind() failure [ 556.546124][ T23] usb 4-1: USB disconnect, device number 14 [ 556.813312][ T1107] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 556.866245][ T1107] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0019/input/input18 [ 557.022594][ T1107] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 557.052917][ T9108] overlayfs: failed to get inode (-116) [ 557.070335][ T9108] overlayfs: failed to get inode (-116) [ 558.889503][ T5719] usb 7-1: USB disconnect, device number 9 [ 559.472470][ T6005] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 559.549714][ T9136] loop5: detected capacity change from 0 to 256 [ 559.712890][ T9136] exfat: Deprecated parameter 'namecase' [ 559.905543][ T9136] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 559.918381][ T6005] usb 1-1: Using ep0 maxpacket: 16 [ 560.481877][ T6005] usb 1-1: unable to read config index 0 descriptor/all [ 560.489025][ T6005] usb 1-1: can't read configurations, error -71 [ 561.641142][ T9144] loop0: detected capacity change from 0 to 512 [ 562.033620][ T9144] EXT4-fs (loop0): Test dummy encryption mode enabled [ 562.070361][ T9144] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 562.129586][ T9144] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1200: inode #1: comm syz.0.1200: iget: illegal inode # [ 562.162527][ T9144] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1200: error while reading EA inode 1 err=-117 [ 562.205829][ T9148] overlayfs: failed to get inode (-116) [ 562.211567][ T9148] overlayfs: failed to get inode (-116) [ 562.232246][ T9144] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1200: inode #1: comm syz.0.1200: iget: illegal inode # [ 562.309510][ T9144] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1200: error while reading EA inode 1 err=-117 [ 562.522777][ T9144] EXT4-fs (loop0): 1 orphan inode deleted [ 562.528553][ T9144] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x000000000000023f,test_dummy_encryption,mblk_io_submit,,errors=continue. Quota mode: none. [ 562.862722][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.872262][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.411163][ T9174] overlayfs: failed to resolve './file2': -2 [ 565.491893][ T1107] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 565.742417][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 565.861982][ T1107] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.111769][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 566.120840][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.192735][ T9177] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 566.221979][ T1107] usb 5-1: Product: syz [ 566.268418][ T1107] usb 5-1: Manufacturer: syz [ 566.284524][ T1107] usb 5-1: SerialNumber: syz [ 566.322550][ T1107] usb 5-1: config 0 descriptor?? [ 566.552937][ T9187] overlayfs: failed to get inode (-116) [ 566.569922][ T9187] overlayfs: failed to get inode (-116) [ 566.831923][ T1107] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 566.846320][ T1107] usb 5-1: No valid video chain found. [ 567.449516][ T6005] usb 5-1: USB disconnect, device number 18 [ 568.085812][ T9185] loop5: detected capacity change from 0 to 40427 [ 568.257424][ T9185] F2FS-fs (loop5): invalid crc value [ 568.836970][ T9185] F2FS-fs (loop5): Found nat_bits in checkpoint [ 569.275579][ T9185] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 569.345427][ T9211] loop6: detected capacity change from 0 to 512 [ 569.676624][ T9211] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1218: casefold flag without casefold feature [ 569.750629][ T9211] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1218: couldn't read orphan inode 15 (err -117) [ 569.778480][ T9211] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 570.324580][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 570.333914][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 570.351694][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 570.360657][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 570.369531][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 570.378482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 570.387359][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 570.396329][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 570.405382][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 570.414347][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 572.005957][ T9223] overlayfs: failed to resolve './file2': -2 [ 572.167104][ T9234] overlayfs: failed to get inode (-116) [ 572.189385][ T9234] overlayfs: failed to get inode (-116) [ 574.141943][ T9244] loop3: detected capacity change from 0 to 512 [ 574.344264][ T9244] EXT4-fs (loop3): orphan cleanup on readonly fs [ 574.361639][ T9244] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1226: bg 0: block 248: padding at end of block bitmap is not set [ 574.382079][ T9244] Quota error (device loop3): write_blk: dquota write failed [ 574.389852][ T9244] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 574.400107][ T9244] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1226: Failed to acquire dquot type 1 [ 574.416697][ T9244] EXT4-fs (loop3): 1 truncate cleaned up [ 574.430768][ T9244] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 577.941447][ T9255] loop0: detected capacity change from 0 to 256 [ 578.006110][ T4690] attempt to access beyond end of device [ 578.006110][ T4690] loop5: rw=2049, want=45104, limit=40427 [ 578.083927][ T9255] exfat: Deprecated parameter 'namecase' [ 578.569986][ T9255] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 578.609472][ T9260] loop6: detected capacity change from 0 to 512 [ 578.882801][ T9260] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 579.992350][ T9260] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.936620][ T9274] overlayfs: failed to get inode (-116) [ 581.024233][ T9274] overlayfs: failed to get inode (-116) [ 581.030106][ T9276] loop5: detected capacity change from 0 to 512 [ 581.142521][ T9278] loop3: detected capacity change from 0 to 256 [ 581.158804][ T9276] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1231: casefold flag without casefold feature [ 581.345167][ T9276] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1231: couldn't read orphan inode 15 (err -117) [ 581.418615][ T9276] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 582.023839][ T9278] exfat: Unknown parameter 'sys_tz' [ 583.072017][ T23] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 583.201601][ T9296] loop3: detected capacity change from 0 to 8192 [ 583.491800][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 584.872001][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.907323][ T23] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 584.936735][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.011406][ T23] usb 7-1: config 0 descriptor?? [ 585.533795][ T23] apple 0003:05AC:024B.001A: unknown main item tag 0x6 [ 585.540715][ T23] apple 0003:05AC:024B.001A: unknown main item tag 0x1 [ 585.598577][ T23] apple 0003:05AC:024B.001A: unknown main item tag 0xe [ 585.636353][ T23] apple 0003:05AC:024B.001A: bogus close delimiter [ 585.671692][ T23] apple 0003:05AC:024B.001A: item 0 0 2 10 parsing failed [ 585.720096][ T23] apple 0003:05AC:024B.001A: parse failed [ 585.761175][ T23] apple: probe of 0003:05AC:024B.001A failed with error -22 [ 585.811717][ T23] usb 7-1: USB disconnect, device number 10 [ 585.927974][ T9302] loop4: detected capacity change from 0 to 40427 [ 586.019656][ T9302] F2FS-fs (loop4): invalid crc value [ 586.057020][ T9302] F2FS-fs (loop4): Found nat_bits in checkpoint [ 586.166930][ T9316] loop3: detected capacity change from 0 to 512 [ 586.629109][ T9316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 586.653722][ T9316] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1244: bg 0: block 248: padding at end of block bitmap is not set [ 586.671320][ T9316] Quota error (device loop3): write_blk: dquota write failed [ 586.679243][ T9316] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 586.689431][ T9316] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.1244: Failed to acquire dquot type 1 [ 586.708835][ T9316] EXT4-fs (loop3): 1 truncate cleaned up [ 586.728984][ T9316] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 587.171464][ T9319] loop6: detected capacity change from 0 to 256 [ 587.289532][ T9319] exfat: Deprecated parameter 'namecase' [ 587.380154][ T9319] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 589.880980][ T9339] loop5: detected capacity change from 0 to 512 [ 590.027871][ T9339] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1250: casefold flag without casefold feature [ 590.048416][ T9346] loop6: detected capacity change from 0 to 512 [ 590.082054][ T9339] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1250: couldn't read orphan inode 15 (err -117) [ 590.153934][ T9339] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 590.192339][ T9346] EXT4-fs (loop6): Unrecognized mount option "fsname=]" or missing value [ 590.240179][ T9324] loop4: detected capacity change from 0 to 40427 [ 590.409184][ T9324] F2FS-fs (loop4): Found nat_bits in checkpoint [ 591.511097][ T9324] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 591.610636][ T9360] loop3: detected capacity change from 0 to 512 [ 591.653060][ T9324] attempt to access beyond end of device [ 591.653060][ T9324] loop4: rw=2049, want=45104, limit=40427 [ 591.838923][ T4176] attempt to access beyond end of device [ 591.838923][ T4176] loop4: rw=2049, want=45112, limit=40427 [ 592.986252][ T9369] loop4: detected capacity change from 0 to 256 [ 593.082708][ T9369] exfat: Deprecated parameter 'namecase' [ 593.145666][ T9369] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 593.167025][ T9365] loop5: detected capacity change from 0 to 40427 [ 593.730086][ T9365] F2FS-fs (loop5): invalid crc value [ 593.858172][ T9365] F2FS-fs (loop5): Found nat_bits in checkpoint [ 594.678224][ T9365] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 596.055847][ T9402] loop6: detected capacity change from 0 to 512 [ 596.186675][ T9402] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1266: casefold flag without casefold feature [ 596.217882][ T9402] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1266: couldn't read orphan inode 15 (err -117) [ 596.233850][ T9402] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 598.190256][ T9418] loop3: detected capacity change from 0 to 512 [ 598.573106][ T9418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 598.636440][ T9418] EXT4-fs (loop3): 1 truncate cleaned up [ 598.648695][ T9418] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 601.549848][ T9433] loop0: detected capacity change from 0 to 40427 [ 601.715679][ T9433] F2FS-fs (loop0): invalid crc value [ 601.752906][ T9433] F2FS-fs (loop0): Found nat_bits in checkpoint [ 601.802139][ T1107] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 601.851929][ T9433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 602.052899][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 602.630095][ T9460] loop3: detected capacity change from 0 to 256 [ 602.693875][ T9460] exfat: Deprecated parameter 'namecase' [ 602.740607][ T9460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 602.846485][ T4167] attempt to access beyond end of device [ 602.846485][ T4167] loop0: rw=2049, want=45104, limit=40427 [ 602.872911][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.894197][ T1107] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 602.911708][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.022528][ T1107] usb 5-1: config 0 descriptor?? [ 603.863500][ T1107] apple 0003:05AC:024B.001B: unknown main item tag 0x6 [ 603.870411][ T1107] apple 0003:05AC:024B.001B: unknown main item tag 0x1 [ 603.906206][ T1107] apple 0003:05AC:024B.001B: unknown main item tag 0xe [ 603.942926][ T1107] apple 0003:05AC:024B.001B: bogus close delimiter [ 603.949471][ T1107] apple 0003:05AC:024B.001B: item 0 0 2 10 parsing failed [ 603.979613][ T1107] apple 0003:05AC:024B.001B: parse failed [ 604.001773][ T1107] apple: probe of 0003:05AC:024B.001B failed with error -22 [ 604.066206][ T4158] usb 5-1: USB disconnect, device number 19 [ 604.460022][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 604.473938][ T9477] device syz_tun entered promiscuous mode [ 604.492861][ T9477] device syz_tun left promiscuous mode [ 605.668532][ T9489] loop0: detected capacity change from 0 to 512 [ 605.814563][ T9493] loop5: detected capacity change from 0 to 256 [ 609.979463][ T9493] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 610.198331][ T9497] loop4: detected capacity change from 0 to 256 [ 610.296072][ T9497] exfat: Deprecated parameter 'namecase' [ 610.318594][ T9489] EXT4-fs: failed to create workqueue [ 610.324074][ T9489] EXT4-fs (loop0): mount failed [ 610.342178][ T9497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 614.213743][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1305'. [ 614.240987][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1305'. [ 614.297466][ T4274] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 614.483101][ T9545] overlayfs: failed to resolve './file2': -2 [ 614.572454][ T4274] usb 6-1: Using ep0 maxpacket: 16 [ 614.702420][ T4274] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 614.740531][ T4274] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 614.756707][ T4274] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.833694][ T4274] usb 6-1: config 0 descriptor?? [ 615.293265][ T9552] chnl_net:caif_netlink_parms(): no params data found [ 615.307965][ T9560] loop0: detected capacity change from 0 to 256 [ 615.343655][ T4274] apple 0003:05AC:024B.001C: unknown main item tag 0x6 [ 615.350575][ T4274] apple 0003:05AC:024B.001C: unknown main item tag 0x1 [ 615.374100][ T4274] apple 0003:05AC:024B.001C: unknown main item tag 0xe [ 615.394015][ T4274] apple 0003:05AC:024B.001C: bogus close delimiter [ 615.400552][ T4274] apple 0003:05AC:024B.001C: item 0 0 2 10 parsing failed [ 615.452232][ T4274] apple 0003:05AC:024B.001C: parse failed [ 615.486496][ T4274] apple: probe of 0003:05AC:024B.001C failed with error -22 [ 615.558213][ T4274] usb 6-1: USB disconnect, device number 17 [ 616.298928][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.336831][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.374761][ T9552] device bridge_slave_0 entered promiscuous mode [ 616.438283][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.513359][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.604888][ T9552] device bridge_slave_1 entered promiscuous mode [ 616.740128][ T9579] loop0: detected capacity change from 0 to 512 [ 616.816110][ T9552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.841935][ T4817] Bluetooth: hci2: command 0x0409 tx timeout [ 617.148776][ T9579] EXT4-fs (loop0): Test dummy encryption mode enabled [ 617.222035][ T9552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.260790][ T9579] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 617.554289][ T9579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1313: inode #1: comm syz.0.1313: iget: illegal inode # [ 617.614032][ T9579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1313: error while reading EA inode 1 err=-117 [ 617.654978][ T9579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.1313: inode #1: comm syz.0.1313: iget: illegal inode # [ 617.668801][ T9579] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1313: error while reading EA inode 1 err=-117 [ 617.692380][ T9579] EXT4-fs (loop0): 1 orphan inode deleted [ 617.698270][ T9579] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000001,debug_want_extra_isize=0x000000000000005c,minixdf,max_batch_time=0x000000000000023f,test_dummy_encryption,mblk_io_submit,,errors=continue. Quota mode: none. [ 617.704835][ T9552] team0: Port device team_slave_0 added [ 617.890474][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1316'. [ 617.943083][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1316'. [ 617.950012][ T9552] team0: Port device team_slave_1 added [ 618.921796][ T4817] Bluetooth: hci2: command 0x041b tx timeout [ 619.080425][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.101686][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.128189][ T9552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.141316][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.159299][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.320493][ T9552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.944843][ T9552] device hsr_slave_0 entered promiscuous mode [ 619.965863][ T9552] device hsr_slave_1 entered promiscuous mode [ 620.021197][ T9552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.071887][ T9552] Cannot create hsr debugfs directory [ 620.351835][ T4817] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 620.582759][ T9552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 620.591801][ T4817] usb 4-1: Using ep0 maxpacket: 16 [ 620.609042][ T9552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 620.628812][ T9552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 620.671472][ T9552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 620.711958][ T4817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.733604][ T4817] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 620.763855][ T4817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.795955][ T4817] usb 4-1: config 0 descriptor?? [ 620.899585][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.931106][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 620.958377][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 620.987120][ T9552] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.001920][ T5709] Bluetooth: hci2: command 0x040f tx timeout [ 621.006585][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.042089][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.072054][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.079150][ T4255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.132343][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 621.190539][ T9610] ODEBUG: Out of memory. ODEBUG disabled [ 621.190594][ T9610] [ 621.190600][ T9610] ====================================================== [ 621.190606][ T9610] WARNING: possible circular locking dependency detected [ 621.190613][ T9610] 5.15.173-syzkaller #0 Not tainted [ 621.190625][ T9610] ------------------------------------------------------ [ 621.190637][ T9610] syz.4.1323/9610 is trying to acquire lock: [ 621.190649][ T9610] ffffffff8c9fc4b8 ((console_sem).lock){-...}-{2:2}, at: down_trylock+0x1c/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 621.190705][ T9610] [ 621.190705][ T9610] but task is already holding lock: [ 621.190711][ T9610] ffff888057fd7db8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 621.190755][ T9610] [ 621.190755][ T9610] which lock already depends on the new lock. [ 621.190755][ T9610] [ 621.190760][ T9610] [ 621.190760][ T9610] the existing dependency chain (in reverse order) is: [ 621.190766][ T9610] [ 621.190766][ T9610] -> #3 (&trie->lock){..-.}-{2:2}: [ 621.190789][ T9610] lock_acquire+0x1db/0x4f0 [ 621.190807][ T9610] _raw_spin_lock_irqsave+0xd1/0x120 [ 621.190828][ T9610] trie_delete_elem+0x90/0x690 [ 621.190848][ T9610] 0xffffffffa006884a [ 621.190860][ T9610] bpf_trace_run3+0x1d1/0x380 [ 621.190879][ T9610] __traceiter_sched_switch+0x7d/0xb0 [ 621.190899][ T9610] __schedule+0x1e8d/0x45b0 [ 621.190915][ T9610] schedule+0x11b/0x1f0 [ 621.190930][ T9610] exit_to_user_mode_loop+0x44/0x130 [ 621.190948][ T9610] exit_to_user_mode_prepare+0xb1/0x140 [ 621.190966][ T9610] syscall_exit_to_user_mode+0x5d/0x240 [ 621.190985][ T9610] do_syscall_64+0x47/0xb0 [ 621.191001][ T9610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.191027][ T9610] [ 621.191027][ T9610] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 621.191052][ T9610] lock_acquire+0x1db/0x4f0 [ 621.191068][ T9610] _raw_spin_lock_nested+0x2d/0x40 [ 621.191087][ T9610] raw_spin_rq_lock_nested+0x26/0x140 [ 621.191107][ T9610] task_fork_fair+0x5d/0x350 [ 621.191123][ T9610] sched_cgroup_fork+0x2d3/0x330 [ 621.191143][ T9610] copy_process+0x224a/0x3ef0 [ 621.191160][ T9610] kernel_clone+0x210/0x960 [ 621.191176][ T9610] kernel_thread+0x168/0x1e0 [ 621.191192][ T9610] rest_init+0x21/0x330 [ 621.191209][ T9610] start_kernel+0x48c/0x540 [ 621.191228][ T9610] secondary_startup_64_no_verify+0xb1/0xbb [ 621.191249][ T9610] [ 621.191249][ T9610] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 621.191272][ T9610] lock_acquire+0x1db/0x4f0 [ 621.191288][ T9610] _raw_spin_lock_irqsave+0xd1/0x120 [ 621.191307][ T9610] try_to_wake_up+0xae/0x1300 [ 621.191326][ T9610] up+0x6e/0x90 [ 621.191342][ T9610] __up_console_sem+0x11a/0x1e0 [ 621.191359][ T9610] console_unlock+0x1145/0x12b0 [ 621.191376][ T9610] vprintk_emit+0xbf/0x150 [ 621.191404][ T9610] _printk+0xd1/0x120 [ 621.191420][ T9610] __ext4_error_inode+0x488/0x4e0 [ 621.191440][ T9610] __ext4_iget+0x2c67/0x3f00 [ 621.191456][ T9610] ext4_orphan_get+0x1d4/0x5f0 [ 621.191474][ T9610] ext4_orphan_cleanup+0x88b/0x1240 [ 621.191494][ T9610] ext4_fill_super+0x98de/0xa110 [ 621.191509][ T9610] mount_bdev+0x2c9/0x3f0 [ 621.191524][ T9610] legacy_get_tree+0xeb/0x180 [ 621.191540][ T9610] vfs_get_tree+0x88/0x270 [ 621.191554][ T9610] do_new_mount+0x2ba/0xb40 [ 621.191569][ T9610] __se_sys_mount+0x2d5/0x3c0 [ 621.191584][ T9610] do_syscall_64+0x3b/0xb0 [ 621.191599][ T9610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.191619][ T9610] [ 621.191619][ T9610] -> #0 ((console_sem).lock){-...}-{2:2}: [ 621.191647][ T9610] validate_chain+0x1649/0x5930 [ 621.191680][ T9610] __lock_acquire+0x1295/0x1ff0 [ 621.191696][ T9610] lock_acquire+0x1db/0x4f0 [ 621.191712][ T9610] _raw_spin_lock_irqsave+0xd1/0x120 [ 621.191731][ T9610] down_trylock+0x1c/0xa0 [ 621.191750][ T9610] __down_trylock_console_sem+0x105/0x250 [ 621.191768][ T9610] console_trylock_spinning+0x8a/0x3f0 [ 621.191793][ T9610] vprintk_emit+0xa6/0x150 [ 621.191810][ T9610] _printk+0xd1/0x120 [ 621.191827][ T9610] debug_objects_oom+0xb4/0x370 [ 621.191848][ T9610] debug_object_activate+0x42d/0x4e0 [ 621.191868][ T9610] kvfree_call_rcu+0xb6/0x8a0 [ 621.191886][ T9610] trie_update_elem+0x808/0xc00 [ 621.191906][ T9610] bpf_map_update_value+0x5d7/0x6c0 [ 621.191927][ T9610] generic_map_update_batch+0x54d/0x8b0 [ 621.191947][ T9610] bpf_map_do_batch+0x4d0/0x620 [ 621.191963][ T9610] __sys_bpf+0x55c/0x670 [ 621.191982][ T9610] __x64_sys_bpf+0x78/0x90 [ 621.192000][ T9610] do_syscall_64+0x3b/0xb0 [ 621.192016][ T9610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.192038][ T9610] [ 621.192038][ T9610] other info that might help us debug this: [ 621.192038][ T9610] [ 621.192043][ T9610] Chain exists of: [ 621.192043][ T9610] (console_sem).lock --> &rq->__lock --> &trie->lock [ 621.192043][ T9610] [ 621.192072][ T9610] Possible unsafe locking scenario: [ 621.192072][ T9610] [ 621.192076][ T9610] CPU0 CPU1 [ 621.192081][ T9610] ---- ---- [ 621.192086][ T9610] lock(&trie->lock); [ 621.192097][ T9610] lock(&rq->__lock); [ 621.192109][ T9610] lock(&trie->lock); [ 621.192121][ T9610] lock((console_sem).lock); [ 621.192132][ T9610] [ 621.192132][ T9610] *** DEADLOCK *** [ 621.192132][ T9610] [ 621.192135][ T9610] 2 locks held by syz.4.1323/9610: [ 621.192146][ T9610] #0: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 621.192193][ T9610] #1: ffff888057fd7db8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 621.192239][ T9610] [ 621.192239][ T9610] stack backtrace: [ 621.192244][ T9610] CPU: 0 PID: 9610 Comm: syz.4.1323 Not tainted 5.15.173-syzkaller #0 [ 621.192275][ T9610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 621.192287][ T9610] Call Trace: [ 621.192292][ T9610] [ 621.192299][ T9610] dump_stack_lvl+0x1e3/0x2d0 [ 621.192324][ T9610] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 621.192352][ T9610] ? print_circular_bug+0x12b/0x1a0 [ 621.192372][ T9610] check_noncircular+0x2f8/0x3b0 [ 621.192391][ T9610] ? reacquire_held_locks+0x660/0x660 [ 621.192413][ T9610] ? add_chain_block+0x850/0x850 [ 621.192433][ T9610] ? lockdep_lock+0x11f/0x2a0 [ 621.192454][ T9610] ? mark_lock+0x98/0x340 [ 621.192471][ T9610] ? _find_first_zero_bit+0xcf/0xf0 [ 621.192494][ T9610] validate_chain+0x1649/0x5930 [ 621.192524][ T9610] ? reacquire_held_locks+0x660/0x660 [ 621.192543][ T9610] ? data_push_tail+0x693/0x700 [ 621.192567][ T9610] ? desc_read+0x3d0/0x3d0 [ 621.192587][ T9610] ? unwind_next_frame+0x1437/0x1fa0 [ 621.192609][ T9610] ? reacquire_held_locks+0x660/0x660 [ 621.192641][ T9610] ? mark_lock+0x98/0x340 [ 621.192661][ T9610] __lock_acquire+0x1295/0x1ff0 [ 621.192687][ T9610] lock_acquire+0x1db/0x4f0 [ 621.192704][ T9610] ? down_trylock+0x1c/0xa0 [ 621.192725][ T9610] ? vsnprintf+0x1c70/0x1c70 [ 621.192747][ T9610] ? read_lock_is_recursive+0x10/0x10 [ 621.192766][ T9610] ? memcpy+0x3c/0x60 [ 621.192784][ T9610] ? vsnprintf+0x1b93/0x1c70 [ 621.192806][ T9610] ? _prb_commit+0x30a/0x3e0 [ 621.192828][ T9610] ? prb_reserve+0x1240/0x1240 [ 621.192849][ T9610] _raw_spin_lock_irqsave+0xd1/0x120 [ 621.192870][ T9610] ? down_trylock+0x1c/0xa0 [ 621.192891][ T9610] ? _raw_spin_lock+0x40/0x40 [ 621.192913][ T9610] ? vprintk_store+0xf1b/0x1300 [ 621.192933][ T9610] down_trylock+0x1c/0xa0 [ 621.192955][ T9610] __down_trylock_console_sem+0x105/0x250 [ 621.192975][ T9610] ? printk_parse_prefix+0x2c0/0x2c0 [ 621.192993][ T9610] ? vprintk_emit+0xa6/0x150 [ 621.193012][ T9610] ? console_trylock+0x70/0x70 [ 621.193033][ T9610] ? is_bpf_text_address+0x24f/0x260 [ 621.193055][ T9610] ? vprintk_emit+0xa6/0x150 [ 621.193072][ T9610] console_trylock_spinning+0x8a/0x3f0 [ 621.193093][ T9610] ? vprintk_emit+0x150/0x150 [ 621.193112][ T9610] ? __lock_acquire+0x1295/0x1ff0 [ 621.193135][ T9610] vprintk_emit+0xa6/0x150 [ 621.193155][ T9610] _printk+0xd1/0x120 [ 621.193176][ T9610] ? panic+0x860/0x860 [ 621.193213][ T9610] ? do_raw_spin_lock+0x14a/0x370 [ 621.193234][ T9610] ? __lock_acquire+0x1ff0/0x1ff0 [ 621.193257][ T9610] debug_objects_oom+0xb4/0x370 [ 621.193283][ T9610] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 621.193306][ T9610] ? debug_object_activate+0x4e0/0x4e0 [ 621.193334][ T9610] debug_object_activate+0x42d/0x4e0 [ 621.193359][ T9610] kvfree_call_rcu+0xb6/0x8a0 [ 621.193382][ T9610] ? call_rcu+0xa70/0xa70 [ 621.193399][ T9610] ? __kmalloc_node+0x199/0x390 [ 621.193420][ T9610] ? bpf_map_kmalloc_node+0xdb/0x160 [ 621.193442][ T9610] ? _raw_spin_lock+0x40/0x40 [ 621.193463][ T9610] ? longest_prefix_match+0x2db/0x640 [ 621.193490][ T9610] trie_update_elem+0x808/0xc00 [ 621.193523][ T9610] bpf_map_update_value+0x5d7/0x6c0 [ 621.193549][ T9610] generic_map_update_batch+0x54d/0x8b0 [ 621.193578][ T9610] ? rcu_read_unlock+0x90/0x90 [ 621.193601][ T9610] ? __fdget+0x191/0x220 [ 621.193622][ T9610] ? rcu_read_unlock+0x90/0x90 [ 621.193651][ T9610] bpf_map_do_batch+0x4d0/0x620 [ 621.193672][ T9610] __sys_bpf+0x55c/0x670 [ 621.193696][ T9610] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 621.193728][ T9610] ? syscall_enter_from_user_mode+0x2e/0x240 [ 621.193749][ T9610] ? lockdep_hardirqs_on+0x94/0x130 [ 621.193771][ T9610] __x64_sys_bpf+0x78/0x90 [ 621.193793][ T9610] do_syscall_64+0x3b/0xb0 [ 621.193810][ T9610] ? clear_bhb_loop+0x15/0x70 [ 621.193834][ T9610] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.193857][ T9610] RIP: 0033:0x7f72d17f9f19 [ 621.193875][ T9610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 621.193893][ T9610] RSP: 002b:00007f72cf670058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 621.193913][ T9610] RAX: ffffffffffffffda RBX: 00007f72d19bffa0 RCX: 00007f72d17f9f19 [ 621.193929][ T9610] RDX: 0000000000000038 RSI: 0000000020000640 RDI: 000000000000001a [ 621.193942][ T9610] RBP: 00007f72d186dcc8 R08: 0000000000000000 R09: 0000000000000000 [ 621.193955][ T9610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 621.193966][ T9610] R13: 0000000000000000 R14: 00007f72d19bffa0 R15: 00007fff8437fc28 [ 621.193987][ T9610] [ 621.213466][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 621.302040][ T4817] apple 0003:05AC:024B.001D: unknown main item tag 0x6 [ 621.356962][ T9618] loop0: detected capacity change from 0 to 256 [ 621.511713][ T4817] apple 0003:05AC:024B.001D: unknown main item tag 0x1 [ 621.683255][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.001719][ T4817] apple 0003:05AC:024B.001D: unknown main item tag 0xe [ 622.472643][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.479722][ T5777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.481767][ T4817] apple 0003:05AC:024B.001D: bogus close delimiter [ 622.501738][ T4817] apple 0003:05AC:024B.001D: item 0 0 2 10 parsing failed [ 622.504650][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.509190][ T4817] apple 0003:05AC:024B.001D: parse failed [ 622.535176][ T5777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.541758][ T4817] apple: probe of 0003:05AC:024B.001D failed with error -22 [ 623.264202][ T6005] usb 4-1: USB disconnect, device number 15 [ 623.371682][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.468299][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.506399][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.556948][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.679615][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.755416][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.795367][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.846113][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.929714][ T154] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.989287][ T154] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.036593][ T154] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.075829][ T154] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.124324][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.130666][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.324187][ T154] device hsr_slave_0 left promiscuous mode [ 625.330860][ T154] device hsr_slave_1 left promiscuous mode [ 625.339855][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.348096][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.356459][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.364142][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.373615][ T154] device hsr_slave_0 left promiscuous mode [ 625.379739][ T154] device hsr_slave_1 left promiscuous mode [ 625.386035][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.393998][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.401567][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.409277][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.417220][ T154] device bridge_slave_1 left promiscuous mode [ 625.423385][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.431189][ T154] device bridge_slave_0 left promiscuous mode [ 625.437517][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.447652][ T154] device hsr_slave_0 left promiscuous mode [ 625.455558][ T154] device hsr_slave_1 left promiscuous mode [ 625.462139][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.469551][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.477219][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.484694][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.492303][ T154] device bridge_slave_1 left promiscuous mode [ 625.498445][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.506369][ T154] device bridge_slave_0 left promiscuous mode [ 625.512641][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.525729][ T154] device veth1_macvtap left promiscuous mode [ 625.531811][ T154] device veth0_macvtap left promiscuous mode [ 625.537829][ T154] device veth1_vlan left promiscuous mode [ 625.544259][ T154] device veth1_macvtap left promiscuous mode [ 625.550250][ T154] device veth0_macvtap left promiscuous mode [ 625.556610][ T154] device veth1_vlan left promiscuous mode [ 625.564062][ T154] device veth0_vlan left promiscuous mode [ 625.570860][ T154] device veth1_macvtap left promiscuous mode [ 625.576921][ T154] device veth0_macvtap left promiscuous mode [ 625.583075][ T154] device veth1_vlan left promiscuous mode [ 625.588824][ T154] device veth0_vlan left promiscuous mode [ 625.776171][ T154] team0 (unregistering): Port device team_slave_1 removed [ 625.788396][ T154] team0 (unregistering): Port device team_slave_0 removed [ 625.800615][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.812436][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.857817][ T154] bond0 (unregistering): Released all slaves [ 625.909169][ T154] team0 (unregistering): Port device team_slave_1 removed [ 625.919727][ T154] team0 (unregistering): Port device team_slave_0 removed [ 625.930066][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.943128][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.987379][ T154] bond0 (unregistering): Released all slaves [ 626.055708][ T154] team0 (unregistering): Port device team_slave_1 removed [ 626.065820][ T154] team0 (unregistering): Port device team_slave_0 removed [ 626.078443][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.090266][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.136080][ T154] bond0 (unregistering): Released all slaves [ 627.537617][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.605335][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.646442][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.697951][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.840480][ T154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.895298][ T154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.936497][ T154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.985777][ T154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.139322][ T154] device hsr_slave_0 left promiscuous mode [ 629.145837][ T154] device hsr_slave_1 left promiscuous mode [ 629.154280][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.162039][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.169705][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.180423][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.188405][ T154] device bridge_slave_1 left promiscuous mode [ 629.196174][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.204531][ T154] device bridge_slave_0 left promiscuous mode [ 629.210727][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.223040][ T154] device hsr_slave_0 left promiscuous mode [ 629.229301][ T154] device hsr_slave_1 left promiscuous mode [ 629.237783][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.245605][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.253471][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.260857][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.268549][ T154] device bridge_slave_1 left promiscuous mode [ 629.275039][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.283413][ T154] device bridge_slave_0 left promiscuous mode [ 629.289521][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.299574][ T154] device hsr_slave_0 left promiscuous mode [ 629.305856][ T154] device hsr_slave_1 left promiscuous mode [ 629.312439][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.319841][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.327489][ T154] device bridge_slave_1 left promiscuous mode [ 629.333670][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.342070][ T154] device bridge_slave_0 left promiscuous mode [ 629.348188][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.359653][ T154] device veth1_macvtap left promiscuous mode [ 629.365706][ T154] device veth0_macvtap left promiscuous mode [ 629.372035][ T154] device veth1_vlan left promiscuous mode [ 629.377785][ T154] device veth0_vlan left promiscuous mode [ 629.384263][ T154] device veth1_macvtap left promiscuous mode [ 629.390250][ T154] device veth0_macvtap left promiscuous mode [ 629.396566][ T154] device veth1_vlan left promiscuous mode [ 629.402717][ T154] device veth0_vlan left promiscuous mode [ 629.550251][ T154] team0 (unregistering): Port device team_slave_1 removed [ 629.560686][ T154] team0 (unregistering): Port device team_slave_0 removed [ 629.573790][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.585240][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.628526][ T154] bond0 (unregistering): Released all slaves [ 629.699367][ T154] team0 (unregistering): Port device team_slave_1 removed [ 629.709537][ T154] team0 (unregistering): Port device team_slave_0 removed [ 629.720019][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.731475][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.774476][ T154] bond0 (unregistering): Released all slaves [ 629.865954][ T154] team0 (unregistering): Port device team_slave_1 removed [ 629.875981][ T154] team0 (unregistering): Port device team_slave_0 removed [ 629.887771][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.899536][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.940764][ T154] bond0 (unregistering): Released all slaves