last executing test programs: 13.21160447s ago: executing program 2 (id=3764): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000084c05e60c000000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="000090"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="20013f"], 0x0}) 8.037110868s ago: executing program 2 (id=3787): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r2, &(0x7f0000000100)={0x38}, 0x38, 0x0) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = socket(0xa, 0x3, 0x6) getsockopt$nfc_llcp(r5, 0x29, 0x24, 0x0, 0x20000011) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(r6, &(0x7f0000000140), 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000100)=""/71) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f5459"}}]}, 0x150}}, 0x0) 5.649020739s ago: executing program 2 (id=3794): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 4.637079662s ago: executing program 2 (id=3799): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.636868312s ago: executing program 3 (id=3800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x2009, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0) 4.165359965s ago: executing program 4 (id=3803): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000500)="1dd3071f4234371758683a62e88cc6ec85ff498f7e8ff7ad216f828a61ace81fbc"}, 0x20) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.657561672s ago: executing program 2 (id=3804): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070d00be0083"], 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) 3.430860533s ago: executing program 1 (id=3805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) lseek(r0, 0x1000000000000800, 0x0) 3.378812308s ago: executing program 1 (id=3806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x1, 0x2, 0x0, 0x0, 0x8c}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 3.321552154s ago: executing program 1 (id=3807): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f00000006c0)={[{@shortname_lower}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000200000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000300)='./file0\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.261124269s ago: executing program 4 (id=3808): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000040), 0x1, 0x51b, &(0x7f0000000b80)="$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") getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@loopback}, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = dup3(r1, r0, 0x0) recvmmsg$unix(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') 2.467114572s ago: executing program 1 (id=3812): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="6c617a7974696d652c6e6f696e6c696e655f78617474722c6c617a7974696d652c6e6f626172726965722c6163746976655f6c6f67733d342c757365725f78617474722c6d6f64653d6c66732c616c6c6f635f6d6f64653d64656661756c742c00be9ee044c45511e65887f6fac9eba6d787c3684a836f23dbf8ad3dd5931c08b4d8bde7e8acbbf3bf3326f2faa5952a332ad2ced40c98a2affa2dad4d623f9ff3ffa81e45095548ab6200f069d0f63d20fd71d3043b0dd5c4cf9785f3f531abc19bc1678f5e0b33006bd1049ca45fd8500d67a5aa6e1c23d900000000007867738729e703bb122283fb2fae9813a0cfefcdf3dc968af1cf80e96649d943198a96d9b1af9c91506b30922be8537f54e65cf60c6b6a5798955796aea325770d6ccc93a95fad93b2c7bad114fcbc55036a301c23b07073c71555791db8919235022bb0ee4294211ab9b43f3fbedecd223722d937aa22b31e2e9c97e5ea94e4ab83d4e5811c7556813c334aec856af0a0c12b3c93ba5aa906c6e2268a0c6cbbb13f496d87c608604eb02b2c031d5ae40c75"], 0x1, 0x5511, &(0x7f0000006b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="79e0fd679d09f0af1d20", @ANYBLOB="0000000000000000b70200001400894fb70309003d8eda0f26acf1be000000e0ff808ce33f8e692f38690000bf91000000000000b71c00000000000085106a67038000040015dd0e5d156cbc0d3c0b9d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) pwritev2(r2, 0x0, 0x0, 0x7fff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x100001) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 2.407177098s ago: executing program 4 (id=3813): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x9a, 0x0, 0x0, 0x0, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f00000500000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r7}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, 0x0, &(0x7f0000000100)) 2.315729506s ago: executing program 3 (id=3814): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESDEC, @ANYBLOB=',errors=continue,iocharset=cp861,uid=', @ANYRES32, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="004b8704a39ec4ecba7f0274f152a4c76d2777397dba6073bd43f93f24f2cfb6eac22c83063bed99f3519f7c0e162ba9ffa617964d688673fa8311", @ANYRESHEX, @ANYBLOB=',iocharset=cp869,errors=continue,\x00'], 0x1, 0x1538, &(0x7f0000003980)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 1.971544938s ago: executing program 0 (id=3815): pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000d40)=ANY=[@ANYBLOB="b8"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00') 1.94276903s ago: executing program 0 (id=3816): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) lseek(r0, 0x1000000000000800, 0x0) 1.684020895s ago: executing program 0 (id=3817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x1, 0x2, 0x0, 0x0, 0x8c}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 1.575338275s ago: executing program 0 (id=3818): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000500)="1dd3071f4234371758683a62e88cc6ec85ff498f7e8ff7ad216f828a61ace81fbc"}, 0x20) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x70}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x68) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.51549814s ago: executing program 4 (id=3819): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@discard}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x453, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xdc5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r4) keyctl$restrict_keyring(0xa, r4, 0x0, &(0x7f0000000000)='id:cb2e') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) 1.51455688s ago: executing program 1 (id=3820): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="0213000002000000000000000082d4518770d7258c411bb1f06de9eebeb28c0387faa460b996e4555e26ef196fce50"], 0x10}}, 0x0) 1.417037499s ago: executing program 3 (id=3821): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1.375218203s ago: executing program 1 (id=3822): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='shortname=winnt,shortname=lower,iocharset=maccenteuro,utf8=0,iocharset=macgreek,codepage=1255,flush,shortname=mixed,tz=UTC,check=strict,rodir,nonumtail=0,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00'], 0xfd, 0x289, &(0x7f0000000c40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001240), 0x44) open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x8, "4f43c852"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.322477988s ago: executing program 3 (id=3823): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x2000804, &(0x7f00000006c0)={[{@shortname_lower}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@utf8no}, {@rodir}, {@utf8}, {@shortname_win95}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@uid}, {@utf8no}, {@shortname_win95}, {@utf8no}, {@numtail}, {@uni_xlate}, {@rodir}]}, 0x1, 0x276, &(0x7f00000003c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000200000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x3, 0x300) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000300)='./file0\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 841.444052ms ago: executing program 2 (id=3824): chdir(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) 539.91985ms ago: executing program 4 (id=3825): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0xff, 0x246, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 504.717514ms ago: executing program 0 (id=3826): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 441.421649ms ago: executing program 0 (id=3827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000880)='./bus\x00', 0x40, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@nodelalloc}, {@abort}, {@noload}, {@noload}]}, 0x6c, 0x50a, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) socket$inet6(0xa, 0x5, 0x5) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100003052bbd7000269d020000000000", @ANYRES32=0x0, @ANYBLOB="d5c0010041800400140012800b0001006d616373656300000400028008000500", @ANYRES32=r8, @ANYBLOB="72975f856898cf5c121f8f191f88df44ea"], 0x3c}}, 0x4050) 421.522921ms ago: executing program 3 (id=3828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x1, 0x2, 0x0, 0x0, 0x8c}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 257.55µs ago: executing program 3 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 0s ago: executing program 4 (id=3830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x8004587d, 0x0) rt_sigpending(0x0, 0x0) kernel console output (not intermixed with test programs): 08] nintendo 0003:057E:2009.0089: Failed to initialize controller; ret=-38 [ 721.347589][T12508] nintendo 0003:057E:2009.0089: probe - fail = -38 [ 721.354053][T12508] nintendo: probe of 0003:057E:2009.0089 failed with error -38 [ 721.379066][T12508] usb 1-1: USB disconnect, device number 73 [ 721.399892][ T1368] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 721.404717][T13539] loop3: detected capacity change from 0 to 1024 [ 721.415079][T13539] EXT4-fs: Ignoring removed orlov option [ 721.420882][T13539] EXT4-fs: Ignoring removed nomblk_io_submit option [ 721.427648][T13539] EXT4-fs (loop3): Test dummy encryption mode enabled [ 721.435920][T13539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 721.660734][T12491] EXT4-fs (loop1): unmounting filesystem. [ 721.674334][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3380'. [ 721.769923][ T1368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.780750][ T1368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.790703][ T1368] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 721.800030][ T1368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.809586][ T1368] usb 3-1: config 0 descriptor?? [ 721.835763][T13547] 9pnet_fd: Insufficient options for proto=fd [ 722.303749][T12270] EXT4-fs (loop3): unmounting filesystem. [ 722.371514][ T1368] pyra 0003:1E7D:2CF6.008A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 722.580813][ T1368] pyra 0003:1E7D:2CF6.008A: couldn't init struct pyra_device [ 722.581888][ T312] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 722.591009][ T1368] pyra 0003:1E7D:2CF6.008A: couldn't install mouse [ 722.599667][ T312] usb 5-1: USB disconnect, device number 82 [ 722.603768][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 722.610144][T12276] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 722.660981][ T1368] pyra: probe of 0003:1E7D:2CF6.008A failed with error -71 [ 722.669262][ T1368] usb 3-1: USB disconnect, device number 71 [ 722.691352][T13564] loop1: detected capacity change from 0 to 512 [ 722.698698][T13564] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 722.706863][T13564] EXT4-fs (loop1): orphan cleanup on readonly fs [ 722.713303][T13564] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 722.927132][T13564] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 722.968733][T13564] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.3388: casefold flag without casefold feature [ 723.052538][T13564] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3388: bg 0: block 40: padding at end of block bitmap is not set [ 723.125623][T13564] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 723.134565][T13564] EXT4-fs (loop1): 1 truncate cleaned up [ 723.140137][T13564] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 723.199255][T13575] loop2: detected capacity change from 0 to 512 [ 723.206234][T13575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 723.217050][T13575] EXT4-fs (loop2): 1 truncate cleaned up [ 723.222688][T13575] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 723.370311][T13580] overlayfs: missing 'lowerdir' [ 723.379903][T12276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.392783][T12276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.402399][T12276] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 723.411368][T12276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.419793][T12276] usb 4-1: config 0 descriptor?? [ 723.449872][ T1368] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 723.527405][T12491] EXT4-fs (loop1): unmounting filesystem. [ 723.809964][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.820743][ T39] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 723.828076][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.837620][ T1368] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 723.850235][ T1368] usb 1-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 723.859113][ T1368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.867514][ T1368] usb 1-1: config 0 descriptor?? [ 723.890415][T12276] petalynx 0003:18B1:0037.008B: collection stack underflow [ 723.897512][T12276] petalynx 0003:18B1:0037.008B: item 0 1 0 12 parsing failed [ 723.904866][T12276] petalynx 0003:18B1:0037.008B: parse failed [ 723.910754][T12276] petalynx: probe of 0003:18B1:0037.008B failed with error -22 [ 724.047718][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 724.096888][T12276] usb 4-1: USB disconnect, device number 60 [ 724.189924][ T39] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 724.200934][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.211909][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.222075][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 724.230526][T13593] 9pnet_fd: Insufficient options for proto=fd [ 724.235041][ T39] usb 2-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 724.249924][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.258664][ T39] usb 2-1: config 0 descriptor?? [ 724.350907][ T1368] holtek_mouse 0003:04D9:A070.008C: item fetching failed at offset 1/5 [ 724.367650][ T1368] holtek_mouse 0003:04D9:A070.008C: hid parse failed: -22 [ 724.375579][ T1368] holtek_mouse: probe of 0003:04D9:A070.008C failed with error -22 [ 724.551907][ T1368] usb 1-1: USB disconnect, device number 74 [ 724.808793][T13605] xt_CT: No such helper "snmp_trap" [ 724.821931][ T39] nintendo 0003:057E:2009.008D: unknown main item tag 0x0 [ 724.829349][ T39] nintendo 0003:057E:2009.008D: unknown main item tag 0x0 [ 724.837310][ T39] nintendo 0003:057E:2009.008D: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.1-1/input0 [ 724.909894][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 724.925792][ T39] nintendo 0003:057E:2009.008D: using factory cal for left stick [ 724.941669][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 724.957566][ T39] nintendo 0003:057E:2009.008D: using factory cal for right stick [ 724.973740][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 724.982433][ T39] nintendo 0003:057E:2009.008D: Failed to read left stick cal, using defaults; e=-38 [ 724.992505][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 725.002383][ T39] nintendo 0003:057E:2009.008D: Failed to read right stick cal, using defaults; e=-38 [ 725.080377][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 725.088040][ T39] nintendo 0003:057E:2009.008D: using factory cal for IMU [ 725.095522][ T39] nintendo 0003:057E:2009.008D: failed reading SPI flash; ret=-38 [ 725.103649][ T39] nintendo 0003:057E:2009.008D: Failed to read IMU cal, using defaults; ret=-38 [ 725.113115][ T39] nintendo 0003:057E:2009.008D: Unable to read IMU calibration data [ 725.121306][ T39] nintendo 0003:057E:2009.008D: Failed to set report mode; ret=-38 [ 725.129360][ T39] nintendo 0003:057E:2009.008D: Failed to initialize controller; ret=-38 [ 725.138938][ T39] nintendo 0003:057E:2009.008D: probe - fail = -38 [ 725.145684][ T39] nintendo: probe of 0003:057E:2009.008D failed with error -38 [ 725.165818][ T39] usb 2-1: USB disconnect, device number 68 [ 725.803813][T13619] loop1: detected capacity change from 0 to 512 [ 725.833687][T13621] loop4: detected capacity change from 0 to 512 [ 725.847212][T13619] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 725.859749][T13619] EXT4-fs (loop1): orphan cleanup on readonly fs [ 725.876288][T13619] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 725.911375][T13619] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 725.928222][T13619] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.3403: casefold flag without casefold feature [ 725.942718][T13621] EXT4-fs (loop4): 1 orphan inode deleted [ 725.948284][T13621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 725.967481][T13621] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038 (0x7fffffff) [ 725.980749][T13619] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3403: bg 0: block 40: padding at end of block bitmap is not set [ 726.002071][T13627] loop2: detected capacity change from 0 to 512 [ 726.008373][T13619] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 726.021128][T13619] EXT4-fs (loop1): 1 truncate cleaned up [ 726.026692][T13619] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 726.092582][T13633] loop3: detected capacity change from 0 to 256 [ 726.110376][T13627] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 726.112681][T13636] loop0: detected capacity change from 0 to 256 [ 726.119596][T13633] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 726.136759][T13627] EXT4-fs (loop2): 1 truncate cleaned up [ 726.142502][T13627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 727.604142][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 727.660786][T12491] EXT4-fs (loop1): unmounting filesystem. [ 727.735781][T13656] loop3: detected capacity change from 0 to 256 [ 727.760068][T13656] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 727.784177][T13660] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 727.851164][T13661] 9pnet_fd: Insufficient options for proto=fd [ 727.929860][ T312] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 728.173659][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 728.329915][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.345220][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.362519][ T312] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 728.378119][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.400168][ T312] usb 5-1: config 0 descriptor?? [ 728.910915][ T312] petalynx 0003:18B1:0037.008E: collection stack underflow [ 728.930012][ T312] petalynx 0003:18B1:0037.008E: item 0 1 0 12 parsing failed [ 729.250617][ T312] petalynx 0003:18B1:0037.008E: parse failed [ 729.256463][ T312] petalynx: probe of 0003:18B1:0037.008E failed with error -22 [ 729.275459][ T312] usb 5-1: USB disconnect, device number 83 [ 729.458853][T13687] loop2: detected capacity change from 0 to 512 [ 729.477995][T13687] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 729.486653][T13687] EXT4-fs (loop2): orphan cleanup on readonly fs [ 729.494503][T13687] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 729.509968][T13687] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 729.528988][T13687] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.3421: casefold flag without casefold feature [ 729.546467][T13687] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3421: bg 0: block 40: padding at end of block bitmap is not set [ 729.547134][T13692] loop3: detected capacity change from 0 to 512 [ 729.560865][T13687] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 729.575883][T13687] EXT4-fs (loop2): 1 truncate cleaned up [ 729.576165][T13692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 729.582105][T13687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 729.976152][T13692] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 729.987631][T13692] System zones: 0-2, 18-18, 34-34 [ 729.988809][T13701] loop4: detected capacity change from 0 to 512 [ 730.000090][T13692] EXT4-fs (loop3): 1 orphan inode deleted [ 730.005955][T13692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 730.006799][T13701] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 730.015347][T13692] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038 (0x7fffffff) [ 730.024026][T13701] EXT4-fs (loop4): 1 truncate cleaned up [ 730.042984][T13701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 730.278658][T13710] 9pnet_fd: Insufficient options for proto=fd [ 730.304895][T13711] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 730.312177][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 730.457057][T13717] loop0: detected capacity change from 0 to 512 [ 730.523370][T13717] EXT4-fs (loop0): 1 orphan inode deleted [ 730.539633][T13717] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 730.560862][T13717] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038 (0x7fffffff) [ 730.727143][T13721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 731.087419][T12270] EXT4-fs (loop3): unmounting filesystem. [ 731.179622][T13726] loop3: detected capacity change from 0 to 256 [ 731.211416][T13726] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 731.286625][T11577] EXT4-fs (loop0): unmounting filesystem. [ 731.321193][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 732.078062][T13730] loop4: detected capacity change from 0 to 40427 [ 732.188289][T13730] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 732.253622][T13730] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 732.327565][T13747] loop2: detected capacity change from 0 to 512 [ 732.343993][T13730] F2FS-fs (loop4): Found nat_bits in checkpoint [ 732.370055][T13747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 732.420318][T13747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3435: bg 0: block 248: padding at end of block bitmap is not set [ 732.428651][T13730] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 732.441657][T13747] Quota error (device loop2): write_blk: dquota write failed [ 732.450159][T13747] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 732.469417][T13730] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 732.477849][T13747] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.3435: Failed to acquire dquot type 1 [ 732.507962][T13747] EXT4-fs (loop2): 1 truncate cleaned up [ 732.521811][T13747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 732.589297][T13747] ext4 filesystem being mounted at /539/bus supports timestamps until 2038 (0x7fffffff) [ 732.592583][T13756] loop1: detected capacity change from 0 to 512 [ 732.635858][T13756] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 732.644635][T13756] EXT4-fs (loop1): orphan cleanup on readonly fs [ 732.651607][T13756] EXT4-fs warning (device loop1): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 732.666506][T13756] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 732.673456][T13756] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #16: comm syz.1.3437: casefold flag without casefold feature [ 732.691310][T13756] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3437: bg 0: block 40: padding at end of block bitmap is not set [ 732.708266][T13756] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 732.717631][T13756] EXT4-fs (loop1): 1 truncate cleaned up [ 732.717660][T13756] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 733.130132][T13773] loop0: detected capacity change from 0 to 512 [ 733.152183][T13773] EXT4-fs (loop0): 1 orphan inode deleted [ 733.162687][T13773] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 733.182652][T13773] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038 (0x7fffffff) [ 733.193597][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 733.209047][T13777] loop4: detected capacity change from 0 to 512 [ 733.230811][T13777] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 733.245530][T13777] EXT4-fs (loop4): 1 truncate cleaned up [ 733.252938][T13777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 733.436236][T13784] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 733.644820][T13785] 9pnet_fd: Insufficient options for proto=fd [ 733.658325][T12491] EXT4-fs (loop1): unmounting filesystem. [ 734.006268][T11577] EXT4-fs (loop0): unmounting filesystem. [ 734.141083][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 734.230524][T13795] loop0: detected capacity change from 0 to 256 [ 734.254232][T13795] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 734.369051][T13789] loop3: detected capacity change from 0 to 40427 [ 734.376463][T13789] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 734.393013][T13789] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 734.500027][ T39] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 734.712497][T13789] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 734.777697][T13789] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 734.788826][T13789] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 734.796504][T13813] loop1: detected capacity change from 0 to 2048 [ 734.878218][T13813] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.3452: casefold flag without casefold feature [ 734.895395][T13813] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 734.907112][T13813] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 734.914872][T13813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 735.011396][T13817] syz.3.3446: attempt to access beyond end of device [ 735.011396][T13817] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 735.040042][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.043843][T13817] syz.3.3446: attempt to access beyond end of device [ 735.043843][T13817] loop3: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 735.050935][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.072052][T13817] syz.3.3446: attempt to access beyond end of device [ 735.072052][T13817] loop3: rw=2049, sector=53264, nr_sectors = 64 limit=40427 [ 735.087898][ T39] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 735.096855][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.105584][ T39] usb 5-1: config 0 descriptor?? [ 735.209879][ T312] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 735.410062][T13819] loop0: detected capacity change from 0 to 40427 [ 735.424883][T13819] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 735.447561][T13819] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 735.521434][T12270] syz-executor: attempt to access beyond end of device [ 735.521434][T12270] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 735.545373][T13819] F2FS-fs (loop0): Found nat_bits in checkpoint [ 735.639410][ T39] pyra 0003:1E7D:2CF6.008F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 735.653111][T13819] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 735.660091][T13819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 735.712218][T13830] loop3: detected capacity change from 0 to 512 [ 735.727503][T13830] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 735.736228][T13830] EXT4-fs (loop3): orphan cleanup on readonly fs [ 735.743186][T13830] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 735.757658][T13830] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 735.764473][T13830] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.3455: casefold flag without casefold feature [ 735.777641][T13830] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3455: bg 0: block 40: padding at end of block bitmap is not set [ 735.791760][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 735.791969][T13830] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 735.801395][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 735.810660][T13830] EXT4-fs (loop3): 1 truncate cleaned up [ 735.820660][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 735.826359][T13830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 735.837011][ T312] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 735.849937][ T39] pyra 0003:1E7D:2CF6.008F: couldn't init struct pyra_device [ 735.853158][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.868656][ T39] pyra 0003:1E7D:2CF6.008F: couldn't install mouse [ 735.871294][ T312] usb 2-1: config 0 descriptor?? [ 735.876777][ T39] pyra: probe of 0003:1E7D:2CF6.008F failed with error -71 [ 735.891770][ T39] usb 5-1: USB disconnect, device number 84 [ 735.920506][ T312] usb 2-1: MIDIStreaming interface descriptor not found [ 736.174264][T13813] incfs: Can't find or create .index dir in ./file0 [ 736.180944][T13813] incfs: mount failed -22 [ 736.185893][ T312] usb 2-1: USB disconnect, device number 69 [ 736.319854][ T1368] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 736.547343][T12270] EXT4-fs (loop3): unmounting filesystem. [ 736.559854][ T1368] usb 1-1: Using ep0 maxpacket: 8 [ 736.619878][T12982] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 736.679896][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 736.700568][T13846] 9pnet_fd: Insufficient options for proto=fd [ 736.720614][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 736.721469][T12491] EXT4-fs (loop1): unmounting filesystem. [ 736.730499][ T1368] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 736.745243][ T1368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.754009][ T1368] usb 1-1: config 0 descriptor?? [ 736.859846][T12982] usb 5-1: Using ep0 maxpacket: 16 [ 737.150367][T12982] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 737.174151][T12982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.185304][T12982] usb 5-1: Product: syz [ 737.189380][T12982] usb 5-1: Manufacturer: syz [ 737.194136][T12982] usb 5-1: SerialNumber: syz [ 737.250211][T12982] usb 5-1: config 0 descriptor?? [ 737.263520][T13858] loop2: detected capacity change from 0 to 256 [ 737.272688][T13858] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 737.318185][T12982] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 737.326221][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.333762][T12982] usb 5-1: Detected FT232H [ 737.338243][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.345464][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.352762][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.360081][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.367333][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.374694][ T1368] playstation 0003:054C:0CE6.0090: unknown main item tag 0x0 [ 737.385421][ T1368] playstation 0003:054C:0CE6.0090: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 737.570073][T12982] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 737.580241][ T1368] playstation 0003:054C:0CE6.0090: Invalid byte count transferred, expected 20 got 0 [ 737.605541][ T1368] playstation 0003:054C:0CE6.0090: Failed to retrieve DualSense pairing info: -22 [ 737.656305][ T1368] playstation 0003:054C:0CE6.0090: Failed to get MAC address from DualSense [ 737.672617][ T1368] playstation 0003:054C:0CE6.0090: Failed to create dualsense. [ 737.684936][ T1368] playstation: probe of 0003:054C:0CE6.0090 failed with error -22 [ 737.784301][ T1368] usb 1-1: USB disconnect, device number 75 [ 737.843702][T13862] loop3: detected capacity change from 0 to 40427 [ 737.856602][T13862] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 737.863217][T13862] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 737.877642][T13862] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 737.912815][T13862] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 737.919789][T13862] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 737.920272][T13864] loop1: detected capacity change from 0 to 40427 [ 737.948645][T13864] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 737.955070][T13864] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 737.965999][T13864] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 737.998104][T13864] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 738.005073][T13864] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 738.069950][T12982] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 738.078256][T12982] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 738.104539][T13874] syz.3.3464: attempt to access beyond end of device [ 738.104539][T13874] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 738.123875][T13874] syz.3.3464: attempt to access beyond end of device [ 738.123875][T13874] loop3: rw=2049, sector=53256, nr_sectors = 64 limit=40427 [ 738.170037][ T28] audit: type=1400 audit(2000000565.190:420): avc: denied { setopt } for pid=13876 comm="syz.2.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 738.181865][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3464'. [ 738.209923][T13879] syz.1.3465: attempt to access beyond end of device [ 738.209923][T13879] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 738.230728][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.231473][T13881] loop2: detected capacity change from 0 to 256 [ 738.250849][T13879] syz.1.3465: attempt to access beyond end of device [ 738.250849][T13879] loop1: rw=2049, sector=53256, nr_sectors = 8 limit=40427 [ 738.265874][T13874] device bridge_slave_0 left promiscuous mode [ 738.273180][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.286712][T12982] usb 5-1: USB disconnect, device number 85 [ 738.289280][T13879] syz.1.3465: attempt to access beyond end of device [ 738.289280][T13879] loop1: rw=2049, sector=53264, nr_sectors = 64 limit=40427 [ 738.312322][T13881] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 738.331739][T12982] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 738.412972][T12982] ftdi_sio 5-1:0.0: device disconnected [ 738.717325][T13888] loop0: detected capacity change from 0 to 2048 [ 738.806518][T13888] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 738.911432][T13894] loop4: detected capacity change from 0 to 2048 [ 739.057318][T13894] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.3470: casefold flag without casefold feature [ 739.191110][T12270] syz-executor: attempt to access beyond end of device [ 739.191110][T12270] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 739.241843][T13898] loop2: detected capacity change from 0 to 1024 [ 739.244416][T13894] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 739.262820][T13898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 739.328124][ T5884] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 739.345399][T13894] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 739.348579][ T5884] EXT4-fs (loop0): Remounting filesystem read-only [ 739.370327][T13894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 739.440742][T13905] syz.1.3471[13905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.440821][T13905] syz.1.3471[13905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 739.444578][T11577] EXT4-fs (loop0): unmounting filesystem. [ 739.534166][T13909] loop1: detected capacity change from 0 to 256 [ 739.579366][T13911] netlink: 'syz.2.3472': attribute type 4 has an invalid length. [ 739.968072][T13909] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 740.023389][ T312] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 740.140673][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 740.499592][T13921] 9pnet_fd: Insufficient options for proto=fd [ 740.749912][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 740.750126][T13927] loop1: detected capacity change from 0 to 40427 [ 740.765719][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 740.776710][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 740.780359][T13927] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 740.786504][ T312] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 740.793987][T13927] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 740.816419][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.825290][ T312] usb 5-1: config 0 descriptor?? [ 740.845066][T13927] F2FS-fs (loop1): Found nat_bits in checkpoint [ 740.880643][ T312] usb 5-1: MIDIStreaming interface descriptor not found [ 740.930232][T13927] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 740.937123][T13927] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 741.178937][T13894] incfs: Can't find or create .index dir in ./file0 [ 741.185492][T13894] incfs: mount failed -22 [ 741.193362][ T603] usb 5-1: USB disconnect, device number 86 [ 741.240159][ T39] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 741.609953][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.625961][T13949] loop3: detected capacity change from 0 to 2048 [ 741.632308][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.642453][ T39] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 741.653041][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.662062][ T39] usb 1-1: config 0 descriptor?? [ 741.670492][T13949] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 741.771947][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 741.791358][T13957] overlayfs: missing 'lowerdir' [ 741.814034][T13959] loop4: detected capacity change from 0 to 1024 [ 742.063234][T13959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 742.204707][T13954] loop1: detected capacity change from 0 to 40427 [ 742.213158][T13954] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 742.219385][T13954] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 742.238340][T13954] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 742.274395][T13954] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 742.281456][T13954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 743.268371][ T39] petalynx 0003:18B1:0037.0091: collection stack underflow [ 743.275782][ T39] petalynx 0003:18B1:0037.0091: item 0 1 0 12 parsing failed [ 743.283185][ T39] petalynx 0003:18B1:0037.0091: parse failed [ 743.289005][ T39] petalynx: probe of 0003:18B1:0037.0091 failed with error -22 [ 743.299454][ T5884] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 743.315686][ T5884] EXT4-fs (loop3): Remounting filesystem read-only [ 743.443458][T13976] netlink: 'syz.4.3487': attribute type 4 has an invalid length. [ 744.413886][ T312] usb 1-1: USB disconnect, device number 76 [ 744.473285][T12270] EXT4-fs (loop3): unmounting filesystem. [ 744.485602][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 744.634154][T13991] bio_check_eod: 1 callbacks suppressed [ 744.634175][T13991] syz.1.3484: attempt to access beyond end of device [ 744.634175][T13991] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 744.754637][T13992] syz.1.3484: attempt to access beyond end of device [ 744.754637][T13992] loop1: rw=2049, sector=53256, nr_sectors = 64 limit=40427 [ 744.812582][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3484'. [ 744.851666][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.881306][T13997] 9pnet_fd: Insufficient options for proto=fd [ 744.896072][T13991] device bridge_slave_0 left promiscuous mode [ 744.922304][T13991] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.950810][T13989] loop4: detected capacity change from 0 to 40427 [ 744.986937][T13989] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 745.014679][T13989] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 745.054040][T13989] F2FS-fs (loop4): Found nat_bits in checkpoint [ 745.165167][T13989] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 745.179847][T13989] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 745.407765][T12491] syz-executor: attempt to access beyond end of device [ 745.407765][T12491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 745.499273][T14007] overlayfs: missing 'lowerdir' [ 745.623909][T14015] loop1: detected capacity change from 0 to 256 [ 745.934027][ T1368] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 746.780071][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.884469][ T1368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.915667][T14034] xt_CT: No such helper "snmp_trap" [ 747.035653][ T1368] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 747.065649][ T1368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.093987][ T1368] usb 1-1: config 0 descriptor?? [ 747.096186][T14037] loop2: detected capacity change from 0 to 512 [ 747.146240][T14037] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 747.161976][T14037] EXT4-fs (loop2): 1 truncate cleaned up [ 747.172309][T14037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 747.461272][T14045] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 747.472057][T14042] loop4: detected capacity change from 0 to 40427 [ 747.517956][T14042] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 747.524362][T14042] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 747.569081][T14042] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 747.584193][ T1368] appleir 0003:05AC:8243.0092: report_id 0 is invalid [ 747.599858][ T1368] appleir 0003:05AC:8243.0092: item 0 0 1 8 parsing failed [ 747.610917][ T1368] appleir 0003:05AC:8243.0092: parse failed [ 747.616821][ T1368] appleir: probe of 0003:05AC:8243.0092 failed with error -22 [ 747.663182][T14042] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 747.677815][T14042] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 747.721408][T14056] overlayfs: missing 'lowerdir' [ 747.793362][ T603] usb 1-1: USB disconnect, device number 77 [ 747.924153][T14061] loop1: detected capacity change from 0 to 256 [ 747.924796][T14062] syz.4.3506: attempt to access beyond end of device [ 747.924796][T14062] loop4: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 747.953862][T14061] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 747.983386][T14063] syz.4.3506: attempt to access beyond end of device [ 747.983386][T14063] loop4: rw=2049, sector=53256, nr_sectors = 64 limit=40427 [ 748.015560][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3506'. [ 748.096713][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 748.341463][T14068] loop2: detected capacity change from 0 to 256 [ 748.533855][T14071] loop0: detected capacity change from 0 to 256 [ 750.313029][ T1827] syz-executor: attempt to access beyond end of device [ 750.313029][ T1827] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 750.408661][T14087] loop3: detected capacity change from 0 to 256 [ 750.425425][T14087] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 751.277716][T14094] loop4: detected capacity change from 0 to 16 [ 751.371895][T14094] erofs: (device loop4): mounted with root inode @ nid 36. [ 751.380042][T14094] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 751.389498][T14094] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 751.402311][T14094] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 751.412270][T14094] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 751.421461][T14094] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 751.434387][T14094] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 751.465369][T14101] loop1: detected capacity change from 0 to 128 [ 751.488673][T14099] overlayfs: missing 'lowerdir' [ 751.496734][T14103] xt_CT: No such helper "snmp_trap" [ 751.582353][T14107] loop2: detected capacity change from 0 to 512 [ 751.631894][T14110] loop4: detected capacity change from 0 to 256 [ 751.643484][T14114] loop3: detected capacity change from 0 to 256 [ 751.664827][T14113] incfs: Can't find or create .index dir in ./file0 [ 751.666078][T14114] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 751.671390][T14113] incfs: mount failed -14 [ 751.689417][T14107] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 751.757918][T14107] EXT4-fs (loop2): 1 truncate cleaned up [ 751.772614][T14107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 752.987602][T14124] loop1: detected capacity change from 0 to 512 [ 753.290782][T14124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 753.324990][T14122] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 753.377105][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 753.400724][T14124] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3526: bg 0: block 248: padding at end of block bitmap is not set [ 753.420402][T14124] Quota error (device loop1): write_blk: dquota write failed [ 753.433444][T14124] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 753.448282][T14124] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.3526: Failed to acquire dquot type 1 [ 753.463539][T14124] EXT4-fs (loop1): 1 truncate cleaned up [ 753.469028][T14124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 753.478126][T14124] ext4 filesystem being mounted at /94/bus supports timestamps until 2038 (0x7fffffff) [ 753.497043][T14127] loop3: detected capacity change from 0 to 2048 [ 753.514293][T14136] overlayfs: missing 'lowerdir' [ 753.534365][T14139] loop2: detected capacity change from 0 to 256 [ 754.020534][T14143] device dummy0 entered promiscuous mode [ 754.071990][T14139] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 754.284709][T12491] EXT4-fs (loop1): unmounting filesystem. [ 754.293301][T14127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 754.997545][ T312] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 755.005286][ T8] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 755.030538][ T8] EXT4-fs (loop3): Remounting filesystem read-only [ 755.047263][T12270] EXT4-fs (loop3): unmounting filesystem. [ 755.088575][T14161] loop0: detected capacity change from 0 to 256 [ 755.100643][T14163] incfs: Can't find or create .index dir in ./file0 [ 755.107640][T14163] incfs: mount failed -14 [ 755.119659][T14161] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 755.169164][T14167] loop3: detected capacity change from 0 to 512 [ 755.192061][T14167] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 755.200928][T14167] EXT4-fs (loop3): 1 truncate cleaned up [ 755.211485][T14167] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 756.929630][T14178] loop2: detected capacity change from 0 to 256 [ 756.948198][T14171] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 756.985501][T12270] EXT4-fs (loop3): unmounting filesystem. [ 756.989428][T14180] loop4: detected capacity change from 0 to 2048 [ 757.019925][ T312] usb 5-1: device descriptor read/all, error -71 [ 757.033768][T14180] EXT4-fs error (device loop4): __ext4_fill_super:5386: inode #2: comm syz.4.3540: casefold flag without casefold feature [ 757.047046][T14180] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 757.077767][T14187] overlayfs: missing 'lowerdir' [ 757.083428][T14180] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 757.093213][T14180] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 757.828485][T14195] loop2: detected capacity change from 0 to 256 [ 757.841886][T14195] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 757.869922][ T603] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 757.881933][T14197] loop1: detected capacity change from 0 to 2048 [ 757.912119][T14197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 758.453679][ T312] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 758.644972][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.657912][ T603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.710656][ T603] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 758.719538][ T603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.727838][ T8] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 758.728383][ T603] usb 1-1: config 0 descriptor?? [ 758.748087][ T8] EXT4-fs (loop1): Remounting filesystem read-only [ 758.821707][T12491] EXT4-fs (loop1): unmounting filesystem. [ 759.843289][T14224] loop3: detected capacity change from 0 to 256 [ 759.857481][T14224] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 759.926270][T14228] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 759.935244][T14228] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 759.945802][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 759.967859][T14232] loop4: detected capacity change from 0 to 256 [ 759.980048][ T312] usb 5-1: unable to read config index 0 descriptor/all [ 759.990530][ T312] usb 5-1: can't read configurations, error -71 [ 760.200814][ T1368] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 760.570558][ T603] petalynx 0003:18B1:0037.0093: collection stack underflow [ 760.577622][ T603] petalynx 0003:18B1:0037.0093: item 0 1 0 12 parsing failed [ 760.579865][ T1368] usb 2-1: Using ep0 maxpacket: 16 [ 760.584957][ T312] usb usb5-port1: attempt power cycle [ 760.595077][ T603] petalynx 0003:18B1:0037.0093: parse failed [ 760.600966][ T603] petalynx: probe of 0003:18B1:0037.0093 failed with error -22 [ 760.609512][ T603] usb 1-1: USB disconnect, device number 78 [ 760.728127][ T1368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.739525][ T1368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.749082][ T1368] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.762052][ T1368] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.769856][T12276] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 760.770999][ T1368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.786668][ T1368] usb 2-1: config 0 descriptor?? [ 761.512135][T14243] loop4: detected capacity change from 0 to 2048 [ 761.522163][T14243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 761.927424][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.945901][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.962881][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.970441][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.977561][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.985079][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.992495][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 761.999694][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 762.007014][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 762.014385][ T1368] microsoft 0003:045E:07DA.0094: unknown main item tag 0x0 [ 762.059948][ T1368] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0094/input/input23 [ 762.072672][ T1368] microsoft 0003:045E:07DA.0094: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 762.099874][ T603] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 762.198309][T14216] syz.1.3548[14216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.198977][T14216] syz.1.3548[14216] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 762.434613][T12276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.457139][ T4163] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, [ 762.457158][T12276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.457167][ T4163] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 762.483991][ T4163] EXT4-fs (loop4): Remounting filesystem read-only [ 762.484099][ T1368] usb 2-1: USB disconnect, device number 70 [ 762.490618][T12276] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 762.505434][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.505722][ T1827] EXT4-fs (loop4): unmounting filesystem. [ 762.517099][T12276] usb 3-1: config 0 descriptor?? [ 762.859997][ T603] usb 4-1: Using ep0 maxpacket: 8 [ 763.010008][ T603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.024101][ T603] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.037865][T12276] appleir 0003:05AC:8243.0095: report_id 0 is invalid [ 763.048191][T12276] appleir 0003:05AC:8243.0095: item 0 0 1 8 parsing failed [ 763.056564][T12276] appleir 0003:05AC:8243.0095: parse failed [ 763.062623][ T603] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 763.075111][T12276] appleir: probe of 0003:05AC:8243.0095 failed with error -22 [ 763.084991][ T603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.103817][T14272] loop1: detected capacity change from 0 to 2048 [ 763.110574][ T603] usb 4-1: config 0 descriptor?? [ 763.142069][T14272] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.3566: casefold flag without casefold feature [ 763.155359][ T603] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 763.169879][T14272] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 763.196664][T14272] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 763.205123][T14272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 763.269301][ T1368] usb 3-1: USB disconnect, device number 72 [ 763.470300][T14276] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.477140][T14276] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.484702][T14276] device bridge_slave_0 entered promiscuous mode [ 763.491811][T14276] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.498667][T14276] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.506026][T14276] device bridge_slave_1 entered promiscuous mode [ 763.512323][ T4163] tipc: Left network mode [ 763.544934][T14276] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.551996][T14276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.559041][T14276] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.565873][T14276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.573820][ T603] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 763.593019][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 763.600830][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.607882][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.616411][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 763.624928][T12276] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.631940][T12276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.650525][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 763.658736][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 763.666776][T12276] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.673612][T12276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.680814][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 763.688596][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 763.699780][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 763.707691][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 763.715466][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 763.725300][T14276] device veth0_vlan entered promiscuous mode [ 763.738796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 763.748563][T14276] device veth1_macvtap entered promiscuous mode [ 763.760730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 763.774493][T14283] loop0: detected capacity change from 0 to 256 [ 763.783394][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 763.824627][T14285] loop4: detected capacity change from 0 to 256 [ 763.839265][T14285] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 765.256465][T12508] usb 4-1: USB disconnect, device number 61 [ 765.279962][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 765.312700][T14297] loop0: detected capacity change from 0 to 512 [ 765.330862][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 765.376301][ T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 765.386515][ T603] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 765.401143][T14296] loop3: detected capacity change from 0 to 2048 [ 765.403572][T14297] EXT4-fs (loop0): 1 orphan inode deleted [ 765.417492][ T4163] device bridge_slave_1 left promiscuous mode [ 765.424203][T14297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 765.428355][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.433208][T14297] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038 (0x7fffffff) [ 765.444451][ T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.467226][ T4163] device dummy0 left promiscuous mode [ 765.566242][T14296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 765.596035][ T4163] device veth1_macvtap left promiscuous mode [ 765.733732][ T603] usb 2-1: config 0 descriptor?? [ 765.741903][ T4163] device veth0_vlan left promiscuous mode [ 765.780920][ T603] usb 2-1: MIDIStreaming interface descriptor not found [ 766.057309][T14272] incfs: Can't find or create .index dir in ./file0 [ 766.063880][T14272] incfs: mount failed -22 [ 766.071848][T12622] usb 2-1: USB disconnect, device number 71 [ 766.210697][ T8] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 766.214241][T14321] incfs: Can't find or create .index dir in ./file0 [ 766.233955][T11577] EXT4-fs (loop0): unmounting filesystem. [ 766.240580][ T8] EXT4-fs (loop3): Remounting filesystem read-only [ 766.248048][T12270] EXT4-fs (loop3): unmounting filesystem. [ 766.260016][T14321] incfs: mount failed -14 [ 766.299479][T14324] loop0: detected capacity change from 0 to 256 [ 766.317757][T14324] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 766.318365][T14328] loop4: detected capacity change from 0 to 256 [ 766.761838][T12508] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 766.773305][T12491] EXT4-fs (loop1): unmounting filesystem. [ 766.824768][T14338] loop1: detected capacity change from 0 to 512 [ 766.853952][T14338] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 766.866471][T14338] EXT4-fs (loop1): 1 truncate cleaned up [ 766.878655][T14338] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 767.019848][T12508] usb 4-1: Using ep0 maxpacket: 16 [ 767.090135][T14341] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 767.140082][T12508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.226785][T12508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.240000][T12508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 767.295723][T12508] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 767.312683][T12508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.342731][T12508] usb 4-1: config 0 descriptor?? [ 767.409889][T12622] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 767.663841][T12622] usb 3-1: Using ep0 maxpacket: 8 [ 767.769664][T14350] xt_CT: No such helper "snmp_trap" [ 767.780084][T12622] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.791889][T12491] EXT4-fs (loop1): unmounting filesystem. [ 767.801949][T12622] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.820214][T12622] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 767.821170][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.829469][T12622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.844425][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.848388][T12622] usb 3-1: config 0 descriptor?? [ 767.857459][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.865563][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.881331][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.889888][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.891350][T12622] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 767.904303][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.914134][T14353] loop1: detected capacity change from 0 to 2048 [ 767.930924][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.940253][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.951093][T14357] loop0: detected capacity change from 0 to 256 [ 767.957967][T14353] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 767.960094][T12508] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 767.985200][T12508] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0096/input/input24 [ 768.032059][T14326] syz.3.3576[14326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.032143][T14326] syz.3.3576[14326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 768.035412][T12508] microsoft 0003:045E:07DA.0096: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 768.479538][T12622] usb 4-1: USB disconnect, device number 62 [ 768.765173][ T8] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 768.781307][ T8] EXT4-fs (loop1): Remounting filesystem read-only [ 768.789723][T12491] EXT4-fs (loop1): unmounting filesystem. [ 768.880422][T14372] incfs: Can't find or create .index dir in ./file0 [ 768.887060][T14372] incfs: mount failed -14 [ 768.931096][T14375] loop1: detected capacity change from 0 to 2048 [ 768.954456][T14375] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.3592: casefold flag without casefold feature [ 768.972216][T14375] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 768.982363][T14375] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 768.989903][T14375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 769.004063][T14375] incfs: Can't find or create .index dir in ./file0 [ 769.010663][T14375] incfs: mount failed -22 [ 769.020666][T12491] EXT4-fs (loop1): unmounting filesystem. [ 769.397176][T14384] loop1: detected capacity change from 0 to 256 [ 770.179927][T12622] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 770.333423][T14400] loop1: detected capacity change from 0 to 2048 [ 770.386510][T14400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 770.410949][T14405] loop3: detected capacity change from 0 to 256 [ 770.419830][T12622] usb 1-1: Using ep0 maxpacket: 8 [ 770.465293][T12508] usb 3-1: USB disconnect, device number 73 [ 770.722810][ T4163] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 770.737562][ T4163] EXT4-fs (loop1): Remounting filesystem read-only [ 770.744720][T12491] EXT4-fs (loop1): unmounting filesystem. [ 770.779898][T12622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.797075][T12622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.824613][T14412] xt_CT: No such helper "snmp_trap" [ 770.826379][T12622] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 770.854309][T12622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.876692][T12622] usb 1-1: config 0 descriptor?? [ 770.964634][T14414] loop1: detected capacity change from 0 to 40427 [ 770.983693][T14414] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 770.990100][T14414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 771.000639][T14414] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 771.036062][T14414] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 771.043081][T14414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 771.373538][T14423] syz.1.3601: attempt to access beyond end of device [ 771.373538][T14423] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 771.601223][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.618628][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.626252][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.633644][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.634005][T12491] syz-executor: attempt to access beyond end of device [ 771.634005][T12491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 771.654011][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.662242][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.685727][T12622] playstation 0003:054C:0CE6.0097: unknown main item tag 0x0 [ 771.699875][T14427] loop2: detected capacity change from 0 to 256 [ 771.708756][T14427] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 771.721015][T12622] playstation 0003:054C:0CE6.0097: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.0-1/input0 [ 772.182785][T12622] playstation 0003:054C:0CE6.0097: Invalid reportID received, expected 9 got 0 [ 772.191765][T12622] playstation 0003:054C:0CE6.0097: Failed to retrieve DualSense pairing info: -22 [ 772.201059][T12622] playstation 0003:054C:0CE6.0097: Failed to get MAC address from DualSense [ 772.210226][T12622] playstation 0003:054C:0CE6.0097: Failed to create dualsense. [ 772.218175][T12622] playstation: probe of 0003:054C:0CE6.0097 failed with error -22 [ 772.605525][T12508] usb 1-1: USB disconnect, device number 79 [ 772.624797][T14446] loop3: detected capacity change from 0 to 512 [ 772.702087][T14446] EXT4-fs (loop3): 1 orphan inode deleted [ 772.707667][T14446] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 772.716836][T14446] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038 (0x7fffffff) [ 773.266164][T14461] loop0: detected capacity change from 0 to 2048 [ 773.281150][T14461] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 773.435442][T12622] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 773.546280][T12270] EXT4-fs (loop3): unmounting filesystem. [ 773.879875][T12622] usb 5-1: Using ep0 maxpacket: 8 [ 774.060188][T12622] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 774.236577][T12622] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 774.250231][ T8] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 774.278688][ T8] EXT4-fs (loop0): Remounting filesystem read-only [ 774.285329][T12622] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 774.295238][T11577] EXT4-fs (loop0): unmounting filesystem. [ 774.301203][T12622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.326583][T14471] loop1: detected capacity change from 0 to 40427 [ 774.348538][T14471] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 774.354905][T14471] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 774.373287][T14471] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 774.377051][T12622] usb 5-1: config 0 descriptor?? [ 774.420750][T12622] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 774.497805][T14471] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 774.504931][T14471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 774.599270][T14492] 9pnet: Could not find request transport: fd0x0000000000000006 [ 775.160010][ T28] audit: type=1107 audit(2000000602.160:421): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 775.174744][T12491] syz-executor: attempt to access beyond end of device [ 775.174744][T12491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 775.486173][T14502] loop2: detected capacity change from 0 to 512 [ 775.583051][T14502] EXT4-fs (loop2): 1 orphan inode deleted [ 775.588815][T14502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 775.603100][T14502] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038 (0x7fffffff) [ 776.337989][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 776.463745][T14525] loop1: detected capacity change from 0 to 256 [ 776.512748][T14528] loop2: detected capacity change from 0 to 2048 [ 776.608572][T14528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 777.398658][T12622] usb 5-1: USB disconnect, device number 90 [ 777.503583][ T4163] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 777.540021][ T4163] EXT4-fs (loop2): Remounting filesystem read-only [ 777.548352][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 778.009871][T12622] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 778.037584][T14546] loop4: detected capacity change from 0 to 40427 [ 778.044418][T14546] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 778.050896][T14546] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 778.132487][ T28] audit: type=1107 audit(2000000605.150:422): pid=14550 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 778.168478][T14546] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 778.344005][T14546] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 778.350990][T14546] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 778.377718][T14562] loop1: detected capacity change from 0 to 512 [ 778.402264][T14562] EXT4-fs (loop1): 1 orphan inode deleted [ 778.408042][T14562] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 778.417045][T14562] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff) [ 778.489948][T12622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.502372][T12622] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.391910][T12622] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 779.415900][T12491] EXT4-fs (loop1): unmounting filesystem. [ 779.422183][T14276] syz-executor: attempt to access beyond end of device [ 779.422183][T14276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 779.566477][T14580] loop4: detected capacity change from 0 to 256 [ 779.658129][T12622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.667496][T12622] usb 1-1: config 0 descriptor?? [ 780.009847][T12276] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 780.053079][T14591] xt_CT: No such helper "snmp_trap" [ 780.161696][T12622] pyra 0003:1E7D:2CF6.0098: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 780.269819][T12276] usb 3-1: Using ep0 maxpacket: 8 [ 780.369875][T12622] pyra 0003:1E7D:2CF6.0098: couldn't init struct pyra_device [ 780.377263][T12622] pyra 0003:1E7D:2CF6.0098: couldn't install mouse [ 780.384103][T12622] pyra: probe of 0003:1E7D:2CF6.0098 failed with error -71 [ 780.392091][T12622] usb 1-1: USB disconnect, device number 80 [ 780.419927][T12276] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.432882][T12276] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 780.443534][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.455183][T12276] usb 3-1: config 0 descriptor?? [ 780.500377][T12276] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 780.869868][T12276] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 780.979922][ T39] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 781.026945][ T28] audit: type=1107 audit(2000000608.040:423): pid=14603 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 781.359885][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.369883][T14609] loop4: detected capacity change from 0 to 512 [ 781.373866][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.387976][ T39] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 781.396907][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.402176][T14609] EXT4-fs (loop4): 1 orphan inode deleted [ 781.411394][T14609] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 781.415737][ T39] usb 2-1: config 0 descriptor?? [ 781.425135][T14609] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff) [ 781.439913][T12276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.451034][T12276] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.461243][T12276] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 781.470670][T12276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.482544][T12276] usb 4-1: config 0 descriptor?? [ 782.110642][ T39] petalynx 0003:18B1:0037.0099: collection stack underflow [ 782.117718][ T39] petalynx 0003:18B1:0037.0099: item 0 1 0 12 parsing failed [ 782.121073][T12276] appleir 0003:05AC:8243.009A: report_id 0 is invalid [ 782.125148][ T39] petalynx 0003:18B1:0037.0099: parse failed [ 782.132292][T12276] appleir 0003:05AC:8243.009A: item 0 0 1 8 parsing failed [ 782.137556][ T39] petalynx: probe of 0003:18B1:0037.0099 failed with error -22 [ 782.145156][T12276] appleir 0003:05AC:8243.009A: parse failed [ 782.158056][T12276] appleir: probe of 0003:05AC:8243.009A failed with error -22 [ 782.215707][T14276] EXT4-fs (loop4): unmounting filesystem. [ 782.298153][T14621] loop4: detected capacity change from 0 to 40427 [ 782.305109][T14621] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 782.311382][T14621] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 782.322996][ T39] usb 2-1: USB disconnect, device number 72 [ 782.326381][T12276] usb 4-1: USB disconnect, device number 63 [ 782.338619][T14621] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 782.362997][T14621] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 782.370156][T14621] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 782.741204][ T39] usb 3-1: USB disconnect, device number 74 [ 782.902206][T14639] loop3: detected capacity change from 0 to 256 [ 783.256302][T14276] syz-executor: attempt to access beyond end of device [ 783.256302][T14276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 783.396934][T14647] xt_CT: No such helper "snmp_trap" [ 783.653184][T14657] loop0: detected capacity change from 0 to 512 [ 783.672166][T14657] EXT4-fs (loop0): 1 orphan inode deleted [ 783.677803][T14657] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 783.688509][T14657] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038 (0x7fffffff) [ 783.756794][T14663] loop3: detected capacity change from 0 to 512 [ 783.772026][T14663] EXT4-fs (loop3): 1 orphan inode deleted [ 783.777595][T14663] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 783.786576][T14663] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038 (0x7fffffff) [ 784.502074][T11577] EXT4-fs (loop0): unmounting filesystem. [ 784.613607][T12270] EXT4-fs (loop3): unmounting filesystem. [ 784.629914][ T6] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 784.739864][ T39] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 784.879854][ T6] usb 2-1: Using ep0 maxpacket: 8 [ 785.019906][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.033178][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 785.042005][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.050334][ T6] usb 2-1: config 0 descriptor?? [ 785.090214][ T6] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 785.100007][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.110937][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.120521][ T39] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 785.129383][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.137790][ T39] usb 3-1: config 0 descriptor?? [ 785.447654][T14692] syz.0.3670[14692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.447701][T14692] syz.0.3670[14692] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 785.479703][T14694] loop3: detected capacity change from 0 to 256 [ 785.488908][T14696] loop0: detected capacity change from 0 to 256 [ 785.504863][T14696] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 785.769243][ T39] petalynx 0003:18B1:0037.009B: collection stack underflow [ 785.786483][ T39] petalynx 0003:18B1:0037.009B: item 0 1 0 12 parsing failed [ 785.818629][ T39] petalynx 0003:18B1:0037.009B: parse failed [ 785.843419][ T39] petalynx: probe of 0003:18B1:0037.009B failed with error -22 [ 785.978336][ T39] usb 3-1: USB disconnect, device number 75 [ 786.911508][T14716] loop0: detected capacity change from 0 to 512 [ 786.923044][T14716] EXT4-fs (loop0): 1 orphan inode deleted [ 786.928663][T14716] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 786.937610][T14716] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038 (0x7fffffff) [ 787.054955][T14719] xt_CT: No such helper "snmp_trap" [ 787.064185][T14721] loop4: detected capacity change from 0 to 512 [ 787.228570][T14721] EXT4-fs (loop4): 1 orphan inode deleted [ 787.240946][T14721] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 787.284995][T14721] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038 (0x7fffffff) [ 787.427121][T12276] usb 2-1: USB disconnect, device number 73 [ 787.509620][T14727] incfs: Can't find or create .index dir in ./file0 [ 787.516283][T14727] incfs: mount failed -14 [ 787.716349][T14737] loop3: detected capacity change from 0 to 2048 [ 787.732790][T14737] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.3681: casefold flag without casefold feature [ 787.790814][T11577] EXT4-fs (loop0): unmounting filesystem. [ 787.806826][T14737] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 787.840921][T14737] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 787.858503][T14737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 787.895667][T14737] incfs: Backing dir is not set, filesystem can't be mounted. [ 787.903150][T14737] incfs: mount failed -2 [ 787.912998][T12270] EXT4-fs (loop3): unmounting filesystem. [ 787.921605][T14276] EXT4-fs (loop4): unmounting filesystem. [ 787.940011][ T39] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 787.980838][ T28] audit: type=1326 audit(2000000615.000:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.005039][ T28] audit: type=1326 audit(2000000615.000:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.033962][T14746] loop0: detected capacity change from 0 to 512 [ 788.047383][ T28] audit: type=1326 audit(2000000615.020:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.100988][ T28] audit: type=1326 audit(2000000615.020:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.124840][ T28] audit: type=1326 audit(2000000615.020:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.126360][T14746] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 788.149025][ T28] audit: type=1326 audit(2000000615.020:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.157161][T14746] EXT4-fs (loop0): 1 truncate cleaned up [ 788.183344][ T28] audit: type=1326 audit(2000000615.020:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.185024][T14746] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 788.217383][ T28] audit: type=1326 audit(2000000615.020:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.241183][ T28] audit: type=1326 audit(2000000615.020:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.301525][ T28] audit: type=1326 audit(2000000615.020:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14741 comm="syz.4.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03e057dff9 code=0x7ffc0000 [ 788.407213][T14751] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 788.419907][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.431326][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.442706][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.450094][T12276] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 788.463727][ T39] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 788.473465][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.475321][T14753] loop1: detected capacity change from 0 to 256 [ 788.492870][ T39] usb 3-1: config 0 descriptor?? [ 788.506519][T14753] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 788.987291][T11577] EXT4-fs (loop0): unmounting filesystem. [ 789.030211][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 789.036988][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 789.049494][ T39] usb 3-1: USB disconnect, device number 76 [ 789.258435][T14763] loop0: detected capacity change from 0 to 512 [ 789.301271][T12276] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.323613][T14763] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 789.336065][T12276] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 789.340834][T14763] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 789.345542][T12276] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.352880][T14763] System zones: 0-2, 18-18, 34-34 [ 789.378290][T14763] EXT4-fs (loop0): 1 orphan inode deleted [ 789.384118][T14763] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 789.393109][T14763] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038 (0x7fffffff) [ 789.549881][T12276] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.558997][T12276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.566859][T12276] usb 5-1: Product: syz [ 789.570852][T12276] usb 5-1: Manufacturer: syz [ 789.575258][T12276] usb 5-1: SerialNumber: syz [ 789.582397][T14769] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 789.639831][T12622] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 789.640311][T12276] cdc_ncm 5-1:1.0: skipping garbage [ 789.652330][T12276] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 789.658854][T12276] cdc_ncm 5-1:1.0: bind() failure [ 789.879854][T12622] usb 2-1: Using ep0 maxpacket: 8 [ 789.923193][T11577] EXT4-fs (loop0): unmounting filesystem. [ 789.963838][T14778] loop0: detected capacity change from 0 to 2048 [ 789.975749][T14778] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.3693: casefold flag without casefold feature [ 789.989590][T14780] xt_CT: No such helper "snmp_trap" [ 789.994950][T14778] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 789.999882][T12622] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.005869][T14778] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 790.024639][T14778] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 790.026722][T12622] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 790.051911][T12622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.061359][T12622] usb 2-1: config 0 descriptor?? [ 790.067838][T11577] EXT4-fs (loop0): unmounting filesystem. [ 790.144511][T12622] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 790.523247][T14787] loop2: detected capacity change from 0 to 512 [ 790.542554][T14787] EXT4-fs (loop2): 1 orphan inode deleted [ 790.548345][T14787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 790.557373][T14787] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038 (0x7fffffff) [ 791.129754][T14798] loop0: detected capacity change from 0 to 40427 [ 791.157191][T14798] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 791.163553][T14798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 791.181280][T14798] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 791.210929][T14798] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 791.217993][T14798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 791.952219][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 792.068778][T12622] usb 5-1: USB disconnect, device number 91 [ 792.094041][T11577] syz-executor: attempt to access beyond end of device [ 792.094041][T11577] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 792.104900][T14808] loop2: detected capacity change from 0 to 512 [ 792.140977][T14810] loop4: detected capacity change from 0 to 256 [ 792.165005][T14810] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 792.165264][T14808] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 792.197202][T14808] EXT4-fs (loop2): 1 truncate cleaned up [ 792.211198][T14808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 792.425372][T14821] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 792.452836][T12276] usb 2-1: USB disconnect, device number 74 [ 793.547617][ T603] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 793.555540][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 793.561318][T14826] loop1: detected capacity change from 0 to 512 [ 793.580111][T14826] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 793.590914][T14829] loop2: detected capacity change from 0 to 2048 [ 793.598250][T14829] EXT4-fs error (device loop2): __ext4_fill_super:5386: inode #2: comm syz.2.3704: casefold flag without casefold feature [ 793.611093][T14829] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 793.612351][T14826] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 793.621813][T14829] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 793.635332][T14829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 793.650378][T14826] System zones: 0-2, 18-18, 34-34 [ 793.663537][T14826] EXT4-fs (loop1): 1 orphan inode deleted [ 793.670151][T14836] loop0: detected capacity change from 0 to 512 [ 793.676348][T14826] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 793.685670][T14826] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038 (0x7fffffff) [ 793.689411][ T3034] EXT4-fs (loop2): unmounting filesystem. [ 793.724344][T14836] EXT4-fs (loop0): 1 orphan inode deleted [ 793.730627][T14836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 793.739692][T14836] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038 (0x7fffffff) [ 793.979927][T12622] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 794.210308][T14843] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.239867][ T603] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.337042][T12491] EXT4-fs (loop1): unmounting filesystem. [ 794.349937][T12622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.354253][T14846] loop1: detected capacity change from 0 to 512 [ 794.362651][T12622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.367860][T14846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 794.381245][T12622] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 794.394817][T12622] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.401949][T14846] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3708: bg 0: block 248: padding at end of block bitmap is not set [ 794.403476][T12622] usb 3-1: config 0 descriptor?? [ 794.420512][T14846] __quota_error: 63 callbacks suppressed [ 794.420530][T14846] Quota error (device loop1): write_blk: dquota write failed [ 794.435642][ T603] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 794.449004][ T603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.457303][T14846] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 794.467729][ T603] usb 4-1: Product: syz [ 794.471914][ T603] usb 4-1: Manufacturer: syz [ 794.476386][T14846] EXT4-fs error (device loop1): ext4_acquire_dquot:6764: comm syz.1.3708: Failed to acquire dquot type 1 [ 794.488252][ T603] usb 4-1: SerialNumber: syz [ 794.493626][ T603] usb 4-1: config 0 descriptor?? [ 794.537035][T11577] EXT4-fs (loop0): unmounting filesystem. [ 794.543539][T14846] EXT4-fs (loop1): 1 truncate cleaned up [ 794.549732][T14846] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 794.559385][T14846] ext4 filesystem being mounted at /126/bus supports timestamps until 2038 (0x7fffffff) [ 794.587018][T14850] loop4: detected capacity change from 0 to 40427 [ 794.612849][T14850] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 794.619194][T14850] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 794.639613][T14850] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 794.679909][T14850] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 794.687025][T14850] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 795.077242][T12622] petalynx 0003:18B1:0037.009C: collection stack underflow [ 795.370676][T12491] EXT4-fs (loop1): unmounting filesystem. [ 795.387537][T12622] petalynx 0003:18B1:0037.009C: item 0 1 0 12 parsing failed [ 795.394593][ T603] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 795.405161][T14276] syz-executor: attempt to access beyond end of device [ 795.405161][T14276] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 795.414619][T12622] petalynx 0003:18B1:0037.009C: parse failed [ 795.422809][ T603] usb 4-1: USB disconnect, device number 64 [ 795.431952][T12622] petalynx: probe of 0003:18B1:0037.009C failed with error -22 [ 795.449148][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 795.471895][T12622] usb 3-1: USB disconnect, device number 77 [ 795.662479][T14872] loop1: detected capacity change from 0 to 256 [ 795.758409][T14875] loop0: detected capacity change from 0 to 512 [ 795.767127][T14875] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 795.775487][T14875] EXT4-fs (loop0): 1 truncate cleaned up [ 795.780984][T14875] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 796.479078][T14879] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 796.650985][T14884] loop1: detected capacity change from 0 to 2048 [ 796.733361][T14890] loop3: detected capacity change from 0 to 512 [ 796.740279][T11577] EXT4-fs (loop0): unmounting filesystem. [ 796.741016][T14890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 796.755645][T14884] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.3717: casefold flag without casefold feature [ 796.769006][T14884] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 797.139556][T14884] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 797.197670][T14890] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000] [ 797.289305][T14890] System zones: 0-2, 18-18, 34-34 [ 797.305577][T14884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 797.320771][T14890] EXT4-fs (loop3): 1 orphan inode deleted [ 797.326414][T14890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 797.335515][T14890] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038 (0x7fffffff) [ 797.348822][T12491] EXT4-fs (loop1): unmounting filesystem. [ 797.680728][T14904] loop1: detected capacity change from 0 to 40427 [ 797.700040][T14904] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 797.711863][T14904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 797.771208][T14904] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 798.151402][T14904] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 798.159384][T14904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 798.163166][T14922] loop4: detected capacity change from 0 to 256 [ 798.206367][T14915] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.213510][T14915] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.221586][T14915] device bridge_slave_0 entered promiscuous mode [ 798.228837][T14915] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.241264][T14915] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.248720][T14915] device bridge_slave_1 entered promiscuous mode [ 798.330863][T14915] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.337811][T14915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.344992][T14915] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.351791][T14915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.383012][T14927] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 798.681451][T12491] syz-executor: attempt to access beyond end of device [ 798.681451][T12491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 798.716362][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 798.728396][T14930] loop0: detected capacity change from 0 to 512 [ 798.740478][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.747754][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.769900][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 798.778238][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 798.793401][T14930] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 798.800399][T12622] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.804932][T14930] EXT4-fs (loop0): 1 truncate cleaned up [ 798.808081][T12622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.808310][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.823973][T14930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 798.832772][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.850181][T12622] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.857061][T12622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.862445][T12270] EXT4-fs (loop3): unmounting filesystem. [ 798.944036][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.952035][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 798.959913][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 798.967717][T12622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 798.989180][T14935] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 798.992698][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 799.074811][T14939] xt_CT: No such helper "snmp_trap" [ 799.097496][ T1314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 799.119929][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 799.131178][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 799.141953][T14942] loop4: detected capacity change from 0 to 512 [ 799.405882][T14942] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 799.436962][T14915] device veth0_vlan entered promiscuous mode [ 799.446545][ T2666] device bridge_slave_1 left promiscuous mode [ 799.447195][T14942] EXT4-fs (loop4): 1 truncate cleaned up [ 799.458147][T14942] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 799.460980][ T2666] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.486540][ T2666] device dummy0 left promiscuous mode [ 799.492934][ T2666] device veth1_macvtap left promiscuous mode [ 799.498995][ T2666] device veth0_vlan left promiscuous mode [ 799.595296][T11577] EXT4-fs (loop0): unmounting filesystem. [ 799.635439][T14948] loop0: detected capacity change from 0 to 2048 [ 799.664981][T14949] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 799.673737][T14948] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.3732: casefold flag without casefold feature [ 799.691045][T14948] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 799.717039][T14948] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 799.736964][T14948] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 799.766414][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 799.778016][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 799.801874][T11577] EXT4-fs (loop0): unmounting filesystem. [ 799.849578][T14915] device veth1_macvtap entered promiscuous mode [ 799.879208][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 799.897255][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 799.906117][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 799.919392][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 799.929061][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 799.937330][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 799.945728][T12276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 800.477128][T14276] EXT4-fs (loop4): unmounting filesystem. [ 800.521236][T14969] loop4: detected capacity change from 0 to 512 [ 800.562213][T14969] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 801.731994][T14981] loop3: detected capacity change from 0 to 512 [ 801.763401][T14984] loop1: detected capacity change from 0 to 2048 [ 801.777554][T14981] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 801.781220][T14984] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.3742: casefold flag without casefold feature [ 801.791058][T14981] EXT4-fs (loop3): 1 truncate cleaned up [ 801.798882][T14969] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3738: bg 0: block 248: padding at end of block bitmap is not set [ 801.804291][T14981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 801.819385][T14969] Quota error (device loop4): write_blk: dquota write failed [ 801.827419][T14984] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 801.834713][T14969] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 801.855748][T14969] EXT4-fs error (device loop4): ext4_acquire_dquot:6764: comm syz.4.3738: Failed to acquire dquot type 1 [ 801.867987][T14984] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 801.875844][T14984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 801.886928][T14969] EXT4-fs (loop4): 1 truncate cleaned up [ 801.898768][T14969] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 801.945795][T14969] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff) [ 801.998698][T14991] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 802.037690][T12491] EXT4-fs (loop1): unmounting filesystem. [ 802.160036][T14994] device dummy0 entered promiscuous mode [ 802.370204][T14276] EXT4-fs (loop4): unmounting filesystem. [ 802.745869][T12270] EXT4-fs (loop3): unmounting filesystem. [ 802.892225][T15009] syz.3.3748[15009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.892316][T15009] syz.3.3748[15009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.956593][T15012] incfs: Can't find or create .index dir in ./file0 [ 803.002633][T15012] incfs: mount failed -14 [ 803.299856][T15021] xt_CT: No such helper "snmp_trap" [ 803.746680][T15029] loop3: detected capacity change from 0 to 2048 [ 803.768985][T15029] EXT4-fs error (device loop3): __ext4_fill_super:5386: inode #2: comm syz.3.3753: casefold flag without casefold feature [ 803.782126][T15029] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 803.792847][T15029] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 803.800541][T15029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 803.825262][T12270] EXT4-fs (loop3): unmounting filesystem. [ 803.851386][T15033] loop4: detected capacity change from 0 to 512 [ 803.887960][T15033] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 803.905070][T15040] loop1: detected capacity change from 0 to 256 [ 803.914381][T15040] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 803.946905][T15033] EXT4-fs (loop4): 1 truncate cleaned up [ 803.969091][T15033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 804.029408][T15049] incfs: Can't find or create .index dir in ./file0 [ 804.036133][T15049] incfs: mount failed -14 [ 804.061516][T15051] loop3: detected capacity change from 0 to 512 [ 804.093042][T15051] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 804.101875][T15051] EXT4-fs (loop3): orphan cleanup on readonly fs [ 804.108303][T15051] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 804.123333][T15051] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 804.136547][T15051] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #16: comm syz.3.3762: casefold flag without casefold feature [ 804.150186][T15051] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3762: bg 0: block 40: padding at end of block bitmap is not set [ 804.164720][T15051] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 804.173860][T15051] EXT4-fs (loop3): 1 truncate cleaned up [ 804.179508][T15051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 804.828883][T15055] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 804.905681][T14276] EXT4-fs (loop4): unmounting filesystem. [ 805.005057][T15071] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3766'. [ 805.019854][T15071] netlink: 'syz.4.3766': attribute type 1 has an invalid length. [ 805.073571][T12270] EXT4-fs (loop3): unmounting filesystem. [ 805.275676][T15076] xt_CT: No such helper "snmp_trap" [ 805.389922][T12276] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 805.666266][T12276] usb 3-1: Using ep0 maxpacket: 8 [ 805.679963][ T1314] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 805.824151][T15089] incfs: Can't find or create .index dir in ./file0 [ 805.830857][T15089] incfs: mount failed -14 [ 805.859944][T12276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.871160][T12276] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 805.886252][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.899965][T12276] usb 3-1: config 0 descriptor?? [ 805.940549][T12276] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 807.131050][ T1314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.170196][ T1314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.444432][T15103] loop0: detected capacity change from 0 to 1024 [ 807.458790][ T1314] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 807.476275][T15103] EXT4-fs: Ignoring removed orlov option [ 807.495772][T15106] loop3: detected capacity change from 0 to 512 [ 807.502006][T15103] journal_path: Lookup failure for './bus' [ 807.509068][T15103] EXT4-fs: error: could not find journal device path [ 807.520248][T15106] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 807.521115][ T1314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.531207][T15106] EXT4-fs (loop3): 1 truncate cleaned up [ 807.541600][T15106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 807.613935][ T1314] usb 5-1: config 0 descriptor?? [ 807.691306][T15112] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 808.090629][ T1314] appleir 0003:05AC:8243.009D: report_id 0 is invalid [ 808.097392][ T1314] appleir 0003:05AC:8243.009D: item 0 0 1 8 parsing failed [ 808.104692][ T1314] appleir 0003:05AC:8243.009D: parse failed [ 808.110863][ T1314] appleir: probe of 0003:05AC:8243.009D failed with error -22 [ 808.147388][T15117] loop0: detected capacity change from 0 to 512 [ 808.154760][T15117] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 808.162945][T15117] EXT4-fs (loop0): orphan cleanup on readonly fs [ 808.169353][T15117] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 808.184179][T15117] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 808.191202][T15117] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.3779: casefold flag without casefold feature [ 808.204322][T15117] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3779: bg 0: block 40: padding at end of block bitmap is not set [ 808.218660][T15117] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 808.227615][T15117] EXT4-fs (loop0): 1 truncate cleaned up [ 808.233286][T15117] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 808.292164][T12276] usb 5-1: USB disconnect, device number 92 [ 808.340187][T12270] EXT4-fs (loop3): unmounting filesystem. [ 808.396024][T15123] loop3: detected capacity change from 0 to 256 [ 808.401426][T15124] loop1: detected capacity change from 0 to 512 [ 808.423471][T15124] EXT4-fs (loop1): 1 orphan inode deleted [ 808.429182][T15124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 808.438884][T15124] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038 (0x7fffffff) [ 810.005382][T11577] EXT4-fs (loop0): unmounting filesystem. [ 810.018428][T12491] EXT4-fs (loop1): unmounting filesystem. [ 810.045061][T12508] usb 3-1: USB disconnect, device number 78 [ 810.060702][T15138] loop0: detected capacity change from 0 to 256 [ 810.519361][T15138] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 812.094753][T15170] loop0: detected capacity change from 0 to 256 [ 812.108552][T15169] loop4: detected capacity change from 0 to 512 [ 812.139868][T12276] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 812.158047][T15169] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 812.166831][T15169] EXT4-fs (loop4): orphan cleanup on readonly fs [ 812.174103][T15169] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 812.189116][T15169] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 812.196502][T15169] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.3793: casefold flag without casefold feature [ 812.214898][T15169] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3793: bg 0: block 40: padding at end of block bitmap is not set [ 812.229404][T15169] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 812.238384][T15169] EXT4-fs (loop4): 1 truncate cleaned up [ 812.244149][T15169] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 812.578859][T15179] loop3: detected capacity change from 0 to 512 [ 812.595948][T15179] EXT4-fs (loop3): 1 orphan inode deleted [ 812.601706][T15179] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 812.610822][T15179] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038 (0x7fffffff) [ 812.953112][T14276] EXT4-fs (loop4): unmounting filesystem. [ 813.059879][T12276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.070694][T12276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.080786][T12276] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.159302][T15190] loop0: detected capacity change from 0 to 40427 [ 813.226451][T15190] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 813.241616][T15190] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 813.263427][T15190] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 813.395794][T12276] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 813.407675][T12276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.428123][T15190] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 813.439820][T15190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 813.445835][T12276] usb 2-1: config 0 descriptor?? [ 813.455803][T12270] EXT4-fs (loop3): unmounting filesystem. [ 813.625562][T15205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 813.789818][ T6] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 813.855854][T15208] loop4: detected capacity change from 0 to 256 [ 813.864862][T15208] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 813.891970][T11577] syz-executor: attempt to access beyond end of device [ 813.891970][T11577] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 813.924920][T12276] holtek_mouse 0003:04D9:A070.009E: item fetching failed at offset 1/5 [ 813.948345][T12276] holtek_mouse 0003:04D9:A070.009E: hid parse failed: -22 [ 813.957415][T12276] holtek_mouse: probe of 0003:04D9:A070.009E failed with error -22 [ 813.999297][T15213] loop0: detected capacity change from 0 to 512 [ 814.007608][T15213] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 814.015978][T15213] EXT4-fs (loop0): 1 truncate cleaned up [ 814.022125][T15210] kvm: pic: non byte write [ 814.022179][T15213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 814.136359][ T39] usb 2-1: USB disconnect, device number 75 [ 814.175737][T15216] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 814.460019][ T6] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 814.471126][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.481813][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.491462][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 814.504416][ T6] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 814.513233][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.521868][ T6] usb 4-1: config 0 descriptor?? [ 814.710182][T12276] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 814.769352][T15225] loop1: detected capacity change from 0 to 256 [ 814.830373][T15227] loop4: detected capacity change from 0 to 512 [ 814.846570][T15227] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 814.855174][T15227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 814.861914][T15227] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 814.876794][T15227] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 814.887727][T11577] EXT4-fs (loop0): unmounting filesystem. [ 814.894482][T15227] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.3808: casefold flag without casefold feature [ 814.911660][T15227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.3808: bg 0: block 40: padding at end of block bitmap is not set [ 814.926604][T15227] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 814.952432][T15227] EXT4-fs (loop4): 1 truncate cleaned up [ 814.958007][T15227] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 815.091222][ T6] nintendo 0003:057E:2009.009F: unknown main item tag 0x0 [ 815.098238][ T6] nintendo 0003:057E:2009.009F: unknown main item tag 0x0 [ 815.105346][ T6] nintendo 0003:057E:2009.009F: item fetching failed at offset 2/5 [ 815.113284][ T6] nintendo 0003:057E:2009.009F: HID parse failed [ 815.119583][ T6] nintendo 0003:057E:2009.009F: probe - fail = -22 [ 815.128136][ T6] nintendo: probe of 0003:057E:2009.009F failed with error -22 [ 815.135722][T12276] usb 3-1: Using ep0 maxpacket: 16 [ 815.201808][ T6] usb 4-1: USB disconnect, device number 65 [ 815.279948][T12276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.290797][T12276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.505516][T12276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.519923][T12276] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 815.528771][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.537564][T12276] usb 3-1: config 0 descriptor?? [ 815.672277][T14276] EXT4-fs (loop4): unmounting filesystem. [ 815.698479][T15246] syz.4.3813[15246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.698567][T15246] syz.4.3813[15246] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 815.737084][T15244] loop1: detected capacity change from 0 to 40427 [ 815.775958][T15244] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 815.782396][T15244] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 815.797484][T15244] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 815.856996][T15244] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 815.864002][T15244] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 815.949097][T15250] loop3: detected capacity change from 0 to 40427 [ 815.956064][T15250] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 815.963819][T15250] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 815.974032][T15250] F2FS-fs (loop3): Found nat_bits in checkpoint [ 815.994278][T15250] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 816.001326][T15250] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 816.002782][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.023579][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.072898][T15262] syz.0.3815[15262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.073029][T15262] syz.0.3815[15262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.076972][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.087275][T15260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3812'. [ 816.095919][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.119208][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.127516][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.139522][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.156499][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.163788][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.170956][T12276] microsoft 0003:045E:07DA.00A0: unknown main item tag 0x0 [ 816.190718][T12276] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.00A0/input/input25 [ 816.202997][T15218] syz.2.3804[15218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.203080][T15218] syz.2.3804[15218] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 816.210684][T12276] microsoft 0003:045E:07DA.00A0: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 816.309918][ T39] usb 3-1: USB disconnect, device number 79 [ 816.558401][T15274] loop4: detected capacity change from 0 to 512 [ 816.575604][T12491] syz-executor: attempt to access beyond end of device [ 816.575604][T12491] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 816.587580][T15274] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 816.606721][T15271] kvm: pic: non byte write [ 816.631027][T15274] EXT4-fs (loop4): 1 truncate cleaned up [ 816.636520][T15274] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 816.753628][T15282] overlayfs: statfs failed on './file0' [ 816.769166][T15284] loop3: detected capacity change from 0 to 256 [ 817.144405][T15286] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 817.545124][T14276] EXT4-fs (loop4): unmounting filesystem. [ 817.559089][T15292] loop4: detected capacity change from 0 to 128 [ 817.570819][T15292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 817.580751][T15292] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 817.719900][ T6] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 817.836033][T15297] loop0: detected capacity change from 0 to 512 [ 818.071678][T15297] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 818.081028][T14276] EXT4-fs (loop4): unmounting filesystem. [ 823.969829][ T6] usb 2-1: device descriptor read/all, error -110 [ 825.959817][ T6] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 834.969843][T15297] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3827: bg 0: block 248: padding at end of block bitmap is not set [ 835.941887][ T6] usb 2-1: device descriptor read/64, error -110 [ 836.979944][T15297] Quota error (device loop0): write_blk: dquota write failed [ 839.951126][ T6] usb 2-1: device descriptor read/64, error -32 [ 840.940118][ T6] usb usb2-port1: attempt power cycle [ 840.979810][T15297] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 840.989566][T15297] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.3827: Failed to acquire dquot type 1 [ 844.970157][T15297] EXT4-fs (loop0): 1 truncate cleaned up [ 844.975646][T15297] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 846.958007][T15297] ext4 filesystem being mounted at /193/bus supports timestamps until 2038 (0x7fffffff) [ 848.969800][ T6] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 854.969835][ T6] usb 2-1: device descriptor read/8, error -32 [ 858.985121][ T6] usb 2-1: device descriptor read/8, error -32 [ 871.934093][ T6] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 881.936373][ T6] usb 2-1: device descriptor read/8, error -32 [ 887.969780][ T6] usb 2-1: device descriptor read/8, error -32 [ 891.950934][ T6] usb usb2-port1: unable to enumerate USB device [ 918.109731][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 918.116515][ C1] (detected by 1, t=10002 jiffies, g=88385, q=3398 ncpus=2) [ 918.123750][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295029038-4295019036), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 918.136917][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g88385 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 918.148044][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 918.157921][ C1] rcu: RCU grace-period kthread stack dump: [ 918.163994][ C1] task:rcu_preempt state:R running task stack:27688 pid:14 ppid:2 flags:0x00004000 [ 918.174611][ C1] Call Trace: [ 918.177699][ C1] [ 918.180480][ C1] __schedule+0xcb5/0x1560 [ 918.184731][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 918.190206][ C1] ? release_firmware_map_entry+0x191/0x191 [ 918.195936][ C1] ? __kasan_check_write+0x14/0x20 [ 918.200880][ C1] schedule+0xc3/0x180 [ 918.204801][ C1] schedule_timeout+0x18c/0x380 [ 918.209471][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 918.214503][ C1] ? console_conditional_schedule+0x10/0x10 [ 918.220231][ C1] ? update_process_times+0x1b0/0x1b0 [ 918.225444][ C1] ? prepare_to_swait_event+0x308/0x320 [ 918.230830][ C1] rcu_gp_fqs_loop+0x2ed/0x10a0 [ 918.235598][ C1] ? _raw_spin_unlock_irq+0x4d/0x70 [ 918.240632][ C1] ? rcu_gp_init+0xc7f/0xfa0 [ 918.245234][ C1] ? rcu_gp_init+0xfa0/0xfa0 [ 918.249769][ C1] rcu_gp_kthread+0xa3/0x3a0 [ 918.254376][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 918.259823][ C1] ? set_cpus_allowed_ptr+0xa4/0xe0 [ 918.264867][ C1] ? __kasan_check_read+0x11/0x20 [ 918.269813][ C1] ? __kthread_parkme+0x12d/0x180 [ 918.274671][ C1] kthread+0x26d/0x300 [ 918.278572][ C1] ? queued_spin_lock_slowpath+0x50/0x50 [ 918.284043][ C1] ? kthread_blkcg+0xd0/0xd0 [ 918.288469][ C1] ret_from_fork+0x1f/0x30 [ 918.292726][ C1] [ 918.295672][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 918.302016][ C1] Sending NMI from CPU 1 to CPUs 0: [ 918.307060][ C0] NMI backtrace for cpu 0 [ 918.307078][ C0] CPU: 0 PID: 15290 Comm: syz.2.3824 Not tainted 6.1.99-syzkaller-00089-g5a912daf8731 #0 [ 918.307097][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 918.307105][ C0] RIP: 0010:do_sigaltstack+0x3c3/0x630 [ 918.307132][ C0] Code: 00 4c 39 f3 4c 8b 7d a8 75 6c 48 8b 45 c8 48 8d 98 98 08 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 43 7d 73 00 48 8b 1b 48 89 df 4c 89 fe e8 b5 3f [ 918.307146][ C0] RSP: 0018:ffffc900023c7d28 EFLAGS: 00000246 [ 918.307162][ C0] RAX: 1ffff11023c9e623 RBX: ffff88811e4f3118 RCX: dffffc0000000000 [ 918.307175][ C0] RDX: ffff88811e4f2880 RSI: 0000000000000000 RDI: 0000000000000000 [ 918.307186][ C0] RBP: ffffc900023c7d90 R08: ffffffff8149656a R09: fffff52000478fbb [ 918.307197][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000002 [ 918.307208][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 918.307218][ C0] FS: 00007f6ec26ca6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 918.307232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.307244][ C0] CR2: 00007fd8cc628f40 CR3: 00000001398e7000 CR4: 00000000003506b0 [ 918.307261][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 918.307270][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 918.307281][ C0] Call Trace: [ 918.307286][ C0] [ 918.307292][ C0] ? show_regs+0x58/0x60 [ 918.307309][ C0] ? nmi_cpu_backtrace+0x285/0x2f0 [ 918.307328][ C0] ? nmi_trigger_cpumask_backtrace+0x3c0/0x3c0 [ 918.307347][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307364][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307382][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 918.307399][ C0] ? nmi_handle+0xa7/0x280 [ 918.307415][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307432][ C0] ? default_do_nmi+0x69/0x160 [ 918.307450][ C0] ? exc_nmi+0xad/0x100 [ 918.307465][ C0] ? end_repeat_nmi+0x16/0x31 [ 918.307483][ C0] ? do_sigaltstack+0x39a/0x630 [ 918.307501][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307518][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307536][ C0] ? do_sigaltstack+0x3c3/0x630 [ 918.307554][ C0] [ 918.307558][ C0] [ 918.307566][ C0] restore_altstack+0x107/0x150 [ 918.307583][ C0] ? __ia32_sys_sigaltstack+0x260/0x260 [ 918.307602][ C0] ? bpf_trace_run2+0x138/0x290 [ 918.307619][ C0] __do_sys_rt_sigreturn+0x160/0x1e0 [ 918.307639][ C0] ? x32_copy_siginfo_to_user+0x270/0x270 [ 918.307659][ C0] ? __bpf_trace_sys_enter+0x62/0x70 [ 918.307678][ C0] x64_sys_call+0x91/0x9a0 [ 918.307695][ C0] do_syscall_64+0x3b/0xb0 [ 918.307709][ C0] ? clear_bhb_loop+0x55/0xb0 [ 918.307733][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.307749][ C0] RIP: 0033:0x7f6ec197dff9 [ 918.307761][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 918.307773][ C0] RSP: 002b:00007f6ec26ca0e8 EFLAGS: 00000246 [ 918.307786][ C0] RAX: fffffffffffffffc RBX: 00007f6ec1b35f88 RCX: 00007f6ec197dff9 [ 918.307797][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f6ec1b35f88 [ 918.307807][ C0] RBP: 00007f6ec1b35f80 R08: 0000000000000000 R09: 0000000000000000 [ 918.307817][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6ec1b35f8c [ 918.307828][ C0] R13: 0000000000000000 R14: 00007ffd7eec0900 R15: 00007ffd7eec09e8 [ 918.307842][ C0] SYZFAIL: failed to send rpc fd=3 want=7136 sent=0 n=-1 (errno 32: Broken pipe) [ 1001.315622][T15297] EXT4-fs (loop0): unmounting filesystem. [ 1001.710241][ T1470] device bridge_slave_1 left promiscuous mode [ 1001.716162][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.723436][ T1470] device bridge_slave_0 left promiscuous mode [ 1001.729515][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.737316][ T1470] device dummy0 left promiscuous mode [ 1001.742539][ T1470] device veth1_macvtap left promiscuous mode [ 1001.748410][ T1470] device veth0_vlan left promiscuous mode [ 1002.590464][ T1470] device bridge_slave_1 left promiscuous mode [ 1002.596376][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.604092][ T1470] device bridge_slave_1 left promiscuous mode [ 1002.610043][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.617445][ T1470] device bridge_slave_1 left promiscuous mode [ 1002.623422][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.630792][ T1470] device bridge_slave_1 left promiscuous mode [ 1002.636677][ T1470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.643986][ T1470] device bridge_slave_0 left promiscuous mode [ 1002.649965][ T1470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.657659][ T1470] device veth1_macvtap left promiscuous mode [ 1002.663522][ T1470] device veth0_vlan left promiscuous mode [ 1002.669296][ T1470] device dummy0 left promiscuous mode [ 1002.674516][ T1470] device veth1_macvtap left promiscuous mode [ 1002.680374][ T1470] device veth0_vlan left promiscuous mode [ 1002.686112][ T1470] device veth1_macvtap left promiscuous mode [ 1002.692072][ T1470] device veth0_vlan left promiscuous mode [ 1002.697899][ T1470] device veth1_macvtap left promiscuous mode [ 1002.703756][ T1470] device veth0_vlan left promiscuous mode