last executing test programs: 3m16.466706283s ago: executing program 32 (id=1078): syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x200) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 1m27.764005891s ago: executing program 33 (id=1737): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0xb, 0x2, "6594"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m22.175554616s ago: executing program 0 (id=1775): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x600}}, {@unhide}, {@utf8}, {@utf8}, {@cruft}, {@dmode={'dmode', 0x3d, 0x6}}, {@unhide}]}, 0xfe, 0x688, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e44098082e0c2007f79b00000001090222"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08"], 0x6f4}}, 0x0) 1m20.553135417s ago: executing program 0 (id=1786): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x64, 0x0, 0x1a, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2}, "b52c42c671cf"}}}}}}, 0x0) 1m20.237146829s ago: executing program 0 (id=1789): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 1m19.910728437s ago: executing program 0 (id=1793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(0x0, 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, 0x0) socket$key(0xf, 0x3, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) capset(0x0, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 1m19.360792101s ago: executing program 0 (id=1797): openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x208c1, 0x2) 1m19.010845681s ago: executing program 0 (id=1799): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1) 1m18.48701792s ago: executing program 34 (id=1799): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1) 41.407410969s ago: executing program 3 (id=2001): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00-'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) 40.645024376s ago: executing program 3 (id=2008): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @random="cea0300a1672"}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 40.332967128s ago: executing program 3 (id=2011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001280)}, {0x0}], 0x2}, 0x8010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 40.186049981s ago: executing program 2 (id=2013): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 40.087695538s ago: executing program 3 (id=2014): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(0x0, 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 39.624780696s ago: executing program 3 (id=2016): socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 39.139938564s ago: executing program 3 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 38.752546815s ago: executing program 35 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 38.56119183s ago: executing program 2 (id=2024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 38.215183535s ago: executing program 2 (id=2027): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 37.972485501s ago: executing program 2 (id=2029): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(0x0, 0xc40, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 37.482111191s ago: executing program 6 (id=2031): socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 37.150578385s ago: executing program 2 (id=2033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 36.623581468s ago: executing program 6 (id=2036): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 35.077148109s ago: executing program 6 (id=2040): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0xb80, &(0x7f0000000c40)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x101042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) umount2(0x0, 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 35.021499153s ago: executing program 2 (id=2042): r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 33.948460738s ago: executing program 36 (id=2042): r0 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x24004090) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 33.935851181s ago: executing program 6 (id=2045): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000005c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 33.352166837s ago: executing program 6 (id=2047): socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 32.168046222s ago: executing program 6 (id=2051): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close_range(r0, 0xffffffffffffffff, 0x0) 31.487278545s ago: executing program 37 (id=2051): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x84880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close_range(r0, 0xffffffffffffffff, 0x0) 11.980773064s ago: executing program 8 (id=2104): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgid(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.889501331s ago: executing program 4 (id=2113): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x9, @remote, 0x7}}, [0x9, 0x9, 0xdd0, 0x10000, 0x200, 0x0, 0x5, 0xe37a, 0x53, 0x81, 0x6, 0x1000, 0x9, 0x789, 0x2]}, &(0x7f0000000040)=0x100) 9.531873004s ago: executing program 4 (id=2115): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 9.241701323s ago: executing program 8 (id=2116): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000300)={0x40, 0xb, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x20, 0xe, 0x5, "e7f0abc931"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.497686395s ago: executing program 4 (id=2121): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d90455a000000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00a7ea"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.543227141s ago: executing program 8 (id=2132): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) close(r1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 5.214985454s ago: executing program 4 (id=2134): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x600}}, {@unhide}, {@utf8}, {@utf8}, {@cruft}, {@dmode={'dmode', 0x3d, 0x6}}, {@unhide}]}, 0xfe, 0x688, &(0x7f0000000100)="$eJzs3V1vFOf1APCzBAvLfwn91VYIIUIm0EogEbO7DkZWbrpdj+1J1jurmXUEVykKdoQwSQupVLgKN2krtR8it/0Q7SeKets7qp3dhQW/rEOCl6DfbwXz7MzZec4Myxw99rwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABC19mq93qhFJ+tu3UwO1l4t8s1Dlo/X9+8XJof0G1Eb/In5+Tg7nHX2V88Xnxn8dTHOD9+dj/nBZD4e/9+Z///olydPjD9/SELH4uGjx/du7+5uP5h1IjOynnazMs82W+tpkpV5srK8XL+2sVYma1knLW+V/XQzaRdpq58XyeX2laSxsrKUpIu38q3u+mqrk45n3vigWa8vJx8v9tJWUebdax8vlu2NrNPJuutVzGDxIObG4Iv4SdZP+mlrM0l27u5uL01LchDUOEpQc1pQs95sNhrNZmP5+sr1G/X6yT0z6i+JPRGz/9IyWz/xERxe3YlR/Y9OZNGNrbgZyb6vdqxGEXlsHrB8ZFz/f3MtHba+2b/fyfo/rvJnny8+F1X9vzB8d+Gg+n9ALsf3ehiP4nHci9uxG7uxHQ9mntHxvtYjjW5kUUYeWWxGq5qTjOYksRLLsRz1+Cw2Yi3KSGItsuhEGmXcijL6kVbfqHYUkUYr+pFHEUlcjnZciSQasRIrsRRJpLEYtyKPrejGeqxGq1rLTtyt9vvSITk+C2ocJah5SJD6zw81v2fO6zmQwyt4Oq7/AAAAwFurVv30fTD+n4t3q9Za1knrs04LAAAA+AlVv/k/P5jMDVrvRs34HwAAAN42teoau1pELMR7w9b4SqjxDwHmZpwiAAAA8CNVv/+/MJgsDFrvRW3P+B8AAAD4mfvr1Hvsz/dO1f71nyiKudqT3s1f1+63BnGt++8MP1dN/vt0aNDur52rnR6tpJosnxy9a6fna6O7Xz67Cebo5ILvd6blUTs0gUkHJxB/j/eHMe/fGU7vjJcMe1lYyzrpYjvvfNSIVuv0iX56s/+nL+/+OarN/1t383Qtdu7ubi9+/tXunSqXJ4O1PLk/uoHinvso7pPLeNHX1f0Wqmsu9t3iuepCjFG/C8N+65Pbf2L48RM/YPu/jYvDmIsL8fRURCy8uP3zgz4biwdt/SiLRpXF/AudHmXLn2dxaRhz6fKl4WSfLJrTsmhO7v9X2hdHyGJpWhZLPzILgFnZmVKFansL/ysc5Y6nun8bl4cxl89VB9aT5/Y5otenHdHrr1jXx339M64MY66Mgw+qsYN+//FSVf1u8IHvDuy37DRrg134ztf3/xBnHj56/MHd+7e/2P5i+8tmc2m5/mG9fr0Zc9VmjCZqDwD7mP6MnakRtQ+njKp/8eyUgsX4PL6K3bgTV6urDaozDvZd60Ls/DZGpyFcnRi1Vl4atS5MPOHl6pRR3cLEg16OHrt0DP8SAHB8Lk6pw0ep/1enjLsXJk4pvDpldDxZywGA1yMtvq8t9P9SK4qs91ljZaXR6m+kSZG3P0mKbHU9TbJuPy3aG63uepr0iryft/POoPFptpqWSbnV6+VFP1nLi6SXl9nN6snvyejR72W62er2s3bZ66StMk3aebffaveT1axsJ72t33WyciMtqg+XvbSdrWXtVj/Lu0mZbxXtdDFJyjSdCMxW024/W8sGzW7SK7LNVnEr+TTvbG2myWpatous18+HKxz3lXXX8mKzWu3irHc2ALwhHj56fO/27u72g9fYiFOz3koAYNJElQYAAAAAAAAAAAAAAN5Qx3H931vY+OPPededejPS0JhJ45vfD//nTwue9ZEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPb6XwAAAP//2kFZhw==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e44098082e0c2007f79b00000001090222"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.832997679s ago: executing program 8 (id=2136): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000034c0)={0x2020}, 0x2020) 4.712166144s ago: executing program 5 (id=2137): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x15) 4.648603771s ago: executing program 9 (id=2138): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x20000000) 4.468133426s ago: executing program 8 (id=2139): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT=0x0], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) pwrite64(r1, &(0x7f0000000140), 0x0, 0xfecc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r0, 0x8, 0x4000, 0x4000) 4.291322186s ago: executing program 5 (id=2141): openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0) 4.164613593s ago: executing program 9 (id=2142): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3.750362578s ago: executing program 5 (id=2144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r3, r5, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[], 0x0) 3.678514054s ago: executing program 7 (id=2145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000014c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00-'], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) 3.363465296s ago: executing program 5 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file2\x00', 0x2a14c1c, &(0x7f0000000000)={[{@nouuid}, {@noalign}, {@gqnoenforce}]}, 0x1, 0xb9bf, &(0x7f0000006280)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 3.358275352s ago: executing program 4 (id=2147): unshare(0x22000400) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000240)="e7", 0x1, 0x7fffffffffffffff) 3.19272034s ago: executing program 7 (id=2148): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x0, 0x4000000000000000, 0x2c, 0x80000005, 0x1}) 2.81600968s ago: executing program 4 (id=2149): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="00002100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.80532097s ago: executing program 9 (id=2150): r0 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000003a0007010000000000000000037c"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="12000000130005000000000000000000"], 0x28}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @empty}, &(0x7f0000000380)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x80, 0x20, 0x3ff, 0x1, {{0x8, 0x4, 0x0, 0x2b, 0x20, 0x66, 0x0, 0x3, 0x2f, 0x0, @loopback, @remote, {[@timestamp={0x44, 0x8, 0x3b, 0x0, 0xa, [0x2]}, @noop]}}}}}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000340)="000088a8", 0x4, 0x14008b00, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0x97, 0x6, @multicast}, 0x14) 2.292422142s ago: executing program 5 (id=2151): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000004180)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) ftruncate(r0, 0x201f) write$cgroup_type(r1, 0x0, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x1046, 0x0, 0x1}, &(0x7f0000002500), 0x0) 2.140056913s ago: executing program 9 (id=2152): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10b, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) 2.131396118s ago: executing program 1 (id=2153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 1.996732421s ago: executing program 7 (id=2154): socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) sendmsg$nl_route(r0, 0x0, 0x20000000) 1.711881518s ago: executing program 9 (id=2155): socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, 0x0, 0x101142, 0xeaff) ioctl$FICLONERANGE(r0, 0x4020940d, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getpgid(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.632060083s ago: executing program 1 (id=2156): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x1, 0xab6, &(0x7f0000000ec0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e8b, 0x0) 1.580786522s ago: executing program 7 (id=2157): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x70010, 0x8, {}, {0x3, 0x8, 0x6, 0x6, 0x6, 0x7, "d75d5351"}, 0x0, 0x2, {0x0}, 0x401}) 1.263032297s ago: executing program 9 (id=2158): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000001600000705a3f6d2fb5b09"], 0x0) 1.240311499s ago: executing program 8 (id=2159): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8400, &(0x7f0000000840)={[{@block={'block', 0x3d, 0x600}}, {@unhide}, {@utf8}, {@utf8}, {@cruft}, {@dmode={'dmode', 0x3d, 0x6}}, {@unhide}]}, 0xfe, 0x688, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e44098082e0c2007f79b00000001090222"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.155937717s ago: executing program 7 (id=2160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x80000000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.000575391s ago: executing program 1 (id=2161): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) r0 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000140)={0x2, r0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1}}], 0x1, 0x15) 680.802729ms ago: executing program 1 (id=2162): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000001000)={'gretap0\x00', 0x5c, 0x7f}) 344.085231ms ago: executing program 1 (id=2163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x9, @remote, 0x7}}, [0x9, 0x9, 0xdd0, 0x10000, 0x200, 0x0, 0x5, 0xe37a, 0x53, 0x81, 0x6, 0x1000, 0x9, 0x789, 0x2]}, &(0x7f0000000040)=0x100) 217.443507ms ago: executing program 5 (id=2164): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0x1, 0x683, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbDbrbFqCmyZtQJVqNRIgIhI7VgrmQkAI5VChqhw4W4nTWNmkxXGRWyHq8PfaQw+cUDnkgjghcY9UOHCBW04gHyshcekFc1o0s7P2+i/rNPFu2s8nmn3vzZt57ze/2Zn9Y0Ub4DPryrk076fIlXOvrJTttXuznbV7s7f69SQTSVaTZpJGkuI/3W73w+RyUmwMU2wrd3h/ce61Bx+vfdRrNeul2r6x337b1NutJr9tDKxerZdMJTlSl5/AlvGufuLxio3ILyc5W5cwckeTdLf40V+f3ugZ0N5t72OHEiPweBXV6+a1f2xfP5kcry/08n1A71Wx95o9Jla3tCYeai8AAAB48gzzGfjz61nPSnHiEMIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAT4XVjd//L4tqafTrUyn6v//fqtelro+XFw+2+f3HFQcAAAAAAAAAHKIX17OelZzot7tF9Tf/l6rGqerxqbyVO1nIUs5nJfNZznKWMpNkcmCg1sr88vLSzBB7Xtx1z4v/J9CJumw/muMGAAAAAAAAgE+Zn+XK5t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgHBTJkV6R4u7A6sk0mkmOJWmVK1aTv/frT7L7ow4AAAAADsFEsp6VnOi3u0VOJXmu+g7gWN7K7SxnMcvpZCHXqu8Fep/6G2v3Zjtr92ZvlcvOcb/97wOFUY2Y3ncPu898ptqinetZrNacz9W8kU6upVHtWTpTx9MfdSCuY0nuljEV36oNGdm1uiyP/L263OHdAx3sXg74ZcpklZGjGxmZrmMrs/FM/8zsfoYOeHa2zzSTxmCwW2ZqbT2Yh8r58bosj+dXe+V8JLZn4uLAs++5/XOefPlPf/jhdF0fn0MazpG67FaP7Z2ZmB3IxPPDZOJG5/bNG9fvnHvSMrHDdJWJ0xvtK/lefpBzmcqrWcpifpz5LGchU/luVZuvT34xcMnvkanLW1qv7hXBb+rbd6t+hvZOVhnTg6Fjeqna90QW8/28kWtZyMvVv4uZyddzKZcyN3CGT+9/hqurvrHHVd/93I4DKAM/+5W60U7y67ocD2V4zwzkdfCeO1n1Da7ZzNLJIbJ0wHtj84t1pZzj53U5HrZnYmYgE8/un4nfVbeVO53bN5duzL853HQn36sr5XX0y2RqtDeS1rb6yfJkVa2tz46y79ld+2aqvlMbfY0dfac3+npX6uqeV2qrfg+3c6SLVd/zu/bNVn1nBvp2e78FwNg7/tXjrfa/2n9rf9D+RftG+5Vj35n4xsQLrRz989FvNqePfKnxQvHHfJCfbn7+BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt6dt9+5Od/pLCz1Kq0kVaXb7b67teuglWY9w0BXsfukj7qSqX8+VU6zS1f/58we4+zbK194Ojmsuca38t9ut1uvKfbY5vd/GZtEdWtjkboRVUZzPwIOz4XlW29euPP2O19bvDX/+sLrC7fnLl2am5679PLsheuLnYXp3uOoowQeh80X/VFHAgAAAAAAAAAAAAzrMP47waiPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiyXTmX5v0UmZk+P1221+7NdsqlX9/cspmkkaT4SVJ8mFxOb8nkwHDFXvO8vzj32oOP1z7aHKvZ376x337DWa2XTCU50ivvPqrxrtblvor9DqHYOMIyYWf7iYNR+18AAAD///fgA7k=") mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x9e5dcd702d5d2df9, 0x0) fcntl$setlease(r0, 0x400, 0x0) creat(0x0, 0x4) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) socket$nl_route(0x10, 0x3, 0x0) 97.933289ms ago: executing program 7 (id=2165): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a03000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 0s ago: executing program 1 (id=2166): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2000}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) kernel console output (not intermixed with test programs): 0xfbef5 [ 436.613126][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613171][ T5834] ? __lock_acquire+0x622/0x1c90 [ 436.613305][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613356][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613409][ T5834] f2fs_write_data_pages+0x4ad/0xd90 [ 436.613455][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 436.613515][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613571][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613621][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 436.613690][ T5834] do_writepages+0x27a/0x600 [ 436.613748][ T5834] ? __pfx_do_writepages+0x10/0x10 [ 436.613795][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 436.613851][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.613895][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 436.613954][ T5834] filemap_fdatawrite_wbc+0x104/0x160 [ 436.614009][ T5834] __filemap_fdatawrite_range+0xb9/0x100 [ 436.614053][ T5834] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 436.614150][ T5834] ? find_held_lock+0x2b/0x80 [ 436.614186][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.614231][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 436.614287][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.614340][ T5834] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 436.614400][ T5834] block_operations+0x2b0/0xfe0 [ 436.614452][ T5834] ? __pfx_block_operations+0x10/0x10 [ 436.614547][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.614593][ T5834] ? ktime_get+0x200/0x310 [ 436.614634][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.614677][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 436.614736][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.614779][ T5834] ? rcu_is_watching+0x12/0xc0 [ 436.614820][ T5834] f2fs_write_checkpoint+0x32b/0x5300 [ 436.614871][ T5834] ? kfree+0x2b8/0x6d0 [ 436.614925][ T5834] ? f2fs_stop_gc_thread+0x79/0xd0 [ 436.614971][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.615020][ T5834] ? rcu_is_watching+0x12/0xc0 [ 436.615054][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.615098][ T5834] ? kthread_stop+0x272/0x630 [ 436.615151][ T5834] kill_f2fs_super+0x3d6/0x490 [ 436.615191][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 436.615248][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.615310][ T5834] deactivate_locked_super+0xc1/0x1a0 [ 436.615352][ T5834] deactivate_super+0xde/0x100 [ 436.615393][ T5834] cleanup_mnt+0x225/0x450 [ 436.615438][ T5834] task_work_run+0x150/0x240 [ 436.615494][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 436.615546][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 436.615594][ T5834] ? __pfx___x64_sys_umount+0x10/0x10 [ 436.615649][ T5834] exit_to_user_mode_loop+0xec/0x130 [ 436.615705][ T5834] do_syscall_64+0x426/0xfa0 [ 436.615743][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.615780][ T5834] RIP: 0033:0x7f91e7d902f7 [ 436.615809][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 436.615845][ T5834] RSP: 002b:00007ffeb9dc45d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 436.615881][ T5834] RAX: 0000000000000000 RBX: 00007f91e7e11d7d RCX: 00007f91e7d902f7 [ 436.615905][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb9dc4690 [ 436.615929][ T5834] RBP: 00007ffeb9dc4690 R08: 0000000000000000 R09: 0000000000000000 [ 436.615952][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb9dc5720 [ 436.615977][ T5834] R13: 00007f91e7e11d7d R14: 000000000006a889 R15: 00007ffeb9dc5760 [ 436.616036][ T5834] [ 436.623394][ T5834] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 436.931400][ T6005] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 437.151451][T11723] loop3: detected capacity change from 0 to 32768 [ 437.329007][T11723] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 437.427315][T11748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 437.435237][T11723] XFS (loop3): Ending clean mount [ 437.446610][ T6005] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 437.456148][ T6005] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.479200][T11723] XFS (loop3): Quotacheck needed: Please wait. [ 437.485525][ T6005] usb 8-1: Product: syz [ 437.496946][ T6005] usb 8-1: Manufacturer: syz [ 437.511732][ T6005] usb 8-1: SerialNumber: syz [ 437.588749][T11723] XFS (loop3): Quotacheck: Done. [ 437.745364][ T5844] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 437.873162][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 437.925146][T11755] bond0: entered promiscuous mode [ 437.960738][T11755] bond_slave_0: entered promiscuous mode [ 437.995091][T11755] bond_slave_1: entered promiscuous mode [ 438.017286][T11755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 438.071256][T11755] bond0: left promiscuous mode [ 438.076133][T11755] bond_slave_0: left promiscuous mode [ 438.102834][T11755] bond_slave_1: left promiscuous mode [ 438.561219][ T974] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 438.694819][ T974] usb 5-1: device descriptor read/64, error -71 [ 438.701234][ T5984] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 438.841168][ T5984] usb 7-1: device descriptor read/64, error -71 [ 438.941453][ T974] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 439.065537][ T5934] kernel read not supported for file /dsp (pid: 5934 comm: kworker/0:5) [ 439.091455][ T5984] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 439.099203][ T974] usb 5-1: device descriptor read/64, error -71 [ 439.212192][ T974] usb usb5-port1: attempt power cycle [ 439.231296][ T5984] usb 7-1: device descriptor read/64, error -71 [ 439.252443][T11779] loop2: detected capacity change from 0 to 40427 [ 439.264652][T11779] F2FS-fs (loop2): build fault injection rate: 14 [ 439.286221][T11779] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 439.298363][T11779] F2FS-fs (loop2): invalid crc value [ 439.305724][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 439.325226][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 439.346604][ T5984] usb usb7-port1: attempt power cycle [ 439.362482][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 439.446744][T11779] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.473860][T11779] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 439.499552][T11779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 439.548517][T11779] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 439.561274][ T974] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 439.590079][T11779] F2FS-fs (loop2): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 439.591854][ T974] usb 5-1: device descriptor read/8, error -71 [ 439.623846][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 439.656700][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 439.686421][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 439.696823][ T6005] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 439.701258][ T5984] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 439.715677][ T6005] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 439.725889][ T5831] syz-executor: attempt to access beyond end of device [ 439.725889][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.740164][ T5984] usb 7-1: device descriptor read/8, error -71 [ 439.747548][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 439.747593][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.747615][ T5831] Call Trace: [ 439.747628][ T5831] [ 439.747642][ T5831] dump_stack_lvl+0x16c/0x1f0 [ 439.747707][ T5831] f2fs_handle_critical_error+0x624/0x9f0 [ 439.747764][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.747818][ T5831] ? f2fs_build_fault_attr+0x53/0x1f0 [ 439.747877][ T5831] f2fs_write_end_io+0x958/0xcf0 [ 439.747940][ T5831] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 439.748006][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.748064][ T5831] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 439.748120][ T5831] bio_endio+0x713/0x860 [ 439.748164][ T5831] submit_bio_noacct+0x306/0x1f60 [ 439.748231][ T5831] __submit_merged_bio+0x33c/0x770 [ 439.748295][ T5831] __submit_merged_write_cond+0x319/0x3f0 [ 439.748366][ T5831] f2fs_write_cache_pages+0x2067/0x2570 [ 439.748470][ T5831] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 439.748537][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.748601][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.748645][ T5831] ? __lock_acquire+0x622/0x1c90 [ 439.748741][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.748791][ T5831] ? find_held_lock+0x2b/0x80 [ 439.748870][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.748913][ T5831] ? __lock_acquire+0x622/0x1c90 [ 439.748967][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749019][ T5831] f2fs_write_data_pages+0x4ad/0xd90 [ 439.749068][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.749127][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749184][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749234][ T5831] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 439.749301][ T5831] do_writepages+0x27a/0x600 [ 439.749359][ T5831] ? __pfx_do_writepages+0x10/0x10 [ 439.749406][ T5831] ? do_raw_spin_unlock+0x172/0x230 [ 439.749462][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749505][ T5831] ? _raw_spin_unlock+0x28/0x50 [ 439.749565][ T5831] filemap_fdatawrite_wbc+0x104/0x160 [ 439.749622][ T5831] __filemap_fdatawrite_range+0xb9/0x100 [ 439.749661][ T5831] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 439.749778][ T5831] ? find_held_lock+0x2b/0x80 [ 439.749818][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749865][ T5831] ? do_raw_spin_unlock+0x172/0x230 [ 439.749922][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.749976][ T5831] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 439.750040][ T5831] block_operations+0x2b0/0xfe0 [ 439.750096][ T5831] ? __pfx_block_operations+0x10/0x10 [ 439.750206][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.750257][ T5831] ? ktime_get+0x200/0x310 [ 439.750298][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.750343][ T5831] ? lockdep_hardirqs_on+0x7c/0x110 [ 439.750404][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.750449][ T5831] ? rcu_is_watching+0x12/0xc0 [ 439.750494][ T5831] f2fs_write_checkpoint+0x32b/0x5300 [ 439.750548][ T5831] ? kfree+0x2b8/0x6d0 [ 439.750602][ T5831] ? f2fs_stop_gc_thread+0x79/0xd0 [ 439.750651][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.750697][ T5831] ? rcu_is_watching+0x12/0xc0 [ 439.750732][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.750783][ T5831] ? kthread_stop+0x272/0x630 [ 439.750840][ T5831] kill_f2fs_super+0x3d6/0x490 [ 439.750882][ T5831] ? __pfx_kill_f2fs_super+0x10/0x10 [ 439.750945][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.751011][ T5831] deactivate_locked_super+0xc1/0x1a0 [ 439.751054][ T5831] deactivate_super+0xde/0x100 [ 439.751097][ T5831] cleanup_mnt+0x225/0x450 [ 439.751143][ T5831] task_work_run+0x150/0x240 [ 439.751199][ T5831] ? __pfx_task_work_run+0x10/0x10 [ 439.751249][ T5831] ? srso_alias_return_thunk+0x5/0xfbef5 [ 439.751301][ T5831] ? __pfx___x64_sys_umount+0x10/0x10 [ 439.751358][ T5831] exit_to_user_mode_loop+0xec/0x130 [ 439.751415][ T5831] do_syscall_64+0x426/0xfa0 [ 439.751454][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.751491][ T5831] RIP: 0033:0x7fe9d6b902f7 [ 439.751520][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 439.751556][ T5831] RSP: 002b:00007ffd03098668 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 439.751590][ T5831] RAX: 0000000000000000 RBX: 00007fe9d6c11d7d RCX: 00007fe9d6b902f7 [ 439.751614][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd03098720 [ 439.751638][ T5831] RBP: 00007ffd03098720 R08: 0000000000000000 R09: 0000000000000000 [ 439.751660][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd030997b0 [ 439.751684][ T5831] R13: 00007fe9d6c11d7d R14: 000000000006b52c R15: 00007ffd030997f0 [ 439.751743][ T5831] [ 439.767528][ T6005] usb 8-1: USB disconnect, device number 4 [ 439.861188][ T974] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 439.879082][ T5831] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 439.908682][ T974] usb 5-1: device descriptor read/8, error -71 [ 440.341239][ T5984] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 440.371919][ T5984] usb 7-1: device descriptor read/8, error -71 [ 440.481732][ T5984] usb usb7-port1: unable to enumerate USB device [ 440.493872][ T974] usb usb5-port1: unable to enumerate USB device [ 441.086000][T11807] 9pnet: Could not find request transport: fd0x0000000000000004 [ 441.111178][T11813] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1912'. [ 441.425140][T11821] loop2: detected capacity change from 0 to 764 [ 441.468652][T11819] loop3: detected capacity change from 0 to 4096 [ 441.491287][ T5934] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 441.520468][T11819] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 441.587672][T11819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.626846][T11819] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 441.638753][T11819] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 441.651326][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 441.669159][ T5934] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 441.681356][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.700785][ T5934] usb 8-1: Product: syz [ 441.714156][ T5934] usb 8-1: Manufacturer: syz [ 441.721448][ T5984] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 441.732278][ T5934] usb 8-1: SerialNumber: syz [ 441.745001][ T5934] usb 8-1: config 0 descriptor?? [ 441.758674][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 441.770828][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.881243][ T5984] usb 3-1: Using ep0 maxpacket: 8 [ 441.899715][ T5984] usb 3-1: config index 0 descriptor too short (expected 17186, got 34) [ 441.923099][ T5984] usb 3-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 441.961600][ T5984] usb 3-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 441.992290][ T5984] usb 3-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 442.036381][ T5984] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 442.110218][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.162466][ T5934] gspca_sonixj: reg_r err -32 [ 442.167298][ T5934] sonixj 8-1:0.0: probe with driver sonixj failed with error -32 [ 442.214627][T11837] loop8: detected capacity change from 0 to 2048 [ 442.248628][T11837] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 442.300503][T11837] UDF-fs: Scanning with blocksize 512 failed [ 442.337710][T11837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 442.352026][ T5984] usb 3-1: string descriptor 0 read error: -71 [ 442.366914][ T5984] usb 3-1: USB disconnect, device number 62 [ 442.631987][T11844] loop4: detected capacity change from 0 to 1024 [ 442.650514][T11844] EXT4-fs: inline encryption not supported [ 442.669857][T11844] EXT4-fs: Ignoring removed nobh option [ 442.727663][T11844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.801303][ T30] audit: type=1800 audit(1760827273.867:169): pid=11844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1922" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 443.003278][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.085653][T11854] 9pnet: Could not find request transport: fd0x0000000000000004 [ 443.214814][ T5920] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 443.336301][T11865] syz_tun: entered allmulticast mode [ 443.351231][ T5920] usb 4-1: device descriptor read/64, error -71 [ 443.396292][T11868] loop4: detected capacity change from 0 to 2048 [ 443.422076][T11868] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 443.493762][T11872] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 443.513389][ T5832] udevd[5832]: incorrect nilfs2 checksum on /dev/loop4 [ 443.517406][T11868] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 12 [ 443.558646][T11868] Remounting filesystem read-only [ 443.591202][ T5920] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 443.602346][ T5984] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 443.731639][ T5920] usb 4-1: device descriptor read/64, error -71 [ 443.771206][ T5984] usb 3-1: device descriptor read/64, error -71 [ 443.845653][ T5920] usb usb4-port1: attempt power cycle [ 443.881385][ T6005] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 444.021208][ T5984] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 444.053558][ T6005] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.069423][ T6005] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.084403][ T6005] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 444.097399][ T6005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 444.107238][ T6005] usb 9-1: SerialNumber: syz [ 444.161545][ T5984] usb 3-1: device descriptor read/64, error -71 [ 444.191303][ T5920] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 444.217342][ T5920] usb 4-1: device descriptor read/8, error -71 [ 444.271540][ T5984] usb usb3-port1: attempt power cycle [ 444.276533][ T6002] usb 8-1: USB disconnect, device number 5 [ 444.330007][ T6005] usb 9-1: 0:2 : does not exist [ 444.350647][ T6005] usb 9-1: unit 255 not found! [ 444.419971][ T6005] usb 9-1: USB disconnect, device number 3 [ 444.462821][ T5920] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 444.481070][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.505311][ T5920] usb 4-1: device descriptor read/8, error -71 [ 444.633219][ T5920] usb usb4-port1: unable to enumerate USB device [ 444.641165][ T5984] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 444.672700][ T5984] usb 3-1: device descriptor read/8, error -71 [ 444.921222][ T5984] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 444.946962][ T5984] usb 3-1: device descriptor read/8, error -71 [ 445.082378][ T5984] usb usb3-port1: unable to enumerate USB device [ 445.114697][T11917] loop4: detected capacity change from 0 to 764 [ 445.381592][ T5984] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 445.541207][ T5984] usb 5-1: Using ep0 maxpacket: 8 [ 445.559789][ T5984] usb 5-1: config index 0 descriptor too short (expected 17186, got 34) [ 445.581815][ T5984] usb 5-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 445.611374][ T5984] usb 5-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 445.655060][ T5984] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 445.695200][ T5984] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 445.721505][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.982213][T11917] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1940'. [ 446.021233][ T5984] usb 5-1: string descriptor 0 read error: -71 [ 446.061671][ T5984] usb 5-1: USB disconnect, device number 63 [ 446.082940][T11935] loop6: detected capacity change from 0 to 4096 [ 446.123255][T11935] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 446.180929][T11935] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.191481][T11941] syz_tun: entered allmulticast mode [ 446.771405][ T5934] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 446.864677][T11945] loop3: detected capacity change from 0 to 65536 [ 446.942927][T11947] overlayfs: missing 'lowerdir' [ 446.949789][T11945] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 446.983511][ T5934] usb 9-1: Using ep0 maxpacket: 8 [ 447.052010][ T5934] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 447.085320][T11945] XFS (loop3): Ending clean mount [ 447.093258][T11945] XFS (loop3): Quotacheck needed: Please wait. [ 447.123720][ T5934] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.139738][T11945] XFS (loop3): Quotacheck: Done. [ 447.191898][ T5934] usb 9-1: Product: syz [ 447.219340][ T9283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.239114][ T5934] usb 9-1: Manufacturer: syz [ 447.259906][ T5844] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 447.291510][ T5934] usb 9-1: SerialNumber: syz [ 447.314563][ T5920] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 447.324124][ T5934] usb 9-1: config 0 descriptor?? [ 447.336140][ T5934] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 447.517163][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 447.557342][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.601885][ T5920] usb 3-1: Product: syz [ 447.610659][ T5920] usb 3-1: Manufacturer: syz [ 447.626696][ T5920] usb 3-1: SerialNumber: syz [ 447.749875][T11980] loop3: detected capacity change from 0 to 1024 [ 447.772593][ T5934] gspca_sonixj: reg_r err -32 [ 447.780654][ T5934] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 447.803360][T11980] EXT4-fs: inline encryption not supported [ 447.811645][ T5927] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 447.823492][T11980] EXT4-fs: Ignoring removed nobh option [ 447.910186][T11980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.032621][ T5927] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 448.047461][ T30] audit: type=1800 audit(1760827279.117:170): pid=11980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1953" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 448.087758][ T5927] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 448.163197][ T5927] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 448.191416][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.214331][ T5927] usb 7-1: SerialNumber: syz [ 448.394620][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.490230][ T5927] usb 7-1: 0:2 : does not exist [ 448.509690][ T5927] usb 7-1: unit 255 not found! [ 448.597663][ T5927] usb 7-1: USB disconnect, device number 19 [ 448.806435][T10645] udevd[10645]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.921200][ T6002] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 449.051248][ T6002] usb 4-1: device descriptor read/64, error -71 [ 449.301227][ T6002] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 449.411190][ T5927] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 449.431274][ T6002] usb 4-1: device descriptor read/64, error -71 [ 449.489355][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 449.522572][ T5934] usb 9-1: USB disconnect, device number 4 [ 449.541297][ T5927] usb 7-1: device descriptor read/64, error -71 [ 449.551365][ T6002] usb usb4-port1: attempt power cycle [ 449.580175][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.586872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.704302][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 449.717982][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 449.730253][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 449.740277][ T5920] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 449.751005][ T5920] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 449.766135][ T5920] usb 3-1: USB disconnect, device number 67 [ 449.821658][ T5927] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 449.901321][ T6002] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 449.923218][ T6002] usb 4-1: device descriptor read/8, error -71 [ 449.951266][ T5927] usb 7-1: device descriptor read/64, error -71 [ 450.061599][ T5927] usb usb7-port1: attempt power cycle [ 450.171164][ T6002] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 450.196474][ T6002] usb 4-1: device descriptor read/8, error -71 [ 450.257038][T12020] loop4: detected capacity change from 0 to 4096 [ 450.287205][T12020] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 450.321599][ T6002] usb usb4-port1: unable to enumerate USB device [ 450.337021][T12020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.366350][T12020] overlayfs: missing 'lowerdir' [ 450.421263][ T5927] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 450.461898][ T5927] usb 7-1: device descriptor read/8, error -71 [ 450.577543][T12026] Bluetooth: MGMT ver 1.23 [ 450.711189][ T5927] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 450.731809][ T5927] usb 7-1: device descriptor read/8, error -71 [ 450.842034][ T5927] usb usb7-port1: unable to enumerate USB device [ 451.166069][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.265758][T12033] loop2: detected capacity change from 0 to 2048 [ 451.293510][T12033] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 451.329080][T12036] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 451.361184][ T5934] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 451.542038][ T5934] usb 8-1: no configurations [ 451.546769][ T5934] usb 8-1: can't read configurations, error -22 [ 451.691184][ T5934] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 451.903195][ T5934] usb 8-1: no configurations [ 451.907888][ T5934] usb 8-1: can't read configurations, error -22 [ 451.914746][ T5934] usb usb8-port1: attempt power cycle [ 452.001213][ T6002] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 452.071268][ T5984] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 452.153174][ T6002] usb 3-1: Using ep0 maxpacket: 8 [ 452.166025][ T6002] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 452.185633][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.204817][ T6002] usb 3-1: Product: syz [ 452.219314][ T6002] usb 3-1: Manufacturer: syz [ 452.226291][ T6002] usb 3-1: SerialNumber: syz [ 452.243641][ T6002] usb 3-1: config 0 descriptor?? [ 452.261207][ T5984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.264170][ T6002] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 452.274937][ T5934] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 452.290497][ T5984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 452.320548][ T5984] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 452.333022][ T5934] usb 8-1: no configurations [ 452.337634][ T5934] usb 8-1: can't read configurations, error -22 [ 452.349149][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 452.368391][ T5984] usb 4-1: SerialNumber: syz [ 452.491636][ T5934] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 452.526676][ T5934] usb 8-1: no configurations [ 452.532340][ T5934] usb 8-1: can't read configurations, error -22 [ 452.545846][ T5934] usb usb8-port1: unable to enumerate USB device [ 452.605009][ T5984] usb 4-1: 0:2 : does not exist [ 452.623822][ T5984] usb 4-1: unit 255 not found! [ 452.653648][ T5984] usb 4-1: USB disconnect, device number 66 [ 452.670895][ T6002] gspca_sonixj: reg_r err -32 [ 452.686552][T12061] netlink: 'syz.6.1981': attribute type 1 has an invalid length. [ 452.694831][ T6002] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 452.723424][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.238935][T12070] loop3: detected capacity change from 0 to 4096 [ 453.256107][T12070] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 453.306574][T12070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.347064][T12075] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1985'. [ 453.350006][T12070] overlayfs: missing 'workdir' [ 453.372297][T12075] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1985'. [ 453.391487][T12075] openvswitch: netlink: Message has 512 unknown bytes. [ 453.476381][ T5844] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.651332][ T5927] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 453.806492][ T5927] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 453.817420][ T5927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.825651][ T5927] usb 9-1: Product: syz [ 453.830337][ T5927] usb 9-1: Manufacturer: syz [ 453.835127][ T5927] usb 9-1: SerialNumber: syz [ 453.845240][ T5927] usb 9-1: config 0 descriptor?? [ 453.863375][ T5927] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 453.878397][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 453.889109][ T5927] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 453.899562][ T5927] usb 9-1: media controller created [ 453.928733][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 453.992187][ T5927] DVB: Unable to find symbol mt352_attach() [ 454.019112][ T5927] DVB: Unable to find symbol nxt6000_attach() [ 454.036387][ T5927] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 454.056453][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input61 [ 454.079059][T12075] dvb-usb: bulk message failed: -22 (7/0) [ 454.092797][ T5927] dvb-usb: schedule remote query interval to 1000 msecs. [ 454.110875][ T5927] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 454.149110][ T5927] dvb-usb: bulk message failed: -22 (7/0) [ 454.172527][ T5927] dvb-usb: bulk message failed: -22 (7/0) [ 454.253159][ T5927] usb 9-1: USB disconnect, device number 5 [ 454.363021][T12091] loop4: detected capacity change from 0 to 256 [ 454.388013][T12091] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 454.469283][ T5927] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 454.838553][ T5927] usb 3-1: USB disconnect, device number 68 [ 454.961349][ T974] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 455.058398][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1996'. [ 455.119526][T12103] bond0: entered promiscuous mode [ 455.126013][T12103] bond_slave_0: entered promiscuous mode [ 455.132565][T12103] bond_slave_1: entered promiscuous mode [ 455.142494][T12103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 455.152004][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.152803][T12103] bond0: left promiscuous mode [ 455.167931][T12103] bond_slave_0: left promiscuous mode [ 455.174127][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.177382][T12107] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1997'. [ 455.201239][ T974] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 455.202768][T12103] bond_slave_1: left promiscuous mode [ 455.214879][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.237318][ T974] usb 8-1: config 0 descriptor?? [ 455.424845][T12095] loop3: detected capacity change from 0 to 32768 [ 455.488788][T12095] ea_get: invalid extended attribute [ 455.507317][T12095] ffff888050f9b0f8: 04 00 00 00 .... [ 455.672774][ T974] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 455.712393][ T974] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 455.870914][ T974] cp2112 0003:10C4:EA90.000F: error requesting version [ 455.902634][ T974] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -5 [ 456.151546][ T5927] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 456.362140][ T5927] usb 5-1: no configurations [ 456.367923][ T5927] usb 5-1: can't read configurations, error -22 [ 456.509926][ T5927] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 456.615417][T12132] loop2: detected capacity change from 0 to 2048 [ 456.661188][T12132] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 456.676685][T12132] UDF-fs: Scanning with blocksize 512 failed [ 456.720861][T12132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 456.722086][ T5927] usb 5-1: no configurations [ 456.760650][ T5927] usb 5-1: can't read configurations, error -22 [ 456.771287][ T974] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 456.789898][ T5927] usb usb5-port1: attempt power cycle [ 456.837137][T12137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2011'. [ 456.943184][ T974] usb 9-1: Using ep0 maxpacket: 8 [ 456.963625][ T974] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 456.991401][ T974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.008624][ T974] usb 9-1: Product: syz [ 457.014039][ T974] usb 9-1: Manufacturer: syz [ 457.018698][ T974] usb 9-1: SerialNumber: syz [ 457.029188][ T974] usb 9-1: config 0 descriptor?? [ 457.040405][ T974] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 457.079359][T12143] loop3: detected capacity change from 0 to 1024 [ 457.093126][T12143] EXT4-fs: inline encryption not supported [ 457.102679][T12143] EXT4-fs: Ignoring removed nobh option [ 457.151490][ T5927] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 457.160720][T12143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.193513][ T5927] usb 5-1: no configurations [ 457.199719][ T5927] usb 5-1: can't read configurations, error -22 [ 457.214107][ T30] audit: type=1800 audit(1760827288.287:171): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2014" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 457.295533][T12143] loop3: detected capacity change from 1024 to 64 [ 457.301215][T12150] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.2014: corrupted xattr entries [ 457.318858][T12150] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:73: inode #15: comm syz.3.2014: corrupt xattr in inline inode [ 457.337579][T12150] EXT4-fs error (device loop3): xattr_find_entry:337: inode #15: comm syz.3.2014: corrupted xattr entries [ 457.349203][ T5927] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 457.373854][ T5927] usb 5-1: no configurations [ 457.378830][ T5927] usb 5-1: can't read configurations, error -22 [ 457.387433][ T5927] usb usb5-port1: unable to enumerate USB device [ 457.393497][ T5844] EXT4-fs error (device loop3): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /334/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 457.414031][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.421754][ T5934] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 457.444556][ T974] gspca_sonixj: reg_r err -32 [ 457.449743][ T974] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 457.519390][ T9659] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.543743][T12144] kmmpd-loop3: attempt to access beyond end of device [ 457.543743][T12144] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 457.561496][T12144] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 457.595453][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.607322][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.618544][ T5934] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 457.627702][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 457.635796][ T5934] usb 3-1: SerialNumber: syz [ 457.744813][ T5927] usb 8-1: USB disconnect, device number 10 [ 457.873617][ T5934] usb 3-1: 0:2 : does not exist [ 457.884636][ T5934] usb 3-1: unit 255 not found! [ 457.947061][ T5934] usb 3-1: USB disconnect, device number 69 [ 457.950602][ T7044] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.032858][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.165951][ T7044] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.242953][ T7044] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.376984][ T7044] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.786691][ T7044] bridge_slave_1: left allmulticast mode [ 458.795940][ T7044] bridge_slave_1: left promiscuous mode [ 458.808830][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.839226][ T7044] bridge_slave_0: left allmulticast mode [ 458.851157][ T7044] bridge_slave_0: left promiscuous mode [ 458.856972][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.945822][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2026'. [ 459.244008][T12178] loop2: detected capacity change from 0 to 1024 [ 459.251245][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.265551][T12178] EXT4-fs: inline encryption not supported [ 459.271859][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.279796][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.282207][T12178] EXT4-fs: Ignoring removed nobh option [ 459.289019][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.300736][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 459.427099][T12178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.472848][ T30] audit: type=1800 audit(1760827290.547:172): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2029" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 459.536759][ T5920] usb 9-1: USB disconnect, device number 6 [ 459.562158][T12178] loop2: detected capacity change from 1024 to 64 [ 459.578946][T12184] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.2029: corrupted xattr entries [ 459.626274][T12184] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:73: inode #15: comm syz.2.2029: corrupt xattr in inline inode [ 459.694755][T12184] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.2029: corrupted xattr entries [ 459.856937][ T5831] EXT4-fs error (device loop2): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /342/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 460.007286][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.045184][T12182] kmmpd-loop2: attempt to access beyond end of device [ 460.045184][T12182] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 460.090206][T12182] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 460.303829][T12179] loop7: detected capacity change from 0 to 40427 [ 460.322836][T12179] F2FS-fs (loop7): build fault injection rate: 14 [ 460.329347][T12179] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 460.427542][T12179] F2FS-fs (loop7): invalid crc value [ 460.516790][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 460.638178][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 460.909112][T12179] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 460.929782][T12179] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 460.945947][T12179] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 460.972640][T12179] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 460.986569][T12179] F2FS-fs (loop7): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 461.047648][T11258] syz-executor: attempt to access beyond end of device [ 461.047648][T11258] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 461.061763][T11258] CPU: 0 UID: 0 PID: 11258 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 461.061815][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 461.061836][T11258] Call Trace: [ 461.061847][T11258] [ 461.061860][T11258] dump_stack_lvl+0x16c/0x1f0 [ 461.061920][T11258] f2fs_handle_critical_error+0x624/0x9f0 [ 461.061978][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.062022][T11258] ? f2fs_build_fault_attr+0x53/0x1f0 [ 461.062075][T11258] f2fs_write_end_io+0x958/0xcf0 [ 461.062135][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 461.062195][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.062250][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 461.062303][T11258] bio_endio+0x713/0x860 [ 461.062343][T11258] submit_bio_noacct+0x306/0x1f60 [ 461.062406][T11258] __submit_merged_bio+0x33c/0x770 [ 461.062466][T11258] __submit_merged_write_cond+0x319/0x3f0 [ 461.062530][T11258] f2fs_write_cache_pages+0x2067/0x2570 [ 461.062615][T11258] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 461.062669][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.062722][T11258] ? __lock_acquire+0xb8a/0x1c90 [ 461.062797][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.062900][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.062940][T11258] ? free_unref_folios+0x109a/0x1610 [ 461.063001][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063048][T11258] f2fs_write_data_pages+0x4ad/0xd90 [ 461.063091][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 461.063145][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063196][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063241][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 461.063302][T11258] do_writepages+0x27a/0x600 [ 461.063355][T11258] ? __pfx_do_writepages+0x10/0x10 [ 461.063398][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 461.063450][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063489][T11258] ? _raw_spin_unlock+0x28/0x50 [ 461.063543][T11258] filemap_fdatawrite_wbc+0x104/0x160 [ 461.063595][T11258] __filemap_fdatawrite_range+0xb9/0x100 [ 461.063630][T11258] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 461.063721][T11258] ? find_held_lock+0x2b/0x80 [ 461.063755][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063802][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 461.063853][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.063899][T11258] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 461.063956][T11258] block_operations+0x2b0/0xfe0 [ 461.064004][T11258] ? __pfx_block_operations+0x10/0x10 [ 461.064094][T11258] ? ktime_get+0x199/0x310 [ 461.064137][T11258] ? ktime_get+0x199/0x310 [ 461.064176][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.064216][T11258] ? rcu_is_watching+0x12/0xc0 [ 461.064256][T11258] f2fs_write_checkpoint+0x32b/0x5300 [ 461.064303][T11258] ? kfree+0x2b8/0x6d0 [ 461.064352][T11258] ? f2fs_stop_gc_thread+0x79/0xd0 [ 461.064394][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.064435][T11258] ? rcu_is_watching+0x12/0xc0 [ 461.064467][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.064507][T11258] ? kthread_stop+0x272/0x630 [ 461.064556][T11258] kill_f2fs_super+0x3d6/0x490 [ 461.064594][T11258] ? __pfx_kill_f2fs_super+0x10/0x10 [ 461.064648][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.064705][T11258] deactivate_locked_super+0xc1/0x1a0 [ 461.064743][T11258] deactivate_super+0xde/0x100 [ 461.064788][T11258] cleanup_mnt+0x225/0x450 [ 461.064829][T11258] task_work_run+0x150/0x240 [ 461.064881][T11258] ? __pfx_task_work_run+0x10/0x10 [ 461.064929][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 461.064974][T11258] ? __pfx___x64_sys_umount+0x10/0x10 [ 461.065026][T11258] exit_to_user_mode_loop+0xec/0x130 [ 461.065078][T11258] do_syscall_64+0x426/0xfa0 [ 461.065115][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.065149][T11258] RIP: 0033:0x7f88f6f902f7 [ 461.065177][T11258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 461.065210][T11258] RSP: 002b:00007ffdd21f3298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 461.065243][T11258] RAX: 0000000000000000 RBX: 00007f88f7011d7d RCX: 00007f88f6f902f7 [ 461.065266][T11258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd21f3350 [ 461.065288][T11258] RBP: 00007ffdd21f3350 R08: 0000000000000000 R09: 0000000000000000 [ 461.065310][T11258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd21f43e0 [ 461.065333][T11258] R13: 00007f88f7011d7d R14: 00000000000708bb R15: 00007ffdd21f4420 [ 461.065383][T11258] [ 461.065423][T11258] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 461.413921][ T5850] Bluetooth: hci5: command tx timeout [ 461.604499][ T5920] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 461.617979][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.630203][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.643440][ T7044] bond0 (unregistering): Released all slaves [ 461.701456][ T7044] bond1 (unregistering): Released all slaves [ 461.762062][ T5920] usb 5-1: no configurations [ 461.772288][ T5920] usb 5-1: can't read configurations, error -22 [ 461.935109][ T5920] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 462.141881][ T5920] usb 5-1: no configurations [ 462.156738][ T5920] usb 5-1: can't read configurations, error -22 [ 462.189433][ T5920] usb usb5-port1: attempt power cycle [ 462.378382][T12215] loop6: detected capacity change from 0 to 4096 [ 462.496610][T12215] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 462.577511][T12215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.594426][ T5920] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 462.661418][ T5920] usb 5-1: no configurations [ 462.666078][ T5920] usb 5-1: can't read configurations, error -22 [ 462.762820][ T7044] hsr_slave_0: left promiscuous mode [ 462.793189][T12215] overlay: filesystem on ./file0 not supported as upperdir [ 462.814342][ T7044] hsr_slave_1: left promiscuous mode [ 462.835205][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.862136][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.871436][ T5920] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 462.892370][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.901032][ T5920] usb 5-1: no configurations [ 462.905747][ T5920] usb 5-1: can't read configurations, error -22 [ 462.922899][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.930640][ T5920] usb usb5-port1: unable to enumerate USB device [ 462.988693][ T9283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.996613][ T7044] veth1_macvtap: left promiscuous mode [ 463.006766][ T7044] veth0_macvtap: left promiscuous mode [ 463.021585][ T7044] veth1_vlan: left allmulticast mode [ 463.031113][ T7044] veth1_vlan: left promiscuous mode [ 463.036379][ T7044] veth0_vlan: left promiscuous mode [ 463.205463][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2044'. [ 463.222321][T12238] loop6: detected capacity change from 0 to 1024 [ 463.252410][T12238] EXT4-fs: inline encryption not supported [ 463.258406][T12238] EXT4-fs: Ignoring removed nobh option [ 463.318594][T12238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.376104][ T30] audit: type=1800 audit(1760827294.447:173): pid=12238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2045" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 463.396512][ C0] vkms_vblank_simulate: vblank timer overrun [ 463.467196][T12238] loop6: detected capacity change from 1024 to 64 [ 463.494742][T12242] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.2045: corrupted xattr entries [ 463.542495][T12242] EXT4-fs error (device loop6): get_max_inline_xattr_value_size:73: inode #15: comm syz.6.2045: corrupt xattr in inline inode [ 463.567396][T12242] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.2045: corrupted xattr entries [ 463.576661][ T5850] Bluetooth: hci5: command tx timeout [ 463.660141][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 463.673820][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 463.676794][ T9283] EXT4-fs error (device loop6): ext4_readdir:262: inode #2: block 16: comm syz-executor: path /136/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 463.690559][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 463.723765][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 463.732529][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 463.782452][ T9283] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.802735][T12240] kmmpd-loop6: attempt to access beyond end of device [ 463.802735][T12240] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 463.817986][T12240] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 463.947817][ T7044] team0 (unregistering): Port device team_slave_1 removed [ 464.351173][ T5984] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 464.499349][T12237] bond0: entered promiscuous mode [ 464.504662][T12237] bond_slave_0: entered promiscuous mode [ 464.510544][T12237] bond_slave_1: entered promiscuous mode [ 464.520579][T12237] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 464.535738][T12237] bond0: left promiscuous mode [ 464.540540][T12237] bond_slave_0: left promiscuous mode [ 464.549849][T12237] bond_slave_1: left promiscuous mode [ 464.557637][ T5984] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.570600][ T5984] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 464.597284][ T5984] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 464.606608][ T5984] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.617346][ T5984] usb 8-1: SerialNumber: syz [ 464.645668][ T9283] syz_tun (unregistering): left allmulticast mode [ 464.858943][ T5984] usb 8-1: 0:2 : does not exist [ 464.892167][ T5984] usb 8-1: unit 255 not found! [ 464.955198][T12177] chnl_net:caif_netlink_parms(): no params data found [ 464.981462][ T5984] usb 8-1: USB disconnect, device number 11 [ 465.086127][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.435251][T12248] loop4: detected capacity change from 0 to 40427 [ 465.527104][T12248] F2FS-fs (loop4): build fault injection rate: 14 [ 465.571535][T12248] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 465.604803][T12248] F2FS-fs (loop4): invalid crc value [ 465.633380][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 465.654345][ T5850] Bluetooth: hci5: command tx timeout [ 465.669552][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 465.811629][ T5850] Bluetooth: hci1: command tx timeout [ 465.883173][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.920629][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.958886][T12177] bridge_slave_0: entered allmulticast mode [ 465.983393][T12177] bridge_slave_0: entered promiscuous mode [ 465.999203][T12248] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 466.022036][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.039442][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.048079][T12248] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 466.069785][T12177] bridge_slave_1: entered allmulticast mode [ 466.082654][T12248] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 466.098247][T12177] bridge_slave_1: entered promiscuous mode [ 466.104175][ T974] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 466.152020][T12248] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 466.231792][T12275] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 466.307154][T12248] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 466.308389][ T974] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 466.358682][ T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.392923][ T974] usb 8-1: Product: syz [ 466.397137][ T974] usb 8-1: Manufacturer: syz [ 466.421474][ T974] usb 8-1: SerialNumber: syz [ 466.496028][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.549056][ T5834] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x17b/0x1b0 [ 466.564362][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.591713][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.595271][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.611960][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.631616][ T5834] F2FS-fs (loop4): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:878382,cpver:0,blkaddr:0] [ 466.646659][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.655967][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.709131][ T5834] syz-executor: attempt to access beyond end of device [ 466.709131][ T5834] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 466.756598][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 466.756649][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 466.756672][ T5834] Call Trace: [ 466.756684][ T5834] [ 466.756699][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 466.756763][ T5834] f2fs_handle_critical_error+0x624/0x9f0 [ 466.756820][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.756866][ T5834] ? f2fs_build_fault_attr+0x53/0x1f0 [ 466.756925][ T5834] f2fs_write_end_io+0x958/0xcf0 [ 466.756987][ T5834] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 466.757055][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.757111][ T5834] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 466.757165][ T5834] bio_endio+0x713/0x860 [ 466.757206][ T5834] submit_bio_noacct+0x306/0x1f60 [ 466.757270][ T5834] __submit_merged_bio+0x33c/0x770 [ 466.757332][ T5834] __submit_merged_write_cond+0x319/0x3f0 [ 466.757401][ T5834] f2fs_write_cache_pages+0x2067/0x2570 [ 466.757493][ T5834] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 466.757554][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.757612][ T5834] ? __lock_acquire+0xb8a/0x1c90 [ 466.757684][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.757796][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.757841][ T5834] ? free_unref_folios+0x109a/0x1610 [ 466.757911][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.757963][ T5834] f2fs_write_data_pages+0x4ad/0xd90 [ 466.758010][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.758077][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.758134][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.758184][ T5834] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 466.758250][ T5834] do_writepages+0x27a/0x600 [ 466.758308][ T5834] ? __pfx_do_writepages+0x10/0x10 [ 466.758356][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 466.758413][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.758457][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 466.758518][ T5834] filemap_fdatawrite_wbc+0x104/0x160 [ 466.758575][ T5834] __filemap_fdatawrite_range+0xb9/0x100 [ 466.758615][ T5834] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 466.758713][ T5834] ? find_held_lock+0x2b/0x80 [ 466.758750][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.758795][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 466.758851][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.758902][ T5834] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 466.758962][ T5834] block_operations+0x2b0/0xfe0 [ 466.759013][ T5834] ? __pfx_block_operations+0x10/0x10 [ 466.759117][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759165][ T5834] ? ktime_get+0x200/0x310 [ 466.759206][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759250][ T5834] ? lockdep_hardirqs_on+0x7c/0x110 [ 466.759311][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759356][ T5834] ? rcu_is_watching+0x12/0xc0 [ 466.759398][ T5834] f2fs_write_checkpoint+0x32b/0x5300 [ 466.759450][ T5834] ? kfree+0x2b8/0x6d0 [ 466.759503][ T5834] ? f2fs_stop_gc_thread+0x79/0xd0 [ 466.759550][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759593][ T5834] ? rcu_is_watching+0x12/0xc0 [ 466.759628][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759672][ T5834] ? kthread_stop+0x272/0x630 [ 466.759727][ T5834] kill_f2fs_super+0x3d6/0x490 [ 466.759769][ T5834] ? __pfx_kill_f2fs_super+0x10/0x10 [ 466.759826][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.759888][ T5834] deactivate_locked_super+0xc1/0x1a0 [ 466.759929][ T5834] deactivate_super+0xde/0x100 [ 466.759970][ T5834] cleanup_mnt+0x225/0x450 [ 466.760015][ T5834] task_work_run+0x150/0x240 [ 466.760077][ T5834] ? __pfx_task_work_run+0x10/0x10 [ 466.760128][ T5834] ? srso_alias_return_thunk+0x5/0xfbef5 [ 466.760176][ T5834] ? __pfx___x64_sys_umount+0x10/0x10 [ 466.760232][ T5834] exit_to_user_mode_loop+0xec/0x130 [ 466.760287][ T5834] do_syscall_64+0x426/0xfa0 [ 466.760326][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.760363][ T5834] RIP: 0033:0x7f91e7d902f7 [ 466.760392][ T5834] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 466.760429][ T5834] RSP: 002b:00007ffeb9dc45d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 466.760465][ T5834] RAX: 0000000000000000 RBX: 00007f91e7e11d7d RCX: 00007f91e7d902f7 [ 466.760489][ T5834] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb9dc4690 [ 466.760513][ T5834] RBP: 00007ffeb9dc4690 R08: 0000000000000000 R09: 0000000000000000 [ 466.760537][ T5834] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb9dc5720 [ 466.760562][ T5834] R13: 00007f91e7e11d7d R14: 0000000000071db8 R15: 00007ffeb9dc5760 [ 466.760615][ T5834] [ 466.761026][ T5834] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 467.474638][T12177] team0: Port device team_slave_0 added [ 467.533603][T12177] team0: Port device team_slave_1 added [ 467.539860][T12243] chnl_net:caif_netlink_parms(): no params data found [ 467.548215][T12285] loop8: detected capacity change from 0 to 4096 [ 467.623085][T12285] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 467.727894][T12285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.745046][ T5850] Bluetooth: hci5: command tx timeout [ 467.782216][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.809249][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.866355][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.891596][ T5850] Bluetooth: hci1: command tx timeout [ 467.905638][T12285] overlay: filesystem on ./file0 not supported as upperdir [ 467.967469][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.993907][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.072229][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.098258][T11428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.427635][ T7044] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.448831][ T7044] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.601297][ T5984] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 468.620426][ T7044] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.630370][ T7044] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.702916][ T5850] Bluetooth: hci2: command tx timeout [ 468.719994][T12177] hsr_slave_0: entered promiscuous mode [ 468.727923][T12177] hsr_slave_1: entered promiscuous mode [ 468.733597][ T5984] usb 5-1: device descriptor read/64, error -71 [ 468.744322][T12177] debugfs: 'hsr0' already exists in 'hsr' [ 468.750113][T12177] Cannot create hsr debugfs directory [ 468.763177][ T7044] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.781638][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 468.800739][ T7044] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.826497][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.837183][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.847935][T12243] bridge_slave_0: entered allmulticast mode [ 468.857774][T12243] bridge_slave_0: entered promiscuous mode [ 468.869074][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.876839][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.884441][T12243] bridge_slave_1: entered allmulticast mode [ 468.892655][T12243] bridge_slave_1: entered promiscuous mode [ 468.968981][ T7044] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.989434][ T5984] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 468.998536][ T7044] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.015585][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 469.031447][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 469.056918][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 469.075096][ T974] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 469.100525][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2060'. [ 469.114351][ T974] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 469.134074][ T974] usb 8-1: USB disconnect, device number 12 [ 469.151164][ T5984] usb 5-1: device descriptor read/64, error -71 [ 469.179218][T12319] bond0: entered promiscuous mode [ 469.185148][T12319] bond_slave_0: entered promiscuous mode [ 469.191028][T12319] bond_slave_1: entered promiscuous mode [ 469.198549][T12319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 469.207980][T12319] bond0: left promiscuous mode [ 469.212801][T12319] bond_slave_0: left promiscuous mode [ 469.218394][T12319] bond_slave_1: left promiscuous mode [ 469.271299][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.271522][ T5984] usb usb5-port1: attempt power cycle [ 469.325468][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.526321][T12243] team0: Port device team_slave_0 added [ 469.621811][ T5984] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 469.672744][ T5984] usb 5-1: device descriptor read/8, error -71 [ 469.701940][T12243] team0: Port device team_slave_1 added [ 469.702321][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2062'. [ 469.923323][ T5984] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 469.975966][ T5850] Bluetooth: hci1: command tx timeout [ 469.992427][ T5984] usb 5-1: device descriptor read/8, error -71 [ 470.016443][T12279] chnl_net:caif_netlink_parms(): no params data found [ 470.103356][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.110611][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.143924][ T5984] usb usb5-port1: unable to enumerate USB device [ 470.148616][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.157460][T12331] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'. [ 470.177474][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.184656][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.212503][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.244250][ T7044] bridge_slave_1: left allmulticast mode [ 470.249945][ T7044] bridge_slave_1: left promiscuous mode [ 470.256305][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.265657][ T7044] bridge_slave_0: left allmulticast mode [ 470.271398][ T7044] bridge_slave_0: left promiscuous mode [ 470.277245][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.311284][ T974] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 470.483191][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.494363][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.507259][ T974] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 470.518569][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.532021][ T974] usb 8-1: config 0 descriptor?? [ 470.560280][ T7044] bond1 (unregistering): (slave bridge1): Releasing active interface [ 470.671562][ T7044] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.684983][ T7044] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.697082][ T7044] bond0 (unregistering): Released all slaves [ 470.718399][ T7044] bond1 (unregistering): Released all slaves [ 470.771299][ T5850] Bluetooth: hci2: command tx timeout [ 470.956785][ T974] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 470.984512][T12334] loop8: detected capacity change from 0 to 4096 [ 471.007898][ T974] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 471.026858][T12334] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 471.064908][T12334] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.152785][ T974] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE [ 471.186387][T12334] overlay: filesystem on ./file0 not supported as upperdir [ 471.372873][T12243] hsr_slave_0: entered promiscuous mode [ 471.374256][ T974] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 471.399873][T12243] hsr_slave_1: entered promiscuous mode [ 471.421145][ T974] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -32 [ 471.442203][T12243] debugfs: 'hsr0' already exists in 'hsr' [ 471.447950][T12243] Cannot create hsr debugfs directory [ 471.457583][ T974] usb 8-1: USB disconnect, device number 13 [ 471.529455][T12279] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.546880][T11428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.556554][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.575895][T12279] bridge_slave_0: entered allmulticast mode [ 471.587083][T12279] bridge_slave_0: entered promiscuous mode [ 471.779515][T12279] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.793732][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.805098][T12279] bridge_slave_1: entered allmulticast mode [ 471.813466][T12279] bridge_slave_1: entered promiscuous mode [ 471.948385][T12177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 471.999110][ T7044] hsr_slave_0: left promiscuous mode [ 472.035682][ T7044] hsr_slave_1: left promiscuous mode [ 472.053734][ T5850] Bluetooth: hci1: command tx timeout [ 472.063525][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.079903][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.094376][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.105308][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.139677][ T7044] veth1_macvtap: left promiscuous mode [ 472.161509][ T7044] veth0_macvtap: left promiscuous mode [ 472.168879][ T7044] veth1_vlan: left allmulticast mode [ 472.183703][ T7044] veth1_vlan: left promiscuous mode [ 472.194104][ T7044] veth0_vlan: left promiscuous mode [ 472.643010][T12364] loop7: detected capacity change from 0 to 40427 [ 472.672276][T12364] F2FS-fs (loop7): build fault injection rate: 14 [ 472.678763][T12364] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 472.703418][T12364] F2FS-fs (loop7): invalid crc value [ 472.722499][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 472.757801][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 472.851357][ T5850] Bluetooth: hci2: command tx timeout [ 472.903013][T12364] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 472.913269][T12364] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 472.930751][T12364] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 472.946057][ T7044] team0 (unregistering): Port device team_slave_1 removed [ 472.953879][T12364] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 472.968976][T12364] F2FS-fs (loop7): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 472.982053][T12364] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 473.032929][T11258] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x17b/0x1b0 [ 473.044623][T11258] F2FS-fs (loop7): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:878382,cpver:0,blkaddr:0] [ 473.062669][T11258] syz-executor: attempt to access beyond end of device [ 473.062669][T11258] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 473.082957][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 473.083004][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.083027][T11258] Call Trace: [ 473.083040][T11258] [ 473.083054][T11258] dump_stack_lvl+0x16c/0x1f0 [ 473.083119][T11258] f2fs_handle_critical_error+0x624/0x9f0 [ 473.083174][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.083217][T11258] ? f2fs_build_fault_attr+0x53/0x1f0 [ 473.083276][T11258] f2fs_write_end_io+0x958/0xcf0 [ 473.083337][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 473.083401][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.083457][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 473.083511][T11258] bio_endio+0x713/0x860 [ 473.083554][T11258] submit_bio_noacct+0x306/0x1f60 [ 473.083618][T11258] __submit_merged_bio+0x33c/0x770 [ 473.083681][T11258] __submit_merged_write_cond+0x319/0x3f0 [ 473.083760][T11258] f2fs_write_cache_pages+0x2067/0x2570 [ 473.083857][T11258] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 473.083916][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.083975][T11258] ? __lock_acquire+0xb8a/0x1c90 [ 473.084054][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084179][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084223][T11258] ? free_unref_folios+0x109a/0x1610 [ 473.084293][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084346][T11258] f2fs_write_data_pages+0x4ad/0xd90 [ 473.084394][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 473.084454][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084512][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084563][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 473.084630][T11258] do_writepages+0x27a/0x600 [ 473.084688][T11258] ? __pfx_do_writepages+0x10/0x10 [ 473.084740][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 473.084795][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.084835][T11258] ? _raw_spin_unlock+0x28/0x50 [ 473.084896][T11258] filemap_fdatawrite_wbc+0x104/0x160 [ 473.084953][T11258] __filemap_fdatawrite_range+0xb9/0x100 [ 473.084992][T11258] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 473.085097][T11258] ? find_held_lock+0x2b/0x80 [ 473.085132][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085174][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 473.085228][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085279][T11258] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 473.085340][T11258] block_operations+0x2b0/0xfe0 [ 473.085375][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085431][T11258] ? __pfx_block_operations+0x10/0x10 [ 473.085531][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085577][T11258] ? ktime_get+0x200/0x310 [ 473.085616][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085657][T11258] ? lockdep_hardirqs_on+0x7c/0x110 [ 473.085716][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.085784][T11258] ? rcu_is_watching+0x12/0xc0 [ 473.085828][T11258] f2fs_write_checkpoint+0x32b/0x5300 [ 473.085871][T11258] ? __pfx_try_to_wake_up+0x10/0x10 [ 473.085935][T11258] ? kfree+0x2b8/0x6d0 [ 473.085987][T11258] ? f2fs_stop_gc_thread+0x79/0xd0 [ 473.086034][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.086077][T11258] ? rcu_is_watching+0x12/0xc0 [ 473.086110][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.086153][T11258] ? kthread_stop+0x272/0x630 [ 473.086208][T11258] kill_f2fs_super+0x3d6/0x490 [ 473.086249][T11258] ? __pfx_kill_f2fs_super+0x10/0x10 [ 473.086310][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.086374][T11258] deactivate_locked_super+0xc1/0x1a0 [ 473.086416][T11258] deactivate_super+0xde/0x100 [ 473.086458][T11258] cleanup_mnt+0x225/0x450 [ 473.086503][T11258] task_work_run+0x150/0x240 [ 473.086558][T11258] ? __pfx_task_work_run+0x10/0x10 [ 473.086609][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 473.086656][T11258] ? __pfx___x64_sys_umount+0x10/0x10 [ 473.086713][T11258] exit_to_user_mode_loop+0xec/0x130 [ 473.086781][T11258] do_syscall_64+0x426/0xfa0 [ 473.086819][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.086857][T11258] RIP: 0033:0x7f88f6f902f7 [ 473.086886][T11258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 473.086920][T11258] RSP: 002b:00007ffdd21f3298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 473.086955][T11258] RAX: 0000000000000000 RBX: 00007f88f7011d7d RCX: 00007f88f6f902f7 [ 473.086979][T11258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd21f3350 [ 473.087002][T11258] RBP: 00007ffdd21f3350 R08: 0000000000000000 R09: 0000000000000000 [ 473.087025][T11258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd21f43e0 [ 473.087049][T11258] R13: 00007f88f7011d7d R14: 0000000000073796 R15: 00007ffdd21f4420 [ 473.087107][T11258] [ 473.087459][T11258] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 473.971170][T12177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 474.041152][T12177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 474.087048][T12279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.113583][T12279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.152186][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2074'. [ 474.199571][T12177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 474.368912][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2075'. [ 474.380833][T12279] team0: Port device team_slave_0 added [ 474.392130][T12279] team0: Port device team_slave_1 added [ 474.587851][T12279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.605465][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.669450][T12279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.692875][T12279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.700698][T12279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.726942][T12279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.919468][T12371] loop4: detected capacity change from 0 to 32768 [ 474.932017][ T5850] Bluetooth: hci2: command tx timeout [ 474.981952][T12371] ea_get: invalid extended attribute [ 474.987273][T12371] ffff888050f9cc70: 04 00 00 00 .... [ 475.079850][T12387] loop7: detected capacity change from 0 to 4096 [ 475.161373][T12387] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 475.288862][T12387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.437591][T12279] hsr_slave_0: entered promiscuous mode [ 475.493100][T12279] hsr_slave_1: entered promiscuous mode [ 475.529166][T12279] debugfs: 'hsr0' already exists in 'hsr' [ 475.571359][T12279] Cannot create hsr debugfs directory [ 475.712849][T11258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.753546][T12395] loop4: detected capacity change from 0 to 40427 [ 476.777779][T12395] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 476.812010][T12395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 476.833574][T12395] F2FS-fs (loop4): invalid crc value [ 476.850385][T12177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.860302][T12418] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2084'. [ 476.908470][T12418] bond0: entered promiscuous mode [ 476.946663][T12418] bond_slave_0: entered promiscuous mode [ 476.971403][T12418] bond_slave_1: entered promiscuous mode [ 476.993379][T12418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 477.023130][T12418] bond0: left promiscuous mode [ 477.027925][T12418] bond_slave_0: left promiscuous mode [ 477.045768][T12418] bond_slave_1: left promiscuous mode [ 477.063371][T12395] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.087954][T12395] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 477.111344][T12395] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 477.213537][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.228768][T12243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.270375][T12243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.296220][T12408] loop7: detected capacity change from 0 to 40427 [ 477.304263][T12243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.351388][T12408] F2FS-fs (loop7): build fault injection rate: 14 [ 477.357846][T12408] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 477.402761][T12408] F2FS-fs (loop7): invalid crc value [ 477.417624][T12279] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.430635][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 477.459433][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 477.516458][T12243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.597339][T12408] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 477.612605][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.619773][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.633326][T12408] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 477.648386][T12408] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 477.661400][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 477.734515][T12408] f2fs_printk: 1 callbacks suppressed [ 477.734538][T12408] F2FS-fs (loop7): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 477.764781][T12279] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.799209][T12438] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 477.838289][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.859980][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.867163][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.886120][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.907557][ T10] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 477.923382][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.952998][ T10] usb 9-1: config 0 descriptor?? [ 478.054988][T11258] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x17b/0x1b0 [ 478.057836][T12279] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.076748][T11258] F2FS-fs (loop7): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:878382,cpver:0,blkaddr:0] [ 478.117620][T11258] syz-executor: attempt to access beyond end of device [ 478.117620][T11258] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 478.157442][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 478.157489][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 478.157511][T11258] Call Trace: [ 478.157524][T11258] [ 478.157538][T11258] dump_stack_lvl+0x16c/0x1f0 [ 478.157602][T11258] f2fs_handle_critical_error+0x624/0x9f0 [ 478.157658][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.157702][T11258] ? f2fs_build_fault_attr+0x53/0x1f0 [ 478.157771][T11258] f2fs_write_end_io+0x958/0xcf0 [ 478.157833][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 478.157896][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.157953][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 478.158007][T11258] bio_endio+0x713/0x860 [ 478.158048][T11258] submit_bio_noacct+0x306/0x1f60 [ 478.158113][T11258] __submit_merged_bio+0x33c/0x770 [ 478.158176][T11258] __submit_merged_write_cond+0x319/0x3f0 [ 478.158246][T11258] f2fs_write_cache_pages+0x2067/0x2570 [ 478.158344][T11258] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 478.158413][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.158476][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.158519][T11258] ? __lock_acquire+0x622/0x1c90 [ 478.158666][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.158705][T11258] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 478.158781][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.158835][T11258] f2fs_write_data_pages+0x4ad/0xd90 [ 478.158883][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 478.158943][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.158999][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.159051][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 478.159118][T11258] do_writepages+0x27a/0x600 [ 478.159176][T11258] ? __pfx_do_writepages+0x10/0x10 [ 478.159224][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 478.159280][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.159323][T11258] ? _raw_spin_unlock+0x28/0x50 [ 478.159383][T11258] filemap_fdatawrite_wbc+0x104/0x160 [ 478.159440][T11258] __filemap_fdatawrite_range+0xb9/0x100 [ 478.159479][T11258] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 478.159585][T11258] ? find_held_lock+0x2b/0x80 [ 478.159622][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.159667][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 478.159723][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.159781][T11258] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 478.159846][T11258] block_operations+0x2b0/0xfe0 [ 478.159900][T11258] ? __pfx_block_operations+0x10/0x10 [ 478.160006][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160054][T11258] ? ktime_get+0x200/0x310 [ 478.160094][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160138][T11258] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.160196][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160239][T11258] ? rcu_is_watching+0x12/0xc0 [ 478.160283][T11258] f2fs_write_checkpoint+0x32b/0x5300 [ 478.160336][T11258] ? kfree+0x2b8/0x6d0 [ 478.160390][T11258] ? f2fs_stop_gc_thread+0x79/0xd0 [ 478.160437][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160481][T11258] ? rcu_is_watching+0x12/0xc0 [ 478.160515][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160559][T11258] ? kthread_stop+0x272/0x630 [ 478.160613][T11258] kill_f2fs_super+0x3d6/0x490 [ 478.160654][T11258] ? __pfx_kill_f2fs_super+0x10/0x10 [ 478.160715][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.160787][T11258] deactivate_locked_super+0xc1/0x1a0 [ 478.160830][T11258] deactivate_super+0xde/0x100 [ 478.160871][T11258] cleanup_mnt+0x225/0x450 [ 478.160917][T11258] task_work_run+0x150/0x240 [ 478.160975][T11258] ? __pfx_task_work_run+0x10/0x10 [ 478.161026][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 478.161079][T11258] ? __pfx___x64_sys_umount+0x10/0x10 [ 478.161136][T11258] exit_to_user_mode_loop+0xec/0x130 [ 478.161192][T11258] do_syscall_64+0x426/0xfa0 [ 478.161231][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.161269][T11258] RIP: 0033:0x7f88f6f902f7 [ 478.161298][T11258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 478.161334][T11258] RSP: 002b:00007ffdd21f3298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 478.161368][T11258] RAX: 0000000000000000 RBX: 00007f88f7011d7d RCX: 00007f88f6f902f7 [ 478.161392][T11258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd21f3350 [ 478.161416][T11258] RBP: 00007ffdd21f3350 R08: 0000000000000000 R09: 0000000000000000 [ 478.161440][T11258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd21f43e0 [ 478.161464][T11258] R13: 00007f88f7011d7d R14: 0000000000074adc R15: 00007ffdd21f4420 [ 478.161521][T11258] [ 478.613145][T11258] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 478.673816][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.718918][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.796818][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.804038][ T7044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.877359][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.884573][ T7044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.923065][T12177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.933991][T12177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.061312][T12279] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.266127][T12243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.635843][T12279] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.735191][T12279] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 479.764897][T12279] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 479.785785][T12279] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 479.846871][T12177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.136465][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.245693][T12462] loop4: detected capacity change from 0 to 32768 [ 480.281384][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 480.320970][T12279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.340635][T12462] ea_get: invalid extended attribute [ 480.348507][T12462] ffff888050f9b0f8: 04 00 00 00 .... [ 480.407710][T12243] veth0_vlan: entered promiscuous mode [ 480.440693][T12279] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.465387][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.481498][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.516813][T12243] veth1_vlan: entered promiscuous mode [ 480.533250][ T10] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 480.545716][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 480.576031][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.583210][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.594415][ T10] usb 8-1: SerialNumber: syz [ 480.668659][ T5920] usb 9-1: USB disconnect, device number 7 [ 480.683867][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.691105][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.846075][ T10] usb 8-1: 0:2 : does not exist [ 480.884219][ T10] usb 8-1: unit 255 not found! [ 480.954618][T12243] veth0_macvtap: entered promiscuous mode [ 480.981938][ T10] usb 8-1: USB disconnect, device number 14 [ 481.016249][T12490] loop4: detected capacity change from 0 to 4096 [ 481.016933][T12495] loop8: detected capacity change from 0 to 2048 [ 481.087773][T12243] veth1_macvtap: entered promiscuous mode [ 481.095851][T12490] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 481.140452][T10645] udevd[10645]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 481.167420][T12495] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 481.179539][T12495] UDF-fs: Scanning with blocksize 512 failed [ 481.239737][T12490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.309649][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.338193][T12495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.389437][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.489619][ T3536] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.524457][ T3536] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.592320][ T3536] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.602280][T12177] veth0_vlan: entered promiscuous mode [ 481.608451][ T3536] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.630187][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.766036][T12177] veth1_vlan: entered promiscuous mode [ 482.002185][T12509] loop4: detected capacity change from 0 to 764 [ 482.091264][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.099114][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.148973][T12177] veth0_macvtap: entered promiscuous mode [ 482.295479][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 482.307289][T12177] veth1_macvtap: entered promiscuous mode [ 482.339728][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.384919][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.458363][T12177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.471451][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 482.485829][ T10] usb 5-1: config index 0 descriptor too short (expected 17186, got 34) [ 482.504362][ T10] usb 5-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 482.524591][ T10] usb 5-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 482.536152][ T10] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 482.543984][T12279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.545820][ T10] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 482.596287][T12177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.603931][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.693962][ T3536] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.719198][ T3536] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.796586][ T3536] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.832378][ T3536] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.885155][T12509] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.2093'. [ 482.949655][ T10] usb 5-1: string descriptor 0 read error: -71 [ 482.990559][ T10] usb 5-1: USB disconnect, device number 76 [ 483.155426][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.192520][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.308474][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.330786][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.839792][T12279] veth0_vlan: entered promiscuous mode [ 483.903811][T12279] veth1_vlan: entered promiscuous mode [ 484.049515][T12517] loop8: detected capacity change from 0 to 40427 [ 484.100557][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 484.101300][T12517] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 484.140870][T12279] veth0_macvtap: entered promiscuous mode [ 484.146879][T12517] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 484.167970][T12517] F2FS-fs (loop8): invalid crc value [ 484.191458][T12279] veth1_macvtap: entered promiscuous mode [ 484.305921][T12279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.315807][T12519] loop7: detected capacity change from 0 to 40427 [ 484.353989][T12519] F2FS-fs (loop7): build fault injection rate: 14 [ 484.387393][T12279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.396354][T12519] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 484.443801][T12519] F2FS-fs (loop7): invalid crc value [ 484.469736][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 484.485431][ T3536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.522240][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 484.544023][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.590264][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.625034][T12517] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.665599][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.685354][T12517] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 484.713587][T12517] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 484.813143][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 484.906235][T12519] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.955142][T12519] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 485.002258][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.004900][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.010090][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.058280][T12519] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 485.068446][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 485.156074][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 485.161778][T12519] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 485.171684][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 485.195343][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.212539][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.224520][T12567] F2FS-fs (loop7): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 485.238009][T12563] loop9: detected capacity change from 0 to 4096 [ 485.263433][ T10] usb 5-1: SerialNumber: syz [ 485.278740][T12563] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 485.296846][T12519] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 485.366317][T12563] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.567397][ T10] usb 5-1: 0:2 : does not exist [ 485.587214][ T10] usb 5-1: unit 255 not found! [ 485.592689][T11258] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x17b/0x1b0 [ 485.627454][T11258] F2FS-fs (loop7): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:878382,cpver:0,blkaddr:0] [ 485.666141][ T10] usb 5-1: USB disconnect, device number 77 [ 485.676007][T11258] syz-executor: attempt to access beyond end of device [ 485.676007][T11258] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 485.709127][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 485.709176][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 485.709198][T11258] Call Trace: [ 485.709210][T11258] [ 485.709224][T11258] dump_stack_lvl+0x16c/0x1f0 [ 485.709288][T11258] f2fs_handle_critical_error+0x624/0x9f0 [ 485.709342][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.709387][T11258] ? f2fs_build_fault_attr+0x53/0x1f0 [ 485.709441][T11258] f2fs_write_end_io+0x958/0xcf0 [ 485.709500][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 485.709562][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.709616][T11258] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 485.709667][T11258] bio_endio+0x713/0x860 [ 485.709705][T11258] submit_bio_noacct+0x306/0x1f60 [ 485.709771][T11258] __submit_merged_bio+0x33c/0x770 [ 485.709833][T11258] __submit_merged_write_cond+0x319/0x3f0 [ 485.709902][T11258] f2fs_write_cache_pages+0x2067/0x2570 [ 485.709995][T11258] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 485.710063][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710122][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710170][T11258] ? __lock_acquire+0x622/0x1c90 [ 485.710302][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710347][T11258] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 485.710415][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710467][T11258] f2fs_write_data_pages+0x4ad/0xd90 [ 485.710512][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 485.710571][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710627][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710676][T11258] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 485.710746][T11258] do_writepages+0x27a/0x600 [ 485.710798][T11258] ? __pfx_do_writepages+0x10/0x10 [ 485.710841][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 485.710891][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.710930][T11258] ? _raw_spin_unlock+0x28/0x50 [ 485.710983][T11258] filemap_fdatawrite_wbc+0x104/0x160 [ 485.711033][T11258] __filemap_fdatawrite_range+0xb9/0x100 [ 485.711069][T11258] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 485.711159][T11258] ? find_held_lock+0x2b/0x80 [ 485.711192][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711233][T11258] ? do_raw_spin_unlock+0x172/0x230 [ 485.711282][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711328][T11258] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 485.711381][T11258] block_operations+0x2b0/0xfe0 [ 485.711427][T11258] ? __pfx_block_operations+0x10/0x10 [ 485.711513][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711556][T11258] ? ktime_get+0x200/0x310 [ 485.711592][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711630][T11258] ? lockdep_hardirqs_on+0x7c/0x110 [ 485.711683][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711722][T11258] ? rcu_is_watching+0x12/0xc0 [ 485.711765][T11258] f2fs_write_checkpoint+0x32b/0x5300 [ 485.711810][T11258] ? kfree+0x2b8/0x6d0 [ 485.711859][T11258] ? f2fs_stop_gc_thread+0x79/0xd0 [ 485.711900][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.711939][T11258] ? rcu_is_watching+0x12/0xc0 [ 485.711969][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.712009][T11258] ? kthread_stop+0x272/0x630 [ 485.712056][T11258] kill_f2fs_super+0x3d6/0x490 [ 485.712092][T11258] ? __pfx_kill_f2fs_super+0x10/0x10 [ 485.712144][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.712198][T11258] deactivate_locked_super+0xc1/0x1a0 [ 485.712235][T11258] deactivate_super+0xde/0x100 [ 485.712271][T11258] cleanup_mnt+0x225/0x450 [ 485.712310][T11258] task_work_run+0x150/0x240 [ 485.712360][T11258] ? __pfx_task_work_run+0x10/0x10 [ 485.712406][T11258] ? srso_alias_return_thunk+0x5/0xfbef5 [ 485.712448][T11258] ? __pfx___x64_sys_umount+0x10/0x10 [ 485.712498][T11258] exit_to_user_mode_loop+0xec/0x130 [ 485.712548][T11258] do_syscall_64+0x426/0xfa0 [ 485.712582][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.712614][T11258] RIP: 0033:0x7f88f6f902f7 [ 485.712641][T11258] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 485.712674][T11258] RSP: 002b:00007ffdd21f3298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 485.712705][T11258] RAX: 0000000000000000 RBX: 00007f88f7011d7d RCX: 00007f88f6f902f7 [ 485.712727][T11258] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd21f3350 [ 485.712752][T11258] RBP: 00007ffdd21f3350 R08: 0000000000000000 R09: 0000000000000000 [ 485.712774][T11258] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd21f43e0 [ 485.712795][T11258] R13: 00007f88f7011d7d R14: 0000000000076810 R15: 00007ffdd21f4420 [ 485.712843][T11258] [ 486.195040][T11258] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 486.306371][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.362748][T12177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.900986][T12588] loop9: detected capacity change from 0 to 764 [ 487.329692][ T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 487.521588][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 487.548768][ T10] usb 10-1: config index 0 descriptor too short (expected 17186, got 34) [ 487.572790][ T10] usb 10-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 487.604795][ T10] usb 10-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 487.639758][ T10] usb 10-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 487.661264][ T10] usb 10-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 487.680805][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.749054][T12580] loop1: detected capacity change from 0 to 32768 [ 487.844530][T12580] ea_get: invalid extended attribute [ 487.878764][T12580] ffff88807e6e1580: 04 00 00 00 .... [ 487.918555][T12588] netlink: 1688 bytes leftover after parsing attributes in process `syz.9.2108'. [ 487.939070][ T10] usb 10-1: string descriptor 0 read error: -71 [ 487.982522][ T10] usb 10-1: USB disconnect, device number 2 [ 488.191166][ T6002] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 488.367941][ T6002] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 488.400787][ T6002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.432790][ T6002] usb 9-1: Product: syz [ 488.447754][ T6002] usb 9-1: Manufacturer: syz [ 488.482742][ T6002] usb 9-1: SerialNumber: syz [ 489.011194][ T5920] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 489.016143][T12634] loop7: detected capacity change from 0 to 2048 [ 489.116855][T12634] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 489.163137][T12634] UDF-fs: Scanning with blocksize 512 failed [ 489.201541][ T5920] usb 5-1: Using ep0 maxpacket: 16 [ 489.212243][T12634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.241992][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.261121][ T5920] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.291131][ T5920] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 489.312103][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.372511][ T5920] usb 5-1: config 0 descriptor?? [ 489.431205][ T5934] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 489.596427][ T5934] usb 6-1: device descriptor read/64, error -71 [ 489.604382][T12647] syz_tun: entered allmulticast mode [ 489.778934][T12619] loop1: detected capacity change from 0 to 40427 [ 489.808754][T12619] F2FS-fs (loop1): build fault injection rate: 14 [ 489.818806][T12619] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 489.839366][T12619] F2FS-fs (loop1): invalid crc value [ 489.872896][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 489.901967][ T5934] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 489.939874][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of bio_endio+0x713/0x860 [ 490.034826][ T5927] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 490.061516][ T5934] usb 6-1: device descriptor read/64, error -71 [ 490.162074][T12619] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 490.171648][ T5934] usb usb6-port1: attempt power cycle [ 490.179953][T12619] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_recover_fsync_data+0x49d/0x98b0 [ 490.196977][T12619] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 490.202465][ T5927] usb 8-1: Using ep0 maxpacket: 8 [ 490.232698][T12619] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 490.236818][ T5927] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 490.265670][ T5927] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.282633][T12619] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x556/0x2750 [ 490.291385][ T5927] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 490.304685][T12619] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_get_node_info+0xd42/0x11e0 [ 490.312629][ T5927] usb 8-1: config 0 has no interface number 0 [ 490.343862][ T5927] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 490.355737][ T6002] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 490.393214][ T5927] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 490.407887][T12243] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of __get_node_folio+0x17b/0x1b0 [ 490.422508][ T5927] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 490.434165][T12243] F2FS-fs (loop1): inconsistent node block, node_type:3, nid:12, node_footer[nid:12,ino:3,ofs:878382,cpver:0,blkaddr:0] [ 490.461129][ T5927] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 490.476567][ T5927] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.493389][ T5927] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 490.505593][ T5927] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.515303][T12243] syz-executor: attempt to access beyond end of device [ 490.515303][T12243] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 490.521157][ T5934] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 490.529382][ T5927] usb 8-1: Product: syz [ 490.543196][ T5927] usb 8-1: Manufacturer: syz [ 490.545393][T12243] CPU: 0 UID: 0 PID: 12243 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 490.545437][T12243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.545458][T12243] Call Trace: [ 490.545470][T12243] [ 490.545484][T12243] dump_stack_lvl+0x16c/0x1f0 [ 490.545547][T12243] f2fs_handle_critical_error+0x624/0x9f0 [ 490.545600][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.545643][T12243] ? f2fs_build_fault_attr+0x53/0x1f0 [ 490.545701][T12243] f2fs_write_end_io+0x958/0xcf0 [ 490.545789][T12243] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 490.545848][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.545901][T12243] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 490.545953][T12243] bio_endio+0x713/0x860 [ 490.545992][T12243] submit_bio_noacct+0x306/0x1f60 [ 490.546053][T12243] __submit_merged_bio+0x33c/0x770 [ 490.546112][T12243] __submit_merged_write_cond+0x319/0x3f0 [ 490.546178][T12243] f2fs_write_cache_pages+0x2067/0x2570 [ 490.546273][T12243] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 490.546331][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546387][T12243] ? __lock_acquire+0xb8a/0x1c90 [ 490.546457][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546565][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546607][T12243] ? free_unref_folios+0x109a/0x1610 [ 490.546673][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546729][T12243] f2fs_write_data_pages+0x4ad/0xd90 [ 490.546778][T12243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 490.546835][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546889][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.546937][T12243] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 490.547001][T12243] do_writepages+0x27a/0x600 [ 490.547056][T12243] ? __pfx_do_writepages+0x10/0x10 [ 490.547102][T12243] ? do_raw_spin_unlock+0x172/0x230 [ 490.547156][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.547198][T12243] ? _raw_spin_unlock+0x28/0x50 [ 490.547255][T12243] filemap_fdatawrite_wbc+0x104/0x160 [ 490.547309][T12243] __filemap_fdatawrite_range+0xb9/0x100 [ 490.547347][T12243] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 490.547446][T12243] ? find_held_lock+0x2b/0x80 [ 490.547481][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.547524][T12243] ? do_raw_spin_unlock+0x172/0x230 [ 490.547577][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.547626][T12243] f2fs_sync_dirty_inodes+0x2a2/0x980 [ 490.547684][T12243] block_operations+0x2b0/0xfe0 [ 490.547720][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.547809][T12243] ? __pfx_block_operations+0x10/0x10 [ 490.547919][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.547965][T12243] ? ktime_get+0x200/0x310 [ 490.548004][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548045][T12243] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.548103][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548146][T12243] ? rcu_is_watching+0x12/0xc0 [ 490.548187][T12243] f2fs_write_checkpoint+0x32b/0x5300 [ 490.548229][T12243] ? __pfx_try_to_wake_up+0x10/0x10 [ 490.548289][T12243] ? kfree+0x2b8/0x6d0 [ 490.548341][T12243] ? f2fs_stop_gc_thread+0x79/0xd0 [ 490.548385][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548427][T12243] ? rcu_is_watching+0x12/0xc0 [ 490.548461][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548503][T12243] ? kthread_stop+0x272/0x630 [ 490.548554][T12243] kill_f2fs_super+0x3d6/0x490 [ 490.548594][T12243] ? __pfx_kill_f2fs_super+0x10/0x10 [ 490.548650][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548709][T12243] deactivate_locked_super+0xc1/0x1a0 [ 490.548753][T12243] deactivate_super+0xde/0x100 [ 490.548793][T12243] cleanup_mnt+0x225/0x450 [ 490.548835][T12243] task_work_run+0x150/0x240 [ 490.548889][T12243] ? __pfx_task_work_run+0x10/0x10 [ 490.548937][T12243] ? srso_alias_return_thunk+0x5/0xfbef5 [ 490.548983][T12243] ? __pfx___x64_sys_umount+0x10/0x10 [ 490.549037][T12243] exit_to_user_mode_loop+0xec/0x130 [ 490.549091][T12243] do_syscall_64+0x426/0xfa0 [ 490.549128][T12243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.549165][T12243] RIP: 0033:0x7f5b0cb902f7 [ 490.549193][T12243] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 490.549229][T12243] RSP: 002b:00007ffe2ab10058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 490.549262][T12243] RAX: 0000000000000000 RBX: 00007f5b0cc11d7d RCX: 00007f5b0cb902f7 [ 490.549286][T12243] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2ab10110 [ 490.549310][T12243] RBP: 00007ffe2ab10110 R08: 0000000000000000 R09: 0000000000000000 [ 490.549332][T12243] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2ab111a0 [ 490.549356][T12243] R13: 00007f5b0cc11d7d R14: 0000000000077b4a R15: 00007ffe2ab111e0 [ 490.549407][T12243] [ 490.550424][T12243] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 490.565849][ T5927] usb 8-1: SerialNumber: syz [ 490.601773][ T5934] usb 6-1: device descriptor read/8, error -71 [ 490.861520][ T5934] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 490.879782][ T5927] usb 8-1: config 0 descriptor?? [ 490.960723][ T5934] usb 6-1: device descriptor read/8, error -71 [ 490.966956][ T6002] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 491.111891][ T5934] usb usb6-port1: unable to enumerate USB device [ 491.132692][T12651] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 491.144853][ T5927] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 491.165136][ T6002] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 491.201487][ T6002] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 491.212759][ T6002] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 491.244341][ T6002] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 491.277217][ T6002] usb 9-1: USB disconnect, device number 8 [ 491.386924][ T5934] usb 8-1: USB disconnect, device number 15 [ 491.569119][T12664] loop9: detected capacity change from 0 to 32768 [ 491.663891][T12664] ea_get: invalid extended attribute [ 491.679322][T12664] ffff88807e7d4c70: 04 00 00 00 .... [ 491.810184][ T5934] usb 5-1: USB disconnect, device number 78 [ 491.927871][T12681] loop4: detected capacity change from 0 to 764 [ 492.333322][ T5934] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 492.500612][T12686] loop7: detected capacity change from 0 to 4096 [ 492.551959][ T5934] usb 5-1: Using ep0 maxpacket: 8 [ 492.571203][T12686] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 492.615308][ T5934] usb 5-1: config index 0 descriptor too short (expected 17186, got 34) [ 492.641232][ T5934] usb 5-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 492.685035][T12686] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.687545][ T5934] usb 5-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 492.728787][ T5934] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 492.771151][ T5934] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 492.800596][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.054947][T12681] netlink: 'syz.4.2134': attribute type 72 has an invalid length. [ 493.099301][ T5934] usb 5-1: string descriptor 0 read error: -71 [ 493.156828][ T5934] usb 5-1: USB disconnect, device number 79 [ 493.369892][T11258] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.621367][ T5934] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 493.825202][ T5934] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.844885][ T5934] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.869463][ T5934] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.879998][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.945491][ T5934] usb 2-1: SerialNumber: syz [ 494.297349][ T5934] usb 2-1: 0:2 : does not exist [ 494.346134][ T5934] usb 2-1: unit 255 not found! [ 494.482755][T12728] loop5: detected capacity change from 0 to 65536 [ 494.496603][ T5934] usb 2-1: USB disconnect, device number 30 [ 494.498921][T12728] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 494.557423][T12728] XFS (loop5): Ending clean mount [ 494.566620][T12728] XFS (loop5): Quotacheck needed: Please wait. [ 494.601590][T12741] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2150'. [ 494.634798][T12728] XFS (loop5): Quotacheck: Done. [ 494.710579][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.765347][T12279] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 494.809368][T12703] loop8: detected capacity change from 0 to 40427 [ 494.832523][ T10] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 494.883561][T12703] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 494.911356][T12703] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 494.969292][T12703] F2FS-fs (loop8): invalid crc value [ 495.011020][ T10] usb 5-1: device descriptor read/64, error -71 [ 495.202935][ T5192] udevd[5192]: worker [10645] terminated by signal 33 (Unknown signal 33) [ 495.249827][ T5192] udevd[5192]: worker [10645] failed while handling '/devices/virtual/block/loop8' [ 495.272456][ T10] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 495.481440][ T10] usb 5-1: device descriptor read/64, error -71 [ 495.546701][T12703] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 495.580030][T12703] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 495.596512][T12703] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 495.620813][ T10] usb usb5-port1: attempt power cycle [ 495.657320][T12764] loop1: detected capacity change from 0 to 2048 [ 495.699317][T12764] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 495.807532][T12772] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.824023][ T5832] udevd[5832]: incorrect nilfs2 checksum on /dev/loop1 [ 496.012226][ T10] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 496.055601][T12778] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 496.071176][ T10] usb 5-1: device descriptor read/8, error -71 [ 496.299341][ T5934] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 496.332732][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 496.383109][ T10] usb 5-1: device descriptor read/8, error -71 [ 496.453775][T12785] loop5: detected capacity change from 0 to 2048 [ 496.462657][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 496.482832][T12785] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 496.498229][T12785] UDF-fs: Scanning with blocksize 512 failed [ 496.506338][ T10] usb usb5-port1: unable to enumerate USB device [ 496.515458][ T5934] usb 10-1: config 0 has an invalid interface number: 151 but max is 1 [ 496.542878][ T5934] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.572798][ T5934] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 496.583061][ T5934] usb 10-1: config 0 has no interface number 0 [ 496.589943][ T5934] usb 10-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 496.619362][T12785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 496.669212][ T5934] usb 10-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 496.722574][ T5934] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 496.766741][ T5934] usb 10-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 496.835099][ T5934] usb 10-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.894118][ T5934] usb 10-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 496.927834][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.960730][ T5934] usb 10-1: Product: syz [ 496.991448][ T5934] usb 10-1: Manufacturer: syz [ 496.996188][ T5934] usb 10-1: SerialNumber: syz [ 497.077728][T12795] loop5: detected capacity change from 0 to 1024 [ 497.088139][ T5934] usb 10-1: config 0 descriptor?? [ 497.126612][T12776] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 497.145796][ T5934] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.259327][T12795] [ 497.261701][T12795] ====================================================== [ 497.268765][T12795] WARNING: possible circular locking dependency detected [ 497.275769][T12795] syzkaller #0 Not tainted [ 497.280169][T12795] ------------------------------------------------------ [ 497.287169][T12795] syz.5.2164/12795 is trying to acquire lock: [ 497.293223][T12795] ffff88804963bdc8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}, at: hfsplus_file_extend+0x1ca/0x12b0 [ 497.304311][T12795] [ 497.304311][T12795] but task is already holding lock: [ 497.311662][T12795] ffff8880453d60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x186/0x2d0 [ 497.321383][T12795] [ 497.321383][T12795] which lock already depends on the new lock. [ 497.321383][T12795] [ 497.331781][T12795] [ 497.331781][T12795] the existing dependency chain (in reverse order) is: [ 497.340783][T12795] [ 497.340783][T12795] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}: [ 497.349414][T12795] __mutex_lock+0x193/0x1060 [ 497.354543][T12795] hfsplus_find_init+0x186/0x2d0 [ 497.360022][T12795] hfsplus_file_truncate+0x2b8/0xcb0 [ 497.365839][T12795] hfsplus_setattr+0x19f/0x320 [ 497.371125][T12795] notify_change+0x6d2/0x12a0 [ 497.376320][T12795] do_truncate+0x1d7/0x230 [ 497.381258][T12795] vfs_truncate+0x5d6/0x6e0 [ 497.386287][T12795] __x64_sys_truncate+0x172/0x1e0 [ 497.391840][T12795] do_syscall_64+0xcd/0xfa0 [ 497.396862][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.403290][T12795] [ 497.403290][T12795] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{4:4}: [ 497.412342][T12795] __lock_acquire+0x126f/0x1c90 [ 497.417724][T12795] lock_acquire+0x179/0x350 [ 497.422764][T12795] __mutex_lock+0x193/0x1060 [ 497.427878][T12795] hfsplus_file_extend+0x1ca/0x12b0 [ 497.433605][T12795] hfsplus_bmap_reserve+0x31f/0x420 [ 497.439336][T12795] __hfsplus_ext_write_extent+0x474/0x5e0 [ 497.445580][T12795] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 497.451744][T12795] hfsplus_file_truncate+0x44d/0xcb0 [ 497.457561][T12795] hfsplus_setattr+0x19f/0x320 [ 497.462937][T12795] notify_change+0x6d2/0x12a0 [ 497.468139][T12795] do_truncate+0x1d7/0x230 [ 497.473094][T12795] vfs_truncate+0x5d6/0x6e0 [ 497.478124][T12795] __x64_sys_truncate+0x172/0x1e0 [ 497.483676][T12795] do_syscall_64+0xcd/0xfa0 [ 497.488876][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.495336][T12795] [ 497.495336][T12795] other info that might help us debug this: [ 497.495336][T12795] [ 497.505549][T12795] Possible unsafe locking scenario: [ 497.505549][T12795] [ 497.512985][T12795] CPU0 CPU1 [ 497.518338][T12795] ---- ---- [ 497.523687][T12795] lock(&tree->tree_lock/1); [ 497.528379][T12795] lock(&HFSPLUS_I(inode)->extents_lock); [ 497.536703][T12795] lock(&tree->tree_lock/1); [ 497.543916][T12795] lock(&HFSPLUS_I(inode)->extents_lock); [ 497.549725][T12795] [ 497.549725][T12795] *** DEADLOCK *** [ 497.549725][T12795] [ 497.557866][T12795] 4 locks held by syz.5.2164/12795: [ 497.563056][T12795] #0: ffff88804b974420 (sb_writers#20){.+.+}-{0:0}, at: vfs_truncate+0x336/0x6e0 [ 497.572335][T12795] #1: ffff88806967e178 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: do_truncate+0x146/0x230 [ 497.582738][T12795] #2: ffff88806967df88 (&hip->extents_lock){+.+.}-{4:4}, at: hfsplus_file_truncate+0x211/0xcb0 [ 497.593223][T12795] #3: ffff8880453d60b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfsplus_find_init+0x186/0x2d0 [ 497.603374][T12795] [ 497.603374][T12795] stack backtrace: [ 497.609247][T12795] CPU: 1 UID: 0 PID: 12795 Comm: syz.5.2164 Not tainted syzkaller #0 PREEMPT(full) [ 497.609287][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.609308][T12795] Call Trace: [ 497.609320][T12795] [ 497.609333][T12795] dump_stack_lvl+0x116/0x1f0 [ 497.609388][T12795] print_circular_bug+0x275/0x350 [ 497.609431][T12795] check_noncircular+0x14c/0x170 [ 497.609478][T12795] __lock_acquire+0x126f/0x1c90 [ 497.609522][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.609567][T12795] lock_acquire+0x179/0x350 [ 497.609607][T12795] ? hfsplus_file_extend+0x1ca/0x12b0 [ 497.609648][T12795] ? __pfx___might_resched+0x10/0x10 [ 497.609683][T12795] ? hfsplus_file_extend+0x1ca/0x12b0 [ 497.609720][T12795] __mutex_lock+0x193/0x1060 [ 497.609759][T12795] ? hfsplus_file_extend+0x1ca/0x12b0 [ 497.609800][T12795] ? check_path.constprop.0+0x24/0x50 [ 497.609838][T12795] ? __pfx___mutex_lock+0x10/0x10 [ 497.609870][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.609914][T12795] ? __lock_acquire+0x1053/0x1c90 [ 497.609961][T12795] ? hfsplus_file_extend+0x1ca/0x12b0 [ 497.609999][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610039][T12795] hfsplus_file_extend+0x1ca/0x12b0 [ 497.610079][T12795] ? __pfx___mutex_trylock_common+0x10/0x10 [ 497.610124][T12795] ? __pfx___might_resched+0x10/0x10 [ 497.610154][T12795] ? __pfx_hfsplus_file_extend+0x10/0x10 [ 497.610192][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610232][T12795] ? rcu_is_watching+0x12/0xc0 [ 497.610264][T12795] ? trace_contention_end+0xdd/0x130 [ 497.610307][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610346][T12795] ? __mutex_lock+0x1c5/0x1060 [ 497.610376][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610415][T12795] ? hfsplus_brec_find+0x4e6/0x660 [ 497.610466][T12795] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 497.610521][T12795] hfsplus_bmap_reserve+0x31f/0x420 [ 497.610569][T12795] __hfsplus_ext_write_extent+0x474/0x5e0 [ 497.610609][T12795] ? hfsplus_find_init+0x97/0x2d0 [ 497.610659][T12795] __hfsplus_ext_cache_extent+0x98/0x9d0 [ 497.610698][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610746][T12795] hfsplus_file_truncate+0x44d/0xcb0 [ 497.610786][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610825][T12795] ? __up_read+0x1f8/0x750 [ 497.610874][T12795] ? __pfx_hfsplus_file_truncate+0x10/0x10 [ 497.610918][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.610960][T12795] ? inode_newsize_ok+0x13b/0x200 [ 497.611014][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.611064][T12795] hfsplus_setattr+0x19f/0x320 [ 497.611101][T12795] ? __pfx_hfsplus_setattr+0x10/0x10 [ 497.611137][T12795] notify_change+0x6d2/0x12a0 [ 497.611174][T12795] do_truncate+0x1d7/0x230 [ 497.611217][T12795] ? __pfx_do_truncate+0x10/0x10 [ 497.611262][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.611305][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.611348][T12795] ? mnt_get_write_access+0x1e9/0x2f0 [ 497.611407][T12795] vfs_truncate+0x5d6/0x6e0 [ 497.611448][T12795] ? __pfx_vfs_truncate+0x10/0x10 [ 497.611491][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.611534][T12795] ? putname+0x154/0x1a0 [ 497.611586][T12795] __x64_sys_truncate+0x172/0x1e0 [ 497.611628][T12795] ? __pfx___x64_sys_truncate+0x10/0x10 [ 497.611669][T12795] ? srso_alias_return_thunk+0x5/0xfbef5 [ 497.611713][T12795] do_syscall_64+0xcd/0xfa0 [ 497.611759][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.611792][T12795] RIP: 0033:0x7fa42e38efc9 [ 497.611818][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.611850][T12795] RSP: 002b:00007fa42f310038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 497.611881][T12795] RAX: ffffffffffffffda RBX: 00007fa42e5e5fa0 RCX: 00007fa42e38efc9 [ 497.611903][T12795] RDX: 0000000000000000 RSI: 000000000000fbb0 RDI: 0000200000000000 [ 497.611925][T12795] RBP: 00007fa42e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.611947][T12795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.611968][T12795] R13: 00007fa42e5e6038 R14: 00007fa42e5e5fa0 R15: 00007fffbaa261a8 [ 497.612002][T12795] [ 498.084930][T12806] loop8: detected capacity change from 0 to 764 [ 498.091004][ T10] usb 10-1: USB disconnect, device number 3 [ 498.133568][T10646] udevd[10646]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.196077][ T36] hfsplus: b-tree write err: -5, ino 3 [ 498.225785][ T6005] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 498.341125][ T6002] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 498.383981][ T6005] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.394135][ T6005] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 498.404322][ T6005] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 498.414077][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 498.422399][ T6005] usb 8-1: SerialNumber: syz [ 498.492167][ T6002] usb 9-1: Using ep0 maxpacket: 8 [ 498.503037][ T6002] usb 9-1: config index 0 descriptor too short (expected 17186, got 34) [ 498.511972][ T6002] usb 9-1: config 143 has too many interfaces: 150, using maximum allowed: 32 [ 498.520944][ T6002] usb 9-1: config 143 has an invalid descriptor of length 49, skipping remainder of the config [ 498.531666][ T6002] usb 9-1: config 143 has 0 interfaces, different from the descriptor's value: 150 [ 498.541244][ T6002] usb 9-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 498.550476][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.650251][ T6005] usb 8-1: 0:2 : does not exist [ 498.663985][ T6005] usb 8-1: unit 255 not found! [ 498.706544][ T6005] usb 8-1: USB disconnect, device number 16 [ 498.745547][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.763812][T12806] netlink: 'syz.8.2159': attribute type 72 has an invalid length. [ 498.783099][ T6002] usb 9-1: string descriptor 0 read error: -71 [ 498.804745][ T6002] usb 9-1: USB disconnect, device number 9