last executing test programs: 8m43.291306102s ago: executing program 1 (id=2351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@acl}, {@journal_path={'journal_path', 0x3d, './file0/../file0/../file0/../file0'}}, {@jqfmt_vfsold}, {@user_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@quota}]}, 0x3, 0x448, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) 8m40.219522667s ago: executing program 1 (id=2357): syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0x149, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 8m39.519381239s ago: executing program 1 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) rt_sigsuspend(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x4}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000003a40)=[{{&(0x7f00000004c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}, {{&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4000) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 8m36.755901457s ago: executing program 1 (id=2372): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa0003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8m36.376890898s ago: executing program 1 (id=2376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000"], 0x122}}, 0x10) 8m35.456775118s ago: executing program 1 (id=2378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad6706000002000000070300000ee60000bf250000000000002d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56600a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1003f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8ddaf2cdad3d1a74a2f078aa6402483856a6e495408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae06e394c9639564f000fc3cdd05a157544d0200000000000000ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f88e80ef80c6ed3e1ff91ff111000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780055c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcbacec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0ddd932d838ff651023853d42210642986f8bbc7340bc8393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d68124674478186edd036f15bf847c33f79e1a0ad3d2b5080ecb01420c9f1b534e969fce97ffff07000009000000bfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a823e28f359608ea326c77a1aa17318f392a0ec6c188916f4149c503027feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8e68f076c659f56d6c7f97a94d604f45cfe88b30c170000000001000000ef931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f0400000000000000d23b48bb38b31a14ffcddd92c38f6b6d86a0e56d47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f1300007d6072f0cf120ad2ba519afdd43a14000000000000000000000000007ef2f3c58d045f0700000094069acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d000000000000000000007758b1267669ded883b5867c5916a74843b784955108f750c57744c76a09629dd0aaca5cb0f14f49db80a1aa2692c18fbb31cbdb3f2e138e6d5ba3491fc3617b511f24bad26466407e39000000000080d7a1bf4624d31c13a6840f45a7f4e01a50d790132abb36915e35b1ac35bf3921357f635b2427847b8fe1e2123153ecd6d1f76820d4f8fa0b96b50c457ae8d5f2351cdb7bc8170380557bc11cf6ee3395974e37018a2a7473312cb32affb8ff72a253e0d36099e460f13694b9891af526d9608271838e83d17103887f34210dd4c0cf60dec608b4ca5ba2f3037bf381e7b5d5b27820000000000000000000000b719bd34f3244730f708fdd532640edc6b82dd4ad72ecbaccafef806f5447aba2246d56a601bbd8c24ba1e16dda3296ce10de6830"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$eJzs3e9rJGcdAPDvbHbz4y6aqH1RhdbDFu6KXnLp2TaI9E4Q3xWU6usz5PZCuE32SDbtJRTJ4R8giNiCb/SVbwT/AEHuTyhCwb4XK8qhVwWLaEfmx+ZXdy7JXXZXk88HnsyzM8/M9/vsbmZnZ55kAjizLkTE9YgYiYgXImKqnF8rS2wXJWv34cO3FrOSRJq+/tckknJe1iyJGEnKdc+Xq40Xk/0misn65tbthVaruVbOnu2s3Jld39y6vLyysNRcaq5evTr38vwr8y/NXzmRfmb9evWbf/rpj375rVd/+5U3/3DjL5d+kOU7WS7v9uOkFc9JI3sudtQjYq0fwYZgpOzPv9JCRbOxAacFAECF7Bj/sxHxpfz4fypG8qO5aqN76knfswMAAABOQnptMv6dRKTH1Dj2GgAAAMCw1PIxsEltphwLMBm12sxMMYb3qThXa7XXO1++1d5YvVmMlZ2ORu3Wcqt5JR9TOxYRjSR7PLdzRqF4/GLeNivJvjHAP5mayJfPLLZbN4dxwgMAAADOoPMHvv//Y6r4/g8AAACcMtPl9NyQ8wAAAAD6Z3rYCQAAAAB99xjf/0f7kQcAAADQF99+7bWspN37X998Y3PjdvuNyzeb67dnVjYWZxbba3dmltrtpVY6FrFy2PZa7fadr8bqxt3ZTnO9M7u+uXVjpb2x2rmxvO8W2AAAAMAAfeaL999PImL7axN5ie61/ZGKFfytAJwatSO2S7MfH/Q3F2Cwqj7mgdOv/ujFhvnCKdYoJsmw8wCG57AdwHhVi3cfK5zjCgAAGIKLn7//fpp88vp/fffcAHBKHfX6P3D6VFz/T6cGnQgwcJXX/w8ZGAD8/2sYAQhn3uHX/yu8my+6fniEND10WwAAQF9N5iWpzZTXAiej9lFaiOloJLeWW80rEfHpiPj9VGMsezyXr5n4owEAAAAAAAAAAAAAAAAAAAAAAAAAOKI0TSJ9DPXHWgsAAAAYhojan5PyPsAXp56fPHh+YDT5KL8V8Mdpmr75s9ffvrvQ6azNZfP/ls8fjYjOO9n80WGcvgAAAAD26N7lP//+/mJjyNkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFp9+PCtxW4ZZNwH34iI6V7x6zGeT8ejERHn/p5Efc96SUSMnED87XsR8XSv+EmWVkyXWRyMX4uIiTyLJ45fK6tV8Z9J07Rn/PNPHB3OtvvZ/ud6r9//WlzIp71//+tFufak8av3f7Wd/d/Iwfj1Yv/3qSPG+MJ7v57d8/B7u9WxYnm99/6vGz+p2P8+1ytY/ZOzvv/dra2q3NJfRFzsfv6kEbEn/t5Ys52VO7Prm1uXl1cWlppLzdWrV+denn9l/qX5K7O3llvN8ufuht9Od6o/fuY3H1fFf3Ah4lwZf7SbU/nBMl1Mvp7spDK6L6fns0qjasu7/vPe3YefK6p7W+dbfXAv4tJzvV//p/Npz+f/5/9Mc/nnQLb8YvmZkGwX9Yjy7RsRz/7qd89W9v/eeFk7/ut/6fCu5174zg//eMSmAMAArG9u3V5otZprfa+8k6bp0RpnR6XVbdLyaKw7J4nYPtgmO4A74V5MRETFov2xJspnNY665acqU/1gImJAr85xK9eO0zgdO9abLdn+H+jgGa6M5m/Ioe6WAACAPtg9+h92JgAAAAAAAAAAAAAAAAAAAHB2DeL/ih2MuT2crgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPNJ/AwAA//97otHd") 8m20.322220692s ago: executing program 32 (id=2378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) setreuid(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x588, &(0x7f0000000700)="$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") 22.679150257s ago: executing program 0 (id=3265): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 19.76393151s ago: executing program 3 (id=3269): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000003c0)={0x3, 0x9, [{0x7, 0x0, 0x1000}, {0x80000000, 0x0, 0x6}, {0xffff0001, 0x0, 0x3}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7ffc, 0x7f, 0x192, 0xd, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x8, 0xb, 0x8004, 0x5}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x6, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x10001, '\x00', r4, 0xffffffffffffffff, 0x10, 0x0, 0x1}, 0x50) write$char_usb(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 19.597383841s ago: executing program 5 (id=3271): syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000007c0), 0x600, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pwrite64(r1, &(0x7f0000000140)='2', 0xfffffd28, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) 18.047417913s ago: executing program 5 (id=3272): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) socket(0xa, 0x3, 0x3a) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x1, 0x3f, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 16.761864646s ago: executing program 0 (id=3273): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003dc0)={0x484, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x42}}}}, [@NL80211_ATTR_FTM_RESPONDER={0x45c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x59, 0x3, "45a0bdf40cb535cdb888af8bd3b4742bf996665031b99b07bdbd1a2f10594dee36b142ae460a8f67d039b4e86c4c2553327a74c4ad07552e1b2a7ff1679e4c691a2e33e171c442ee284969ef25a3abddd811d63e43"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "4dacb7f9ccb3a83f1d09ad732bc4e9b7285e20c9ebe80ee51ea1810c32"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "8de64880a9bdcff7490ca6706ec79f52cbff08a92cf8dc4df4218ef5ec4fdd81e3c2fb62d9591ce858a77d87ace2711f4749b743517c62475bd4b5a41395815b52"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x381, 0x3, "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"}]}]}, 0x484}}, 0x40040a1) recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) 14.328773444s ago: executing program 4 (id=3277): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x3, 0x4000043) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x81, 0xea, 0x32, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x91b}}, 0x18) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0xc000000000000, 0x40, 0x1, r2}}}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x60048, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 14.283898722s ago: executing program 3 (id=3278): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 13.852618384s ago: executing program 0 (id=3280): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a0500"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') msgget$private(0x0, 0x101) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 12.924543063s ago: executing program 4 (id=3281): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket(0x8, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create(0x207ffd) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xfffc, 0x4e23, 0x5, 0x0, 0x20, 0x80}, {0x9, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x70002012}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, 0x0, 0x0) 12.699693934s ago: executing program 2 (id=3282): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 11.560075098s ago: executing program 0 (id=3283): add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 10.717505635s ago: executing program 4 (id=3284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8008, 0x0) 10.434646136s ago: executing program 5 (id=3285): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ef, &(0x7f00000001c0)="$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") r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socket(0x8, 0x3, 0xff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x207ffd) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0xfffc, 0x4e23, 0x5, 0x0, 0x20, 0x80}, {0x9, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, 0x0, 0x0) 9.215956266s ago: executing program 5 (id=3286): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) 9.126622106s ago: executing program 3 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000201010400000000000000000a"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 7.697969535s ago: executing program 4 (id=3288): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r2, 0x851, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000003c0)={0x3, 0x9, [{0x7, 0x0, 0x1000}, {0x80000000, 0x0, 0x6}, {0xffff0001, 0x0, 0x3}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7ffc, 0x7f, 0x192, 0xd, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x8, 0xb, 0x8004, 0x5}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x6, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x45}, 0x4040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x10001, '\x00', r4, 0xffffffffffffffff, 0x10, 0x0, 0x1}, 0x50) write$char_usb(r1, 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, 0x0, 0x2) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 7.226036271s ago: executing program 2 (id=3289): mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x0, 0x0) 6.111380694s ago: executing program 3 (id=3290): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x39, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) 5.984552249s ago: executing program 0 (id=3291): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={{0x0, 0x3fffffff}, {0x0, 0x3fffffff}}, 0x0) socket(0xa, 0x3, 0x3a) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x1, 0x3f, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 5.911673806s ago: executing program 2 (id=3292): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000022c0), 0xa0003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xdc, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x70, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x120}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.160844824s ago: executing program 5 (id=3293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x3, 0x4000043) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x81, 0xea, 0x32, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x91b}}, 0x18) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0xc000000000000, 0x40, 0x1, r2}}}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x60048, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 4.735388659s ago: executing program 3 (id=3294): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xa8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[]) umount2(0x0, 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') rmdir(&(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') 4.577741698s ago: executing program 2 (id=3295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x8008, 0x0) 3.220968704s ago: executing program 4 (id=3296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, 0x0, 0x0) 2.703094492s ago: executing program 2 (id=3297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, 0x0, 0x3, 0x4000043) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x9, 0x7, {0x5, 0x4, 0x0, 0x30, 0xfffa, 0x64, 0x81, 0xea, 0x32, 0x0, @private=0xa010101, @loopback}}}}}}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$swradio(&(0x7f0000003900), 0x1, 0x2) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x91b}}, 0x18) write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0xc000000000000, 0x40, 0x1, r2}}}, 0x28) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x60048, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.207041007s ago: executing program 3 (id=3298): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(0x0, 0x0, 0x12) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 2.192806015s ago: executing program 0 (id=3299): syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), 0x0) eventfd2(0xff, 0x80001) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdir(0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001540), &(0x7f00000015c0)=0x8) 2.186944656s ago: executing program 5 (id=3300): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r1, &(0x7f000001b000)=""/102400, 0x19000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) 8.755888ms ago: executing program 2 (id=3301): utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000500)={{}, {0x0, 0x2710}}, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 0s ago: executing program 4 (id=3302): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000009640)='./file0\x00', 0x208800, &(0x7f00000006c0)={[{@nogrpid}, {@prjquota}, {@ikeep}, {@inode32}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x1, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c01000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000000000000000000000000000000000000000000000000000300000000000000000000b40000000000000000000000000000000000000000ff00000000000000010000000000000084000500fe8000000000000000000000000000bb000004d83c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000aa00000000330000000000000000000000000000000000ffffac1414bb0300000001008100"], 0x13c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000040)='./file0\x00', 0x100cc13, &(0x7f0000000700)=ANY=[@ANYBLOB='hide,iocharset=maccyrillic,nocompress,dmode=0x0000000000000004,map=acorn,iocharset=cp861,dmode=0x0000000000000027,map=off,uid=', @ANYRES64=r5, @ANYBLOB="2c63727566742c6de30000000000000061703d6e6f726d616c2c64697273796e632c78"], 0x3, 0x9de, &(0x7f00000019c0)="$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") rename(&(0x7f0000001980)='./file1\x00', &(0x7f00000001c0)='./file0/file1\x00') r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x4}, 0x8) r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xb, 0x0, {{0x3, 0x3, 0x7ffc, 0x2, 0x5, 0x40, {0x800000001, 0x180, 0x20ff, 0x9, 0x89, 0xd614, 0x5, 0x80000041, 0xfffffffe, 0x6000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x1a}}}, 0xa0) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) sendfile(r8, r8, &(0x7f0000000480), 0x7f03) kernel console output (not intermixed with test programs): [T12262] Workqueue: writeback wb_workfn (flush-7:0) [ 676.658363][T12262] Call Trace: [ 676.658371][T12262] [ 676.658379][T12262] dump_stack_lvl+0x189/0x250 [ 676.658412][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 676.658436][T12262] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 676.658462][T12262] ? __pfx_queue_work_on+0x10/0x10 [ 676.658488][T12262] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 676.658512][T12262] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 676.658539][T12262] ? f2fs_hw_is_readonly+0x39b/0x470 [ 676.658566][T12262] f2fs_handle_critical_error+0x37c/0x540 [ 676.658596][T12262] f2fs_write_end_io+0x495/0x810 [ 676.658620][T12262] ? blkg_put+0x22/0x240 [ 676.658656][T12262] __submit_merged_bio+0x27a/0x6a0 [ 676.658685][T12262] __submit_merged_write_cond+0x255/0x530 [ 676.658714][T12262] f2fs_write_data_pages+0x261d/0x3000 [ 676.658771][T12262] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 676.658867][T12262] ? __pfx___schedule+0x10/0x10 [ 676.658911][T12262] ? __lock_acquire+0xab9/0xd20 [ 676.658937][T12262] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 676.658962][T12262] do_writepages+0x32e/0x550 [ 676.658992][T12262] ? reacquire_held_locks+0x127/0x1d0 [ 676.659014][T12262] ? writeback_sb_inodes+0x384/0x1010 [ 676.659047][T12262] __writeback_single_inode+0x145/0xff0 [ 676.659072][T12262] ? do_raw_spin_unlock+0x122/0x240 [ 676.659093][T12262] writeback_sb_inodes+0x6c7/0x1010 [ 676.659143][T12262] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 676.659212][T12262] ? rcu_is_watching+0x15/0xb0 [ 676.659266][T12262] wb_writeback+0x43b/0xaf0 [ 676.659304][T12262] ? queue_io+0x3d1/0x590 [ 676.659336][T12262] ? __pfx_wb_writeback+0x10/0x10 [ 676.659375][T12262] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.659410][T12262] wb_workfn+0x409/0xef0 [ 676.659451][T12262] ? __pfx_wb_workfn+0x10/0x10 [ 676.659481][T12262] ? __lock_acquire+0xab9/0xd20 [ 676.659518][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 676.659552][T12262] ? _raw_spin_unlock_irq+0x23/0x50 [ 676.659579][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 676.659605][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 676.659634][T12262] process_scheduled_works+0xae1/0x17b0 [ 676.659694][T12262] ? __pfx_process_scheduled_works+0x10/0x10 [ 676.659743][T12262] worker_thread+0x8a0/0xda0 [ 676.659774][T12262] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 676.659814][T12262] ? __kthread_parkme+0x7b/0x200 [ 676.659862][T12262] kthread+0x70e/0x8a0 [ 676.659886][T12262] ? __pfx_worker_thread+0x10/0x10 [ 676.659913][T12262] ? __pfx_kthread+0x10/0x10 [ 676.659932][T12262] ? preempt_schedule_thunk+0x16/0x30 [ 676.659961][T12262] ? __pfx_kthread+0x10/0x10 [ 676.659981][T12262] ret_from_fork+0x3fc/0x770 [ 676.660013][T12262] ? __pfx_ret_from_fork+0x10/0x10 [ 676.660048][T12262] ? __switch_to_asm+0x39/0x70 [ 676.660067][T12262] ? __switch_to_asm+0x33/0x70 [ 676.660085][T12262] ? __pfx_kthread+0x10/0x10 [ 676.660107][T12262] ret_from_fork_asm+0x1a/0x30 [ 676.660146][T12262] [ 676.660306][T12262] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 677.133442][T14646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 678.365050][T14654] loop3: detected capacity change from 0 to 131072 [ 678.393865][T14654] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 678.402100][T14654] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 678.420505][T14654] F2FS-fs (loop3): invalid crc value [ 678.551275][T14660] loop2: detected capacity change from 0 to 16 [ 678.558440][T14654] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 678.565494][T14654] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 678.621259][T14660] erofs (device loop2): mounted with root inode @ nid 36. [ 679.169296][T14665] syz.2.2848: attempt to access beyond end of device [ 679.169296][T14665] loop2: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 679.193899][T14665] erofs (device loop2): read error -5 @ 87 of nid 36 [ 679.201613][T14665] erofs (device loop2): failed to readdir of logical block 87 of nid 36 [ 679.630802][T14669] loop2: detected capacity change from 0 to 16 [ 679.645255][T14669] erofs (device loop2): mounted with root inode @ nid 36. [ 679.940100][T14673] syz.2.2851: attempt to access beyond end of device [ 679.940100][T14673] loop2: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 679.953930][T14673] erofs (device loop2): read error -5 @ 87 of nid 36 [ 679.960715][T14673] erofs (device loop2): failed to readdir of logical block 87 of nid 36 [ 681.773346][T14690] loop5: detected capacity change from 0 to 512 [ 681.812750][T14690] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.2856: casefold flag without casefold feature [ 681.848942][T14690] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2856: couldn't read orphan inode 15 (err -117) [ 681.888968][T14690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.902801][T14678] loop0: detected capacity change from 0 to 32768 [ 681.910725][T14678] btrfs: Deprecated parameter 'usebackuproot' [ 681.916956][T14678] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 681.926498][T14678] btrfs: Deprecated parameter 'usebackuproot' [ 681.951654][T14678] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 681.993973][T14678] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2845 (14678) [ 682.036027][ T5920] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 682.204221][T14678] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 682.348402][ T5920] usb 5-1: not running at top speed; connect to a high speed hub [ 682.436949][ T5920] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 682.458357][T14678] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 682.504658][ T5920] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 682.534202][T14678] BTRFS info (device loop0): using free-space-tree [ 682.596304][ T5920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 682.762176][ T5920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 682.791572][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.811202][ T5920] usb 5-1: Product: syz [ 682.815385][ T5920] usb 5-1: Manufacturer: syz [ 682.831669][ T5920] usb 5-1: SerialNumber: syz [ 682.874576][T12962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.950252][T14678] BTRFS info (device loop0): rebuilding free space tree [ 683.268546][T14720] loop9: detected capacity change from 0 to 7 [ 683.275585][T14720] buffer_io_error: 4 callbacks suppressed [ 683.275599][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.289722][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.298570][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.307263][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.315363][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.323488][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.331538][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.339677][T14720] ldm_validate_partition_table(): Disk read failed. [ 683.346506][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.354585][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.363013][T14720] Buffer I/O error on dev loop9, logical block 0, async page read [ 683.371334][T14720] Dev loop9: unable to read RDB block 0 [ 683.377717][T14720] loop9: unable to read partition table [ 683.384019][T14720] loop9: partition table beyond EOD, truncated [ 683.390337][T14720] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 683.390337][T14720] ) failed (rc=-5) [ 684.252450][ T5920] usb 5-1: 0:2 : does not exist [ 684.269890][ T5920] usb 5-1: USB disconnect, device number 3 [ 685.342037][ T5827] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 685.592975][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.599515][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.822275][T14730] loop2: detected capacity change from 0 to 16 [ 685.848515][T14730] erofs (device loop2): mounted with root inode @ nid 36. [ 686.089497][T14731] syz.2.2862: attempt to access beyond end of device [ 686.089497][T14731] loop2: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 686.103440][T14731] erofs (device loop2): read error -5 @ 87 of nid 36 [ 686.110193][T14731] erofs (device loop2): failed to readdir of logical block 87 of nid 36 [ 686.927126][T14735] loop0: detected capacity change from 0 to 131072 [ 686.943918][T14735] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 686.952051][T14735] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 686.964262][T14735] F2FS-fs (loop0): invalid crc value [ 687.016261][T14735] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 687.023350][T14735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 689.454192][T14758] loop3: detected capacity change from 0 to 512 [ 689.567580][T14758] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2869: casefold flag without casefold feature [ 689.638161][T14758] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2869: couldn't read orphan inode 15 (err -117) [ 689.759672][T14758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.053097][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 691.069087][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 691.079580][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 691.100791][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 691.108503][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 691.126810][T14774] loop4: detected capacity change from 0 to 512 [ 691.522341][T14774] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2872: casefold flag without casefold feature [ 691.544488][T14774] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2872: couldn't read orphan inode 15 (err -117) [ 691.653963][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.681234][T14774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.913925][T14770] lo speed is unknown, defaulting to 1000 [ 692.936665][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.188069][ T5832] Bluetooth: hci1: command tx timeout [ 694.246280][T12729] bridge_slave_1: left allmulticast mode [ 694.253968][T12729] bridge_slave_1: left promiscuous mode [ 694.286754][T12729] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.352789][T12729] bridge_slave_0: left allmulticast mode [ 694.390641][T12729] bridge_slave_0: left promiscuous mode [ 694.416611][T12729] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.071900][T14802] loop4: detected capacity change from 0 to 131072 [ 695.092331][T14802] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 695.100547][T14802] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 695.110924][T14802] F2FS-fs (loop4): invalid crc value [ 695.227760][T14802] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 695.235330][T14802] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 695.408088][ T5832] Bluetooth: hci1: command tx timeout [ 697.064456][T14814] loop5: detected capacity change from 0 to 2048 [ 697.152046][T14814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 697.428210][ T5832] Bluetooth: hci1: command tx timeout [ 699.665942][ T5832] Bluetooth: hci1: command tx timeout [ 699.861808][T14824] loop5: detected capacity change from 0 to 16 [ 699.955540][T14824] erofs (device loop5): mounted with root inode @ nid 36. [ 700.475881][T14832] syz.5.2880: attempt to access beyond end of device [ 700.475881][T14832] loop5: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 700.490736][T14832] erofs (device loop5): read error -5 @ 87 of nid 36 [ 700.497498][T14832] erofs (device loop5): failed to readdir of logical block 87 of nid 36 [ 700.672184][T14833] loop9: detected capacity change from 0 to 7 [ 700.678893][T14833] buffer_io_error: 4 callbacks suppressed [ 700.678907][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.692631][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.700625][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.709931][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.718539][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.727361][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.736134][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.744501][T14833] ldm_validate_partition_table(): Disk read failed. [ 700.751501][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.760050][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.768583][T14833] Buffer I/O error on dev loop9, logical block 0, async page read [ 700.777487][T14833] Dev loop9: unable to read RDB block 0 [ 700.784901][T14833] loop9: unable to read partition table [ 700.792412][T14833] loop9: partition table beyond EOD, truncated [ 700.798867][T14833] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 700.798867][T14833] ) failed (rc=-5) [ 703.388654][T12729] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.453596][T14847] loop0: detected capacity change from 0 to 512 [ 703.488683][T12729] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.571622][T12729] bond0 (unregistering): Released all slaves [ 703.591825][T14847] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2886: casefold flag without casefold feature [ 703.612403][T14847] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2886: couldn't read orphan inode 15 (err -117) [ 703.757149][T14847] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.786746][T14770] chnl_net:caif_netlink_parms(): no params data found [ 703.986356][T14856] loop4: detected capacity change from 0 to 2048 [ 704.570425][T14860] loop9: detected capacity change from 0 to 7 [ 704.578848][T14860] ldm_validate_partition_table(): Disk read failed. [ 704.586178][T14860] Dev loop9: unable to read RDB block 0 [ 704.592362][T14860] loop9: unable to read partition table [ 704.599090][T14860] loop9: partition table beyond EOD, truncated [ 704.605357][T14860] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 704.605357][T14860] ) failed (rc=-5) [ 705.700798][T14856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 705.933402][T12729] tipc: Disabling bearer [ 705.973416][T12729] tipc: Left network mode [ 705.997432][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.226495][T14869] loop0: detected capacity change from 0 to 512 [ 706.259261][T14869] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2891: casefold flag without casefold feature [ 706.336074][T14869] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2891: couldn't read orphan inode 15 (err -117) [ 706.420270][T14869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.305835][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.321656][T14889] loop5: detected capacity change from 0 to 128 [ 709.897014][T12729] hsr_slave_0: left promiscuous mode [ 710.984525][T12729] hsr_slave_1: left promiscuous mode [ 711.741995][T14915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2900'. [ 711.751105][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 715.084836][T12729] team0 (unregistering): Port device team_slave_1 removed [ 715.136503][T12729] team0 (unregistering): Port device team_slave_0 removed [ 716.464345][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.508786][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.553464][T14770] bridge_slave_0: entered allmulticast mode [ 716.666279][T14770] bridge_slave_0: entered promiscuous mode [ 716.828608][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.835779][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.118265][T14770] bridge_slave_1: entered allmulticast mode [ 717.125920][T14770] bridge_slave_1: entered promiscuous mode [ 717.402213][T14951] loop0: detected capacity change from 0 to 512 [ 717.410844][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.432892][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.514015][T14954] loop3: detected capacity change from 0 to 256 [ 717.685641][T14951] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.2909: casefold flag without casefold feature [ 717.973407][T14951] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2909: couldn't read orphan inode 15 (err -117) [ 718.014249][T14951] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.004729][T14770] team0: Port device team_slave_0 added [ 719.270014][T14770] team0: Port device team_slave_1 added [ 719.524193][T14967] loop4: detected capacity change from 0 to 512 [ 720.403179][T14967] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2912: casefold flag without casefold feature [ 720.411580][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.426504][T14967] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2912: couldn't read orphan inode 15 (err -117) [ 720.438655][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.467832][T14967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.483790][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.496388][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.505952][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 720.532107][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.546760][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.354443][T14770] hsr_slave_0: entered promiscuous mode [ 721.377024][T14980] loop3: detected capacity change from 0 to 256 [ 721.523654][T14770] hsr_slave_1: entered promiscuous mode [ 721.530189][T14770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 721.537867][T14770] Cannot create hsr debugfs directory [ 721.826613][T14983] loop9: detected capacity change from 0 to 7 [ 721.835149][T14983] buffer_io_error: 18 callbacks suppressed [ 721.835200][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.849752][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.858141][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.866471][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.874804][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.883439][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.891971][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.900750][T14983] ldm_validate_partition_table(): Disk read failed. [ 721.908775][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.917165][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.925980][T14983] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.934773][T14983] Dev loop9: unable to read RDB block 0 [ 721.941948][T14983] loop9: unable to read partition table [ 721.948958][T14983] loop9: partition table beyond EOD, truncated [ 721.955341][T14983] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 721.955341][T14983] ) failed (rc=-5) [ 722.864170][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.665784][T15006] loop0: detected capacity change from 0 to 16 [ 725.835289][T15006] erofs (device loop0): mounted with root inode @ nid 36. [ 728.224538][T15021] loop3: detected capacity change from 0 to 512 [ 728.430950][T15027] loop9: detected capacity change from 0 to 7 [ 728.437510][T15027] buffer_io_error: 4 callbacks suppressed [ 728.437525][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.451191][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.460537][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.476829][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.485108][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.498050][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.510994][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.520006][T15027] ldm_validate_partition_table(): Disk read failed. [ 728.527995][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.538710][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.558446][T15027] Buffer I/O error on dev loop9, logical block 0, async page read [ 728.692924][T15027] Dev loop9: unable to read RDB block 0 [ 728.708018][T15027] loop9: unable to read partition table [ 728.721492][T15027] loop9: partition table beyond EOD, truncated [ 728.728002][T15027] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 728.728002][T15027] ) failed (rc=-5) [ 729.263770][T15021] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2924: casefold flag without casefold feature [ 729.316557][T15021] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2924: couldn't read orphan inode 15 (err -117) [ 729.995597][T15021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.235161][T14770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.716746][T14770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 731.469121][T14770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 731.499061][T15038] netlink: 'syz.4.2929': attribute type 1 has an invalid length. [ 731.577196][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.595022][T15042] loop0: detected capacity change from 0 to 256 [ 731.630873][T14770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.863629][T15044] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 732.508802][T15044] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 732.937757][T15044] bond2: (slave vcan1): making interface the new active one [ 732.946964][T15044] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 734.681658][T14770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.708833][T14770] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.902964][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.910191][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.922748][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.929945][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.312868][T14770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 737.993465][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.582079][T14770] veth0_vlan: entered promiscuous mode [ 739.594258][T14770] veth1_vlan: entered promiscuous mode [ 739.758676][T14770] veth0_macvtap: entered promiscuous mode [ 739.768103][T14770] veth1_macvtap: entered promiscuous mode [ 739.785804][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 739.796244][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.821699][T15095] loop3: detected capacity change from 0 to 512 [ 740.528919][T15095] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 740.554326][T12729] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.643264][ T6136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.681006][T15095] EXT4-fs: error: could not find journal device path [ 740.690825][ T6136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.710565][ T6136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.192216][T15120] loop9: detected capacity change from 0 to 7 [ 742.198829][T15120] buffer_io_error: 4 callbacks suppressed [ 742.198844][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.212532][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.220486][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.233591][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.241910][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.251126][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.260121][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.268894][T15120] ldm_validate_partition_table(): Disk read failed. [ 742.275913][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.308433][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.322495][T15120] Buffer I/O error on dev loop9, logical block 0, async page read [ 742.341215][T15120] Dev loop9: unable to read RDB block 0 [ 742.369537][T15120] loop9: unable to read partition table [ 742.388008][T15120] loop9: partition table beyond EOD, truncated [ 742.394247][T15120] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 742.394247][T15120] ) failed (rc=-5) [ 743.382070][T15122] tipc: Started in network mode [ 743.386974][T15122] tipc: Node identity ac1414aa, cluster identity 4711 [ 743.398305][T15122] tipc: Enabled bearer , priority 10 [ 743.561829][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2945'. [ 743.587764][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.604815][T15130] netlink: 'syz.5.2949': attribute type 1 has an invalid length. [ 743.617123][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.642287][ T48] tipc: Node number set to 2886997162 [ 745.760023][ T6136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.967400][T15144] loop3: detected capacity change from 0 to 512 [ 745.975029][ T6136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.234476][T15144] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2953: casefold flag without casefold feature [ 746.252735][T15144] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2953: couldn't read orphan inode 15 (err -117) [ 746.266416][T15144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.236561][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.244854][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.460363][T15155] loop2: detected capacity change from 0 to 512 [ 747.882607][T15155] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.2865: casefold flag without casefold feature [ 748.088660][T15170] loop9: detected capacity change from 0 to 7 [ 748.095850][T15170] buffer_io_error: 4 callbacks suppressed [ 748.095864][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.109713][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.118795][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.126815][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.135839][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.144321][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.153083][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.161288][T15170] ldm_validate_partition_table(): Disk read failed. [ 748.168159][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.176434][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.184757][T15170] Buffer I/O error on dev loop9, logical block 0, async page read [ 748.193130][T15170] Dev loop9: unable to read RDB block 0 [ 748.200131][T15170] loop9: unable to read partition table [ 748.206599][T15170] loop9: partition table beyond EOD, truncated [ 748.212925][T15170] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 748.212925][T15170] ) failed (rc=-5) [ 748.265456][T15155] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.2865: couldn't read orphan inode 15 (err -117) [ 749.900423][T15172] loop4: detected capacity change from 0 to 131072 [ 749.923543][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 749.930881][T15155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.943180][T15172] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0) [ 749.951428][T15172] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 749.966667][T15172] F2FS-fs (loop4): invalid crc value [ 750.187218][T15172] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 750.189006][T14770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.194905][T15172] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 750.211134][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.398729][T15180] loop9: detected capacity change from 0 to 7 [ 750.411734][T15180] ldm_validate_partition_table(): Disk read failed. [ 750.419335][T15180] Dev loop9: unable to read RDB block 0 [ 750.425671][T15180] loop9: unable to read partition table [ 750.431979][T15180] loop9: partition table beyond EOD, truncated [ 750.438239][T15180] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 750.438239][T15180] ) failed (rc=-5) [ 752.516000][T15192] loop0: detected capacity change from 0 to 256 [ 755.079429][T13295] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 755.148369][ T93] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 755.278699][T13295] usb 3-1: Using ep0 maxpacket: 32 [ 755.306709][T13295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 755.309086][ T93] usb 6-1: Using ep0 maxpacket: 32 [ 755.339424][T13295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 755.347393][ T93] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 755.370435][T15216] netlink: 'syz.0.2969': attribute type 1 has an invalid length. [ 755.378099][ T93] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 755.382343][T13295] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.400421][ T93] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.412689][T13295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.423687][ T93] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.508939][T13295] usb 3-1: config 0 descriptor?? [ 755.522161][T15207] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 755.533457][ T93] usb 6-1: config 0 descriptor?? [ 755.705842][T13295] hub 3-1:0.0: USB hub found [ 755.725958][T15203] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 755.739757][ T93] hub 6-1:0.0: USB hub found [ 755.916180][T13295] hub 3-1:0.0: 1 port detected [ 756.714492][ T93] hub 6-1:0.0: 1 port detected [ 756.807860][ T5906] usb 3-1: USB disconnect, device number 7 [ 756.815318][T13295] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 757.605951][ T93] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 757.606645][T13295] usb 6-1: USB disconnect, device number 2 [ 757.715431][T15235] loop3: detected capacity change from 0 to 256 [ 757.793796][T15237] loop4: detected capacity change from 0 to 512 [ 757.873229][T15237] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.2973: casefold flag without casefold feature [ 757.898279][T15237] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2973: couldn't read orphan inode 15 (err -117) [ 757.962848][T15237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.845461][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.855239][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.863229][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 758.926219][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.937395][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 760.181552][T15246] lo speed is unknown, defaulting to 1000 [ 761.028137][ T5838] Bluetooth: hci2: command tx timeout [ 761.340175][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.455786][T12729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.598304][T15267] loop2: detected capacity change from 0 to 32768 [ 761.605284][T15267] XFS: ikeep mount option is deprecated. [ 761.772410][T12729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 761.817580][T15267] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 761.961913][T15267] XFS (loop2): Ending clean mount [ 761.976254][T15267] XFS (loop2): Quotacheck needed: Please wait. [ 762.061943][T15267] XFS (loop2): Quotacheck: Done. [ 762.331366][T12729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.463263][T12729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 763.605632][ T5838] Bluetooth: hci2: command tx timeout [ 764.069516][T15246] chnl_net:caif_netlink_parms(): no params data found [ 764.107983][T13295] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 764.133708][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 764.177647][T15300] loop3: detected capacity change from 0 to 512 [ 764.276916][T12729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.299429][T15300] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.2985: casefold flag without casefold feature [ 764.326583][T12729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 764.345941][T15300] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2985: couldn't read orphan inode 15 (err -117) [ 764.361956][T15300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.411838][T13295] usb 6-1: not running at top speed; connect to a high speed hub [ 764.421219][T13295] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 764.440895][T13295] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 764.451137][T13295] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 764.469134][T13295] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 764.478274][T13295] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.487578][T13295] usb 6-1: Product: syz [ 764.492148][T13295] usb 6-1: Manufacturer: syz [ 764.497760][T13295] usb 6-1: SerialNumber: syz [ 765.668860][ T5832] Bluetooth: hci2: command tx timeout [ 765.873334][T12729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.913432][T12729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 765.936735][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.947852][T15246] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.972377][T15246] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.980066][T15246] bridge_slave_0: entered allmulticast mode [ 765.988903][T15246] bridge_slave_0: entered promiscuous mode [ 766.010928][T15246] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.018286][T15246] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.025555][T15246] bridge_slave_1: entered allmulticast mode [ 766.033541][T15246] bridge_slave_1: entered promiscuous mode [ 766.365764][T13295] usb 6-1: 0:2 : does not exist [ 766.412208][T13295] usb 6-1: USB disconnect, device number 3 [ 766.805524][T15246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.748213][ T5832] Bluetooth: hci2: command tx timeout [ 767.810826][T15246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.500656][T15246] team0: Port device team_slave_0 added [ 768.990211][T15246] team0: Port device team_slave_1 added [ 769.555935][T15338] loop3: detected capacity change from 0 to 32768 [ 769.563218][T15338] XFS: ikeep mount option is deprecated. [ 769.733234][T15338] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 770.448125][T15338] XFS (loop3): Ending clean mount [ 770.469565][T15338] XFS (loop3): Quotacheck needed: Please wait. [ 770.519300][T15338] XFS (loop3): Quotacheck: Done. [ 772.053414][T15246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.097450][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.369320][T15246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.438384][T15246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.445356][T15246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.471564][T15246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.661461][T14257] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 774.075445][T15374] loop2: detected capacity change from 0 to 40427 [ 774.091340][T15374] F2FS-fs (loop2): invalid crc value [ 774.159871][T15374] F2FS-fs (loop2): Start checkpoint disabled! [ 774.172105][T15374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 775.526559][T15390] loop4: detected capacity change from 0 to 256 [ 775.765522][T12729] bond1 (unregistering): (slave geneve2): Releasing active interface [ 777.066300][T12871] kworker/u8:15: attempt to access beyond end of device [ 777.066300][T12871] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 777.467809][T12871] CPU: 0 UID: 0 PID: 12871 Comm: kworker/u8:15 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 777.467840][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 777.467853][T12871] Workqueue: writeback wb_workfn (flush-7:2) [ 777.467887][T12871] Call Trace: [ 777.467899][T12871] [ 777.467908][T12871] dump_stack_lvl+0x189/0x250 [ 777.467944][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 777.467972][T12871] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 777.468002][T12871] ? __pfx_queue_work_on+0x10/0x10 [ 777.468032][T12871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 777.468060][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 777.468090][T12871] ? f2fs_hw_is_readonly+0x39b/0x470 [ 777.468121][T12871] f2fs_handle_critical_error+0x37c/0x540 [ 777.468153][T12871] f2fs_write_end_io+0x495/0x810 [ 777.468180][T12871] ? blkg_put+0x22/0x240 [ 777.468221][T12871] __submit_merged_bio+0x27a/0x6a0 [ 777.468252][T12871] __submit_merged_write_cond+0x255/0x530 [ 777.468284][T12871] f2fs_write_data_pages+0x261d/0x3000 [ 777.468348][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 777.468448][T12871] ? __pfx___schedule+0x10/0x10 [ 777.468497][T12871] ? __lock_acquire+0xab9/0xd20 [ 777.468533][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 777.468562][T12871] do_writepages+0x32e/0x550 [ 777.468596][T12871] ? reacquire_held_locks+0x127/0x1d0 [ 777.468623][T12871] ? writeback_sb_inodes+0x384/0x1010 [ 777.468659][T12871] __writeback_single_inode+0x145/0xff0 [ 777.468688][T12871] ? do_raw_spin_unlock+0x122/0x240 [ 777.468712][T12871] writeback_sb_inodes+0x6c7/0x1010 [ 777.468769][T12871] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 777.468845][T12871] ? rcu_is_watching+0x15/0xb0 [ 777.468877][T12871] wb_writeback+0x43b/0xaf0 [ 777.468909][T12871] ? queue_io+0x3d1/0x590 [ 777.468935][T12871] ? __pfx_wb_writeback+0x10/0x10 [ 777.468967][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.468996][T12871] wb_workfn+0x409/0xef0 [ 777.469031][T12871] ? __pfx_wb_workfn+0x10/0x10 [ 777.469056][T12871] ? __lock_acquire+0xab9/0xd20 [ 777.469086][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 777.469115][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.469137][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 777.469157][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 777.469181][T12871] process_scheduled_works+0xae1/0x17b0 [ 777.469232][T12871] ? __pfx_process_scheduled_works+0x10/0x10 [ 777.469272][T12871] worker_thread+0x8a0/0xda0 [ 777.469320][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 777.469357][T12871] ? __kthread_parkme+0x7b/0x200 [ 777.469396][T12871] kthread+0x70e/0x8a0 [ 777.469419][T12871] ? __pfx_worker_thread+0x10/0x10 [ 777.469446][T12871] ? __pfx_kthread+0x10/0x10 [ 777.469467][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.469494][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 777.469523][T12871] ? __pfx_kthread+0x10/0x10 [ 777.469550][T12871] ret_from_fork+0x3fc/0x770 [ 777.469580][T12871] ? __pfx_ret_from_fork+0x10/0x10 [ 777.469614][T12871] ? __switch_to_asm+0x39/0x70 [ 777.469632][T12871] ? __switch_to_asm+0x33/0x70 [ 777.469649][T12871] ? __pfx_kthread+0x10/0x10 [ 777.469670][T12871] ret_from_fork_asm+0x1a/0x30 [ 777.469708][T12871] [ 777.795695][T12871] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 778.572451][T12729] $H (unregistering): left allmulticast mode [ 778.578792][T12729] bond_slave_0: left allmulticast mode [ 778.584605][T12729] bond_slave_1: left allmulticast mode [ 778.619812][T12729] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.635127][T12729] bond_slave_0: left promiscuous mode [ 778.645072][T12729] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.727664][T12729] bond_slave_1: left promiscuous mode [ 778.736511][T12729] $H (unregistering): Released all slaves [ 778.783117][T13295] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 778.881820][T12729] bond0 (unregistering): (slave veth11): Releasing active interface [ 778.899374][T12729] bond0 (unregistering): Released all slaves [ 778.942884][T13295] usb 3-1: Using ep0 maxpacket: 32 [ 778.971622][T13295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 778.992745][T13295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 779.023196][T13295] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 779.034774][T15408] loop5: detected capacity change from 0 to 32768 [ 779.036264][T13295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.042847][T15408] XFS: ikeep mount option is deprecated. [ 779.077651][T13295] usb 3-1: config 0 descriptor?? [ 779.094484][T15406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 779.111205][T13295] hub 3-1:0.0: USB hub found [ 779.117621][T12729] bond1 (unregistering): Released all slaves [ 779.125108][T15408] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.149605][T12729] bond2 (unregistering): Released all slaves [ 779.187662][T15408] XFS (loop5): Ending clean mount [ 779.196425][T15408] XFS (loop5): Quotacheck needed: Please wait. [ 779.213629][T15246] hsr_slave_0: entered promiscuous mode [ 779.243239][T15408] XFS (loop5): Quotacheck: Done. [ 779.258793][T15246] hsr_slave_1: entered promiscuous mode [ 779.264989][T15246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.292796][T15246] Cannot create hsr debugfs directory [ 779.323905][T15384] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3005'. [ 779.348107][T13295] hub 3-1:0.0: 1 port detected [ 782.589290][T13295] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 783.011086][T12962] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 783.606570][ T5938] usb 3-1: USB disconnect, device number 8 [ 784.285003][T15436] loop4: detected capacity change from 0 to 40427 [ 784.410175][T15436] F2FS-fs (loop4): invalid crc value [ 784.506722][T15436] F2FS-fs (loop4): Start checkpoint disabled! [ 784.522231][T15436] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 784.717559][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.737331][T12729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.636170][T12729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.647993][T12729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.466059][T15458] loop9: detected capacity change from 0 to 7 [ 786.477089][T15458] buffer_io_error: 18 callbacks suppressed [ 786.483214][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.492380][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.501674][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.510886][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.521919][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.531930][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.541552][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.551158][T15458] ldm_validate_partition_table(): Disk read failed. [ 786.558482][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.568037][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.577898][T15458] Buffer I/O error on dev loop9, logical block 0, async page read [ 786.588769][T15458] Dev loop9: unable to read RDB block 0 [ 786.599198][T15458] loop9: unable to read partition table [ 786.607593][T15458] loop9: partition table beyond EOD, truncated [ 786.614217][T15458] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 786.614217][T15458] ) failed (rc=-5) [ 788.361732][T12871] kworker/u8:15: attempt to access beyond end of device [ 788.361732][T12871] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 788.398519][T12871] CPU: 1 UID: 0 PID: 12871 Comm: kworker/u8:15 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 788.398544][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.398554][T12871] Workqueue: writeback wb_workfn (flush-7:4) [ 788.398582][T12871] Call Trace: [ 788.398589][T12871] [ 788.398596][T12871] dump_stack_lvl+0x189/0x250 [ 788.398625][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 788.398645][T12871] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 788.398668][T12871] ? __pfx_queue_work_on+0x10/0x10 [ 788.398700][T12871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 788.398721][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 788.398743][T12871] ? f2fs_hw_is_readonly+0x39b/0x470 [ 788.398769][T12871] f2fs_handle_critical_error+0x37c/0x540 [ 788.398795][T12871] f2fs_write_end_io+0x495/0x810 [ 788.398815][T12871] ? blkg_put+0x22/0x240 [ 788.398849][T12871] __submit_merged_bio+0x27a/0x6a0 [ 788.398875][T12871] __submit_merged_write_cond+0x255/0x530 [ 788.398901][T12871] f2fs_write_data_pages+0x261d/0x3000 [ 788.398957][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 788.399056][T12871] ? f2fs_write_meta_pages+0x357/0x450 [ 788.399087][T12871] ? __lock_acquire+0xab9/0xd20 [ 788.399111][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 788.399133][T12871] do_writepages+0x32e/0x550 [ 788.399161][T12871] ? reacquire_held_locks+0x127/0x1d0 [ 788.399181][T12871] ? writeback_sb_inodes+0x384/0x1010 [ 788.399212][T12871] __writeback_single_inode+0x145/0xff0 [ 788.399233][T12871] ? do_raw_spin_unlock+0x122/0x240 [ 788.399253][T12871] writeback_sb_inodes+0x6c7/0x1010 [ 788.399321][T12871] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 788.399397][T12871] ? rcu_is_watching+0x15/0xb0 [ 788.399433][T12871] wb_writeback+0x43b/0xaf0 [ 788.399471][T12871] ? queue_io+0x3d1/0x590 [ 788.399501][T12871] ? __pfx_wb_writeback+0x10/0x10 [ 788.399537][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.399569][T12871] wb_workfn+0x409/0xef0 [ 788.399608][T12871] ? __pfx_wb_workfn+0x10/0x10 [ 788.399636][T12871] ? __lock_acquire+0xab9/0xd20 [ 788.399672][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 788.399716][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.399740][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 788.399762][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 788.399788][T12871] process_scheduled_works+0xae1/0x17b0 [ 788.399848][T12871] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.399893][T12871] worker_thread+0x8a0/0xda0 [ 788.399922][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 788.399958][T12871] ? __kthread_parkme+0x7b/0x200 [ 788.399996][T12871] kthread+0x70e/0x8a0 [ 788.400019][T12871] ? __pfx_worker_thread+0x10/0x10 [ 788.400043][T12871] ? __pfx_kthread+0x10/0x10 [ 788.400063][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 788.400087][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 788.400113][T12871] ? __pfx_kthread+0x10/0x10 [ 788.400132][T12871] ret_from_fork+0x3fc/0x770 [ 788.400160][T12871] ? __pfx_ret_from_fork+0x10/0x10 [ 788.400192][T12871] ? __switch_to_asm+0x39/0x70 [ 788.400209][T12871] ? __switch_to_asm+0x33/0x70 [ 788.400225][T12871] ? __pfx_kthread+0x10/0x10 [ 788.400244][T12871] ret_from_fork_asm+0x1a/0x30 [ 788.400282][T12871] [ 788.400291][T12871] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 788.648253][ T5938] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 788.751487][T12729] team0 (unregistering): Port device team_slave_1 removed [ 788.800094][T12729] team0 (unregistering): Port device team_slave_0 removed [ 788.890562][ T5938] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 788.909760][ T5938] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 788.920112][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 788.941299][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 788.964035][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 788.986017][ T5938] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 789.007141][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 789.015321][ T5938] usb 6-1: Product: syz [ 789.025760][ T5938] usb 6-1: Manufacturer: syz [ 789.045876][ T5938] cdc_wdm 6-1:1.0: skipping garbage [ 789.060156][ T5938] cdc_wdm 6-1:1.0: skipping garbage [ 789.080163][ T5938] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 789.091975][ T5938] cdc_wdm 6-1:1.0: Unknown control protocol [ 789.551110][ T5938] usb 6-1: USB disconnect, device number 4 [ 791.337364][T15466] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3023'. [ 791.685076][T15484] loop3: detected capacity change from 0 to 1024 [ 791.877450][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3029'. [ 791.947967][ T5938] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 792.246097][ T5938] usb 3-1: Using ep0 maxpacket: 32 [ 792.256333][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 792.268119][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 792.279479][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 792.288671][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.307079][ T5938] usb 3-1: config 0 descriptor?? [ 792.317163][T15482] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 792.325796][ T5938] hub 3-1:0.0: USB hub found [ 792.446309][T15246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.461178][T15246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.475608][T15246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.489448][T15246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 792.641266][ T5938] hub 3-1:0.0: 1 port detected [ 792.901224][T15246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.423455][T15246] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.464513][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.471711][ T7523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.541636][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.548829][ T7523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.566108][ T5956] usb 3-1: USB disconnect, device number 9 [ 795.998053][ T5920] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 796.087531][T15246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.089322][T15520] loop4: detected capacity change from 0 to 32768 [ 796.095212][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 796.101788][T15520] XFS: ikeep mount option is deprecated. [ 796.147223][T15520] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 796.157961][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 796.175403][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 796.190350][T15246] veth0_vlan: entered promiscuous mode [ 796.204619][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 796.211038][T15246] veth1_vlan: entered promiscuous mode [ 796.236297][T15520] XFS (loop4): Ending clean mount [ 796.238973][ T5920] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 796.247795][T15520] XFS (loop4): Quotacheck needed: Please wait. [ 796.257949][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.271506][ T5840] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 796.280351][T15520] XFS (loop4): Quotacheck: Done. [ 796.285681][ T5840] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 796.313765][ T5920] usb 6-1: config 0 descriptor?? [ 796.321658][T15517] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 796.322150][T15536] loop2: detected capacity change from 0 to 256 [ 796.340375][T15246] veth0_macvtap: entered promiscuous mode [ 796.357325][T15246] veth1_macvtap: entered promiscuous mode [ 796.371695][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.506331][ T5920] hub 6-1:0.0: USB hub found [ 796.511778][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 796.522874][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 796.537097][ T5840] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.564052][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.582067][ T5920] hub 6-1:0.0: 1 port detected [ 796.587228][ T5840] usb 4-1: Product: syz [ 796.592052][ T5840] usb 4-1: Manufacturer: syz [ 797.209039][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 797.214957][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 797.245807][ T5840] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 797.252171][ T5840] cdc_wdm 4-1:1.0: Unknown control protocol [ 797.545424][ T5840] usb 4-1: USB disconnect, device number 2 [ 797.610469][ T5920] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 797.722569][ T5920] usb 6-1: USB disconnect, device number 5 [ 797.879175][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 797.920957][T15246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.991614][T15246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.022921][T12871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.110830][ T1096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.135446][ T1096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.176166][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.452426][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3042'. [ 798.545723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.564170][T15544] loop4: detected capacity change from 0 to 32768 [ 798.571538][T15544] XFS: ikeep mount option is deprecated. [ 798.583196][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.834631][T15544] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 799.230194][T15544] XFS (loop4): Ending clean mount [ 799.238670][T15544] XFS (loop4): Quotacheck needed: Please wait. [ 799.309711][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.324882][T15544] XFS (loop4): Quotacheck: Done. [ 799.457845][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.696654][T15566] loop9: detected capacity change from 0 to 7 [ 799.703237][T15566] buffer_io_error: 4 callbacks suppressed [ 799.703251][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.716907][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.726378][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.737384][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.745619][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.754793][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.764763][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.778636][T15566] ldm_validate_partition_table(): Disk read failed. [ 799.789437][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.798847][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.808108][T15566] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.823325][T15566] Dev loop9: unable to read RDB block 0 [ 799.968774][T15566] loop9: unable to read partition table [ 799.982812][T15566] loop9: partition table beyond EOD, truncated [ 799.989672][T15566] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 799.989672][T15566] ) failed (rc=-5) [ 802.607592][T15575] loop3: detected capacity change from 0 to 32768 [ 802.615110][T15575] XFS: ikeep mount option is deprecated. [ 803.682865][T15575] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 803.694418][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 803.753014][T15588] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.3049'. [ 803.852376][T15575] XFS (loop3): Ending clean mount [ 803.869431][T15575] XFS (loop3): Quotacheck needed: Please wait. [ 804.849497][T15602] loop2: detected capacity change from 0 to 32768 [ 804.856465][T15602] XFS: ikeep mount option is deprecated. [ 804.917137][T15575] XFS (loop3): Quotacheck: Done. [ 804.952094][T15602] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 805.023024][T15602] XFS (loop2): Ending clean mount [ 805.028992][ T48] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 805.041932][T15602] XFS (loop2): Quotacheck needed: Please wait. [ 805.070621][T15602] XFS (loop2): Quotacheck: Done. [ 805.201228][T15609] loop0: detected capacity change from 0 to 32768 [ 805.208622][T15609] XFS: ikeep mount option is deprecated. [ 805.227798][T14257] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 805.284017][T15609] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 805.571248][T15609] XFS (loop0): Ending clean mount [ 805.583011][T15609] XFS (loop0): Quotacheck needed: Please wait. [ 805.663923][T15609] XFS (loop0): Quotacheck: Done. [ 805.722382][ T48] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.635967][ T48] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 806.658318][ T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.667705][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 807.957920][ T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 808.029591][ T48] usb 6-1: string descriptor 0 read error: -71 [ 808.044973][ T48] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 808.075538][ T48] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 808.255711][ T48] usb 6-1: can't set config #1, error -71 [ 808.273040][T15246] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 808.278533][ T48] usb 6-1: USB disconnect, device number 6 [ 808.449398][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 808.477697][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.484260][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.760076][T15629] loop4: detected capacity change from 0 to 1024 [ 809.172445][T15632] loop3: detected capacity change from 0 to 256 [ 810.621385][T15645] tipc: Started in network mode [ 810.626509][T15645] tipc: Node identity ac1414aa, cluster identity 4711 [ 810.641688][T15645] tipc: Enabled bearer , priority 10 [ 811.518468][T15646] loop4: detected capacity change from 0 to 256 [ 811.662229][ T48] tipc: Node number set to 2886997162 [ 813.696137][T15658] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3063'. [ 814.667409][ T5959] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 814.978125][ T5959] usb 1-1: Using ep0 maxpacket: 16 [ 815.091301][ T5959] usb 1-1: device descriptor read/all, error -71 [ 815.359014][T15674] loop9: detected capacity change from 0 to 7 [ 815.366190][T15674] buffer_io_error: 4 callbacks suppressed [ 815.366248][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.380150][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.388299][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.397136][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.405990][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.414388][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.422668][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.430775][T15674] ldm_validate_partition_table(): Disk read failed. [ 815.437607][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.445918][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.454526][T15674] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.462843][T15674] Dev loop9: unable to read RDB block 0 [ 815.469593][T15674] loop9: unable to read partition table [ 815.476090][T15674] loop9: partition table beyond EOD, truncated [ 815.482425][T15674] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 815.482425][T15674] ) failed (rc=-5) [ 815.748184][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 816.350249][T15523] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 816.909992][T15523] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 816.929317][T15523] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 816.942678][T15523] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 816.953901][T15523] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 816.973905][T15523] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 817.174055][T15681] loop4: detected capacity change from 0 to 32768 [ 817.181176][T15681] XFS: ikeep mount option is deprecated. [ 817.210586][T15523] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 817.241599][T15523] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 817.248160][T15681] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 817.379872][T15523] usb 6-1: Product: syz [ 817.404883][T15523] usb 6-1: Manufacturer: syz [ 817.754398][T15523] cdc_wdm 6-1:1.0: skipping garbage [ 817.762088][T15681] XFS (loop4): Ending clean mount [ 817.779241][T15523] cdc_wdm 6-1:1.0: skipping garbage [ 817.786110][T15681] XFS (loop4): Quotacheck needed: Please wait. [ 817.808115][T15523] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 817.838092][T15681] XFS (loop4): Quotacheck: Done. [ 817.857984][T15523] cdc_wdm 6-1:1.0: Unknown control protocol [ 819.833096][T15523] usb 6-1: USB disconnect, device number 7 [ 821.102820][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 821.131168][T15714] loop5: detected capacity change from 0 to 256 [ 821.450986][T15717] loop0: detected capacity change from 0 to 32768 [ 821.458004][T15717] XFS: ikeep mount option is deprecated. [ 821.489665][T15717] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 822.078325][T15727] loop9: detected capacity change from 0 to 7 [ 822.086945][T15727] buffer_io_error: 4 callbacks suppressed [ 822.086990][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.101684][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.110237][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.120716][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.131803][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.140759][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.157499][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.166053][T15727] ldm_validate_partition_table(): Disk read failed. [ 822.173890][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.182549][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.191020][T15727] Buffer I/O error on dev loop9, logical block 0, async page read [ 822.199904][T15727] Dev loop9: unable to read RDB block 0 [ 822.206981][T15727] loop9: unable to read partition table [ 822.213646][T15727] loop9: partition table beyond EOD, truncated [ 822.220130][T15727] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 822.220130][T15727] ) failed (rc=-5) [ 825.451471][T15717] XFS (loop0): Ending clean mount [ 825.458914][T15717] XFS (loop0): Quotacheck needed: Please wait. [ 825.539042][T15717] XFS (loop0): Quotacheck: Done. [ 825.607170][T15734] loop3: detected capacity change from 0 to 512 [ 825.640963][T15246] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 825.680808][T15734] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3081: casefold flag without casefold feature [ 825.728176][T15734] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3081: couldn't read orphan inode 15 (err -117) [ 826.179787][T15734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.811399][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.995962][T15750] loop0: detected capacity change from 0 to 32768 [ 827.002980][T15750] XFS: ikeep mount option is deprecated. [ 827.089462][T15750] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 827.152824][T15750] XFS (loop0): Ending clean mount [ 827.170029][T15750] XFS (loop0): Quotacheck needed: Please wait. [ 827.460888][T15750] XFS (loop0): Quotacheck: Done. [ 828.587451][T15246] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 828.588892][T15768] loop4: detected capacity change from 0 to 128 [ 828.624100][T15770] loop3: detected capacity change from 0 to 512 [ 828.650593][T15770] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3087: casefold flag without casefold feature [ 828.663659][T15770] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3087: couldn't read orphan inode 15 (err -117) [ 828.691101][T15770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.912644][T15781] loop0: detected capacity change from 0 to 16 [ 828.966103][T15781] erofs (device loop0): mounted with root inode @ nid 36. [ 829.088066][T15523] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 829.237921][T15523] usb 5-1: Using ep0 maxpacket: 32 [ 829.245321][T15523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 829.256662][T15523] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42046, setting to 1024 [ 829.276967][T15523] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 829.306403][T15523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.347800][T15523] usb 5-1: config 0 descriptor?? [ 829.365490][T15779] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 829.374514][T15523] hub 5-1:0.0: USB hub found [ 829.390754][T15781] syz.0.3088: attempt to access beyond end of device [ 829.390754][T15781] loop0: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 829.410216][T15781] erofs (device loop0): read error -5 @ 87 of nid 36 [ 829.417377][T15781] erofs (device loop0): failed to readdir of logical block 87 of nid 36 [ 829.550792][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.575204][T15523] hub 5-1:0.0: 1 port detected [ 830.969295][ T5906] usb 5-1: USB disconnect, device number 4 [ 835.476945][T15808] loop2: detected capacity change from 0 to 128 [ 837.690039][T15825] loop4: detected capacity change from 0 to 512 [ 837.698825][T15825] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 837.707207][T15825] EXT4-fs: error: could not find journal device path [ 837.716087][T15827] loop3: detected capacity change from 0 to 512 [ 837.741337][T15827] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3102: casefold flag without casefold feature [ 837.761876][T15827] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3102: couldn't read orphan inode 15 (err -117) [ 837.778874][T15827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.895017][ T5920] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 839.957695][ T5920] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 840.022219][ T5920] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 840.239139][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 840.465585][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 840.604191][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 840.668573][ T5920] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 840.685046][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.831747][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 840.839837][ T5920] usb 6-1: Product: syz [ 840.844017][ T5920] usb 6-1: Manufacturer: syz [ 840.905993][ T5920] usb 6-1: can't set config #1, error -71 [ 841.464079][ T5920] usb 6-1: USB disconnect, device number 8 [ 842.372264][T15852] loop9: detected capacity change from 0 to 7 [ 842.379052][T15852] buffer_io_error: 4 callbacks suppressed [ 842.379062][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.392707][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.400616][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.408513][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.416381][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.425721][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.433620][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.441531][T15852] ldm_validate_partition_table(): Disk read failed. [ 842.448304][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.456159][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.464035][T15852] Buffer I/O error on dev loop9, logical block 0, async page read [ 842.472009][T15852] Dev loop9: unable to read RDB block 0 [ 842.477692][T15852] loop9: unable to read partition table [ 842.483529][T15852] loop9: partition table beyond EOD, truncated [ 842.489716][T15852] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 842.489716][T15852] ) failed (rc=-5) [ 842.973084][T15859] loop5: detected capacity change from 0 to 32768 [ 842.980180][T15859] XFS: ikeep mount option is deprecated. [ 843.250644][T15859] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 844.513266][T15859] XFS (loop5): Ending clean mount [ 844.519669][T15859] XFS (loop5): Quotacheck needed: Please wait. [ 844.632450][T15859] XFS (loop5): Quotacheck: Done. [ 844.653751][T15880] loop3: detected capacity change from 0 to 128 [ 844.835637][T15878] loop2: detected capacity change from 0 to 32768 [ 844.842635][T15878] XFS: ikeep mount option is deprecated. [ 845.051202][T15878] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 847.698055][T15878] XFS (loop2): Ending clean mount [ 847.773949][T15878] XFS (loop2): Quotacheck needed: Please wait. [ 847.928126][T13295] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 848.007632][T15905] loop3: detected capacity change from 0 to 16 [ 848.104900][T15905] erofs (device loop3): mounted with root inode @ nid 36. [ 848.170991][T12962] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 848.274288][T15878] XFS (loop2): Quotacheck: Done. [ 848.305000][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 848.395596][T13295] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 848.419482][T13295] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 848.444442][T13295] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 848.457097][T13295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 848.476500][T13295] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 848.534740][T13295] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 848.544599][T13295] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 848.629070][T13295] usb 1-1: Product: syz [ 848.677932][T13295] usb 1-1: Manufacturer: syz [ 848.792049][T13295] cdc_wdm 1-1:1.0: skipping garbage [ 848.870540][T13295] cdc_wdm 1-1:1.0: skipping garbage [ 849.030188][T13295] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 849.130094][T13295] cdc_wdm 1-1:1.0: Unknown control protocol [ 849.502327][ T5959] usb 1-1: USB disconnect, device number 13 [ 849.981829][T15923] loop9: detected capacity change from 0 to 7 [ 849.989308][T15923] buffer_io_error: 4 callbacks suppressed [ 849.989348][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.006052][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.014945][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.029981][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.042748][T15914] syz.3.3122: attempt to access beyond end of device [ 850.042748][T15914] loop3: rw=0, sector=1259035608, nr_sectors = 8 limit=16 [ 850.060870][T15914] erofs (device loop3): read error -5 @ 87 of nid 36 [ 850.068199][T15914] erofs (device loop3): failed to readdir of logical block 87 of nid 36 [ 850.091657][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.197110][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.347812][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.458559][T15923] ldm_validate_partition_table(): Disk read failed. [ 850.592644][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.758284][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.789899][T15923] Buffer I/O error on dev loop9, logical block 0, async page read [ 850.921225][T15923] Dev loop9: unable to read RDB block 0 [ 850.978184][T15923] loop9: unable to read partition table [ 850.984022][T15923] loop9: partition table beyond EOD, truncated [ 851.177706][T15923] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 851.177706][T15923] ) failed (rc=-5) [ 851.631422][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3126'. [ 851.641992][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3126'. [ 851.723575][T15932] loop3: detected capacity change from 0 to 128 [ 855.847940][ T5959] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 855.909853][T15969] loop5: detected capacity change from 0 to 32768 [ 855.916906][T15969] XFS: ikeep mount option is deprecated. [ 855.958475][T15969] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 856.021423][T15969] XFS (loop5): Ending clean mount [ 856.031195][T15969] XFS (loop5): Quotacheck needed: Please wait. [ 856.099536][ T5959] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 857.038185][T15969] XFS (loop5): Quotacheck: Done. [ 857.048128][ T5959] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 857.063218][ T5959] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 857.077965][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 857.089089][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 857.101625][ T5959] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 857.120967][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.136519][ T5959] usb 4-1: Product: syz [ 857.157442][ T5959] usb 4-1: Manufacturer: syz [ 857.209970][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 857.248209][ T5959] cdc_wdm 4-1:1.0: skipping garbage [ 857.259053][ T5959] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 857.265203][ T5959] cdc_wdm 4-1:1.0: Unknown control protocol [ 858.198406][ T5920] usb 4-1: USB disconnect, device number 3 [ 858.238689][T15990] trusted_key: syz.3.3142 sent an empty control message without MSG_MORE. [ 858.287306][T12962] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 860.048121][T16013] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3147'. [ 860.523813][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3148'. [ 860.533032][T16021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3148'. [ 862.974830][ T5920] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 863.324059][ T5920] usb 1-1: not running at top speed; connect to a high speed hub [ 863.485539][ T5920] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 863.758267][ T5920] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 863.959584][ T5920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.002196][ T5920] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.030449][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.045674][ T5920] usb 1-1: Product: syz [ 864.053201][ T5920] usb 1-1: Manufacturer: syz [ 864.059996][ T5920] usb 1-1: SerialNumber: syz [ 864.167963][ T93] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 864.329861][ T93] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 864.348087][ T93] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 864.368014][ T93] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 864.387258][ T93] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 864.417952][ T93] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 864.447359][ T93] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 864.460063][ T93] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 864.478435][ T93] usb 6-1: Product: syz [ 864.487966][ T93] usb 6-1: Manufacturer: syz [ 864.507717][ T93] cdc_wdm 6-1:1.0: skipping garbage [ 864.526621][ T93] cdc_wdm 6-1:1.0: skipping garbage [ 864.550976][ T93] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 864.573893][ T93] cdc_wdm 6-1:1.0: Unknown control protocol [ 864.857323][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3158'. [ 864.866796][T16055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3158'. [ 864.985952][T13295] usb 6-1: USB disconnect, device number 9 [ 865.614220][ T5920] usb 1-1: 0:2 : does not exist [ 865.640401][ T5920] usb 1-1: USB disconnect, device number 14 [ 865.784018][T16057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3159'. [ 867.155036][T16070] 9pnet_fd: Insufficient options for proto=fd [ 867.660999][ T93] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 867.743703][T16076] fuse: Bad value for 'rootmode' [ 868.607024][ T93] usb 1-1: Using ep0 maxpacket: 32 [ 869.205256][T16088] loop9: detected capacity change from 0 to 7 [ 869.214855][T16088] buffer_io_error: 4 callbacks suppressed [ 869.215155][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.229380][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.237630][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.246093][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.256051][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.264413][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.272634][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.281002][T16088] ldm_validate_partition_table(): Disk read failed. [ 869.288000][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.296563][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.305357][T16088] Buffer I/O error on dev loop9, logical block 0, async page read [ 869.313900][T16088] Dev loop9: unable to read RDB block 0 [ 869.320657][T16088] loop9: unable to read partition table [ 869.326976][T16088] loop9: partition table beyond EOD, truncated [ 869.333471][T16088] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 869.333471][T16088] ) failed (rc=-5) [ 869.453229][ T93] usb 1-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 870.230926][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.237499][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.830669][ T93] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.958062][ T93] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 870.968717][ T93] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.980670][ T93] usb 1-1: config 0 descriptor?? [ 871.013773][ T93] usb 1-1: can't set config #0, error -71 [ 871.208207][T16092] loop3: detected capacity change from 0 to 32768 [ 871.215533][T16092] XFS: ikeep mount option is deprecated. [ 871.231544][ T93] usb 1-1: USB disconnect, device number 15 [ 871.257430][T16096] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3172'. [ 871.304879][T16092] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 872.456395][T16092] XFS (loop3): Ending clean mount [ 872.484505][T16092] XFS (loop3): Quotacheck needed: Please wait. [ 872.578273][T16115] loop9: detected capacity change from 0 to 7 [ 872.590828][T16115] ldm_validate_partition_table(): Disk read failed. [ 872.598892][T16115] Dev loop9: unable to read RDB block 0 [ 872.606091][T16115] loop9: unable to read partition table [ 872.612679][T16115] loop9: partition table beyond EOD, truncated [ 872.619380][T16115] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 872.619380][T16115] ) failed (rc=-5) [ 873.254744][T16118] 9pnet_fd: Insufficient options for proto=fd [ 873.323954][T16092] XFS (loop3): Quotacheck: Done. [ 873.487966][T15546] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 875.985922][T14257] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 877.571508][T16135] loop9: detected capacity change from 0 to 7 [ 877.579741][T16135] buffer_io_error: 18 callbacks suppressed [ 877.579757][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.593772][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.601888][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.610053][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.618243][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.626432][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.634900][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.643101][T16135] ldm_validate_partition_table(): Disk read failed. [ 877.651082][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.660228][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.668587][T16135] Buffer I/O error on dev loop9, logical block 0, async page read [ 877.676884][T16135] Dev loop9: unable to read RDB block 0 [ 877.683706][T16135] loop9: unable to read partition table [ 877.690333][T16135] loop9: partition table beyond EOD, truncated [ 877.696704][T16135] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 877.696704][T16135] ) failed (rc=-5) [ 878.877148][T16141] loop9: detected capacity change from 0 to 7 [ 878.892030][T16141] ldm_validate_partition_table(): Disk read failed. [ 878.900377][T16141] Dev loop9: unable to read RDB block 0 [ 878.906988][T16141] loop9: unable to read partition table [ 878.914556][T16141] loop9: partition table beyond EOD, truncated [ 878.921039][T16141] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 878.921039][T16141] ) failed (rc=-5) [ 879.753821][T16146] loop3: detected capacity change from 0 to 512 [ 879.787312][T16146] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3179: casefold flag without casefold feature [ 879.803204][T16146] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3179: couldn't read orphan inode 15 (err -117) [ 879.817245][T16146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 879.828332][T16145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3184'. [ 880.256153][T16150] loop5: detected capacity change from 0 to 32768 [ 880.263155][T16150] XFS: ikeep mount option is deprecated. [ 880.468061][T16153] loop4: detected capacity change from 0 to 32768 [ 880.475088][T16153] XFS: ikeep mount option is deprecated. [ 880.512663][T16150] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.538796][T16153] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 880.639153][T16150] XFS (loop5): Ending clean mount [ 880.646630][T16150] XFS (loop5): Quotacheck needed: Please wait. [ 880.685956][T16150] XFS (loop5): Quotacheck: Done. [ 880.715792][T16153] XFS (loop4): Ending clean mount [ 880.732706][T16153] XFS (loop4): Quotacheck needed: Please wait. [ 882.711504][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 882.757727][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.807039][T16153] XFS (loop4): Quotacheck: Done. [ 884.721076][T12962] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 884.735820][ T5842] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 884.999468][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 885.013491][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 885.041848][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 885.057005][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 885.065188][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 885.444810][T16190] lo speed is unknown, defaulting to 1000 [ 886.761350][T16203] loop3: detected capacity change from 0 to 512 [ 886.805535][T16203] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 886.877093][T16203] EXT4-fs: error: could not find journal device path [ 887.208209][ T5832] Bluetooth: hci0: command tx timeout [ 889.268190][ T5832] Bluetooth: hci0: command tx timeout [ 890.490293][ T1096] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.500257][ T1096] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 890.535033][T16190] chnl_net:caif_netlink_parms(): no params data found [ 890.611005][ T1096] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.638852][ T1096] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 891.668523][ T5832] Bluetooth: hci0: command tx timeout [ 891.764092][ T1096] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.069554][T16239] loop5: detected capacity change from 0 to 32768 [ 892.076859][T16239] XFS: ikeep mount option is deprecated. [ 892.109233][T16241] loop2: detected capacity change from 0 to 32768 [ 892.116211][T16241] XFS: ikeep mount option is deprecated. [ 892.142734][ T1096] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 892.202533][T16239] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 892.216296][T16241] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 892.300133][T16241] XFS (loop2): Ending clean mount [ 892.308580][T16241] XFS (loop2): Quotacheck needed: Please wait. [ 892.325449][T16239] XFS (loop5): Ending clean mount [ 892.345902][T16239] XFS (loop5): Quotacheck needed: Please wait. [ 892.354307][T16241] XFS (loop2): Quotacheck: Done. [ 893.104731][T16239] XFS (loop5): Quotacheck: Done. [ 893.698454][T16190] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.740256][T16190] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.747502][T16190] bridge_slave_0: entered allmulticast mode [ 893.754265][T12962] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 893.758114][ T5832] Bluetooth: hci0: command tx timeout [ 893.771151][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 893.786942][T16190] bridge_slave_0: entered promiscuous mode [ 893.953983][ T1096] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.967748][ T1096] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 894.084999][T16263] loop9: detected capacity change from 0 to 7 [ 894.093257][T16263] buffer_io_error: 18 callbacks suppressed [ 894.093349][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.107584][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.116088][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.124720][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.134056][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.145217][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.154031][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.162176][T16263] ldm_validate_partition_table(): Disk read failed. [ 894.169323][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.177696][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.186373][T16263] Buffer I/O error on dev loop9, logical block 0, async page read [ 894.195040][T16263] Dev loop9: unable to read RDB block 0 [ 894.201859][T16263] loop9: unable to read partition table [ 894.208318][T16263] loop9: partition table beyond EOD, truncated [ 894.214855][T16263] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 894.214855][T16263] ) failed (rc=-5) [ 894.404522][T16190] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.472028][T16190] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.519450][T16190] bridge_slave_1: entered allmulticast mode [ 894.593859][T16190] bridge_slave_1: entered promiscuous mode [ 894.782881][T16190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.818804][T16190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.396052][T16190] team0: Port device team_slave_0 added [ 896.415465][T16190] team0: Port device team_slave_1 added [ 896.526233][T16278] loop0: detected capacity change from 0 to 512 [ 896.535942][T16278] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 896.562248][T16278] EXT4-fs: error: could not find journal device path [ 896.578057][T16190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.586197][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.614436][T16190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.628466][T16190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.635568][T16190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.666881][T16282] loop5: detected capacity change from 0 to 512 [ 896.673411][T16190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.738137][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 896.753927][T16282] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3212: casefold flag without casefold feature [ 896.781301][T16282] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3212: couldn't read orphan inode 15 (err -117) [ 896.801868][T16282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.809032][T16190] hsr_slave_0: entered promiscuous mode [ 896.837190][T16190] hsr_slave_1: entered promiscuous mode [ 896.979475][T16190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.063441][T16190] Cannot create hsr debugfs directory [ 897.524963][ T5840] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 897.615606][ T5840] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 897.742258][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 897.859810][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 897.987272][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 898.006391][ T5840] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 898.024403][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 898.052457][ T5840] usb 4-1: Product: syz [ 898.056649][ T5840] usb 4-1: Manufacturer: syz [ 898.102460][T12962] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.119297][ T1096] bridge_slave_1: left allmulticast mode [ 898.138065][ T1096] bridge_slave_1: left promiscuous mode [ 898.169905][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.191787][ T1096] bridge_slave_0: left allmulticast mode [ 898.197444][ T1096] bridge_slave_0: left promiscuous mode [ 898.223623][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.251480][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 898.256724][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 898.263495][ T5840] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 898.269456][ T5840] cdc_wdm 4-1:1.0: Unknown control protocol [ 899.581740][ T5959] usb 4-1: USB disconnect, device number 4 [ 902.154263][ T1096] bond1 (unregistering): (slave geneve2): Releasing active interface [ 902.779491][T16333] loop9: detected capacity change from 0 to 7 [ 902.790066][T16333] buffer_io_error: 4 callbacks suppressed [ 902.796211][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.805030][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.814668][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.826088][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.835709][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.848570][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.856654][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.865054][T16333] ldm_validate_partition_table(): Disk read failed. [ 902.872382][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.884250][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.893830][T16333] Buffer I/O error on dev loop9, logical block 0, async page read [ 902.905199][T16333] Dev loop9: unable to read RDB block 0 [ 902.914933][T16333] loop9: unable to read partition table [ 902.924573][T16333] loop9: partition table beyond EOD, truncated [ 902.931861][T16333] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 902.931861][T16333] ) failed (rc=-5) [ 904.624191][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.812774][T16341] loop2: detected capacity change from 0 to 32768 [ 904.819947][T16341] XFS: ikeep mount option is deprecated. [ 904.835099][T16341] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 904.855839][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.869400][ T1096] bond0 (unregistering): Released all slaves [ 904.936637][T16341] XFS (loop2): Ending clean mount [ 904.958752][T16341] XFS (loop2): Quotacheck needed: Please wait. [ 905.031302][ T1096] bond1 (unregistering): Released all slaves [ 905.049209][ T1096] bond2 (unregistering): (slave vcan1): Releasing backup interface [ 905.058705][ T1096] bond2 (unregistering): Released all slaves [ 905.739618][T16341] XFS (loop2): Quotacheck: Done. [ 905.765648][ T1096] tipc: Disabling bearer [ 905.777503][ T1096] tipc: Left network mode [ 905.819082][T16357] loop0: detected capacity change from 0 to 512 [ 905.858318][ T5840] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 905.934251][T16357] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3225: casefold flag without casefold feature [ 906.080351][ T5840] usb 6-1: not running at top speed; connect to a high speed hub [ 906.107482][ T5840] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 906.171734][T16358] loop3: detected capacity change from 0 to 32768 [ 906.178706][T16358] XFS: ikeep mount option is deprecated. [ 906.208994][T16357] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3225: couldn't read orphan inode 15 (err -117) [ 906.222616][ T5840] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 906.252710][T16357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.253788][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 906.266777][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.278122][T16358] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 906.305591][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.332741][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.349705][ T5840] usb 6-1: Product: syz [ 906.373338][ T5840] usb 6-1: Manufacturer: syz [ 906.380278][ T5840] usb 6-1: SerialNumber: syz [ 906.393663][T16358] XFS (loop3): Ending clean mount [ 906.401514][T16358] XFS (loop3): Quotacheck needed: Please wait. [ 906.902297][T16358] XFS (loop3): Quotacheck: Done. [ 907.004195][T15246] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.517417][ T1096] hsr_slave_0: left promiscuous mode [ 907.544300][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.661028][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.776460][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.859872][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.576941][ T1096] veth1_macvtap: left promiscuous mode [ 908.625892][ T1096] veth0_macvtap: left promiscuous mode [ 908.651287][ T1096] veth1_vlan: left promiscuous mode [ 908.656616][ T1096] veth0_vlan: left promiscuous mode [ 909.748888][ T5840] usb 6-1: 0:2 : does not exist [ 909.912975][T16389] loop5: detected capacity change from 0 to 1764 [ 909.928938][ T5840] usb 6-1: USB disconnect, device number 11 [ 909.965536][T16389] iso9660: Bad value for 'uid' [ 910.002085][T16389] iso9660: Bad value for 'uid' [ 910.036282][T14257] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 912.490588][T16401] loop5: detected capacity change from 0 to 16 [ 912.511175][T16401] erofs (device loop5): mounted with root inode @ nid 36. [ 913.467952][ T93] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 913.785347][ T93] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 913.821463][ T93] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 913.837912][ T93] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 913.852932][ T93] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 913.866063][ T93] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 913.957910][ T93] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 913.967337][ T93] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 913.976280][ T93] usb 1-1: Product: syz [ 913.985586][ T93] usb 1-1: Manufacturer: syz [ 914.059854][ T93] cdc_wdm 1-1:1.0: skipping garbage [ 914.065090][ T93] cdc_wdm 1-1:1.0: skipping garbage [ 914.096233][ T93] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 914.102292][ T93] cdc_wdm 1-1:1.0: Unknown control protocol [ 914.338719][T15546] usb 1-1: USB disconnect, device number 16 [ 914.385052][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 914.437723][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 915.178384][T16419] loop3: detected capacity change from 0 to 32768 [ 915.185632][T16419] XFS: ikeep mount option is deprecated. [ 915.235580][T16419] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 915.361748][T16419] XFS (loop3): Ending clean mount [ 915.370902][T16419] XFS (loop3): Quotacheck needed: Please wait. [ 915.405674][ T5840] infiniband syz1: ib_query_port failed (-19) [ 915.498003][ T5920] lo speed is unknown, defaulting to 1000 [ 916.173316][ T5920] infiniband syz0: ib_query_port failed (-19) [ 916.187308][T16431] veth0_to_team: entered promiscuous mode [ 916.193689][T16431] veth0_to_team: entered allmulticast mode [ 916.214602][T16419] XFS (loop3): Quotacheck: Done. [ 917.366630][T16436] loop2: detected capacity change from 0 to 32768 [ 917.373969][T16436] XFS: ikeep mount option is deprecated. [ 917.722878][T16436] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 917.794180][T16436] XFS (loop2): Ending clean mount [ 917.801231][T16436] XFS (loop2): Quotacheck needed: Please wait. [ 917.864808][T16436] XFS (loop2): Quotacheck: Done. [ 917.897758][T14257] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 919.425406][T16458] loop0: detected capacity change from 0 to 16 [ 919.477382][T16190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 919.492926][T16458] erofs (device loop0): mounted with root inode @ nid 36. [ 920.055406][T16190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 920.892292][T16190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 921.750704][T16190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 922.060754][T16479] loop9: detected capacity change from 0 to 7 [ 922.068268][T16479] buffer_io_error: 4 callbacks suppressed [ 922.068283][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.082616][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.093820][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.102936][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.111229][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.119598][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.128380][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.137375][T16479] ldm_validate_partition_table(): Disk read failed. [ 922.144569][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.153007][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.161674][T16479] Buffer I/O error on dev loop9, logical block 0, async page read [ 922.170707][T16479] Dev loop9: unable to read RDB block 0 [ 922.177424][T16479] loop9: unable to read partition table [ 922.184242][T16479] loop9: partition table beyond EOD, truncated [ 922.190972][T16479] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 922.190972][T16479] ) failed (rc=-5) [ 922.256362][ T5840] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 923.062361][T14770] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 923.606782][ T5840] usb 6-1: not running at top speed; connect to a high speed hub [ 923.618518][T16190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.637218][ T5840] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 923.648066][T15546] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 923.652741][ T5840] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 923.660987][T16190] 8021q: adding VLAN 0 to HW filter on device team0 [ 923.669588][ T5840] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.686882][ T5840] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 923.702111][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.709310][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.717076][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.725178][ T5840] usb 6-1: Product: syz [ 923.978382][T16489] loop2: detected capacity change from 0 to 40427 [ 924.036511][ T5840] usb 6-1: Manufacturer: syz [ 924.042289][ T5840] usb 6-1: SerialNumber: syz [ 924.051697][ T5840] usb 6-1: can't set config #1, error -71 [ 924.070249][ T5840] usb 6-1: USB disconnect, device number 12 [ 924.100291][T15546] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 924.109615][T16489] F2FS-fs (loop2): invalid crc value [ 924.117091][T12262] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.122024][T15546] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 924.124299][T12262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.141997][T15546] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 924.214819][T15546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 924.229140][T15546] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 924.243384][T15546] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 924.252671][T16489] F2FS-fs (loop2): Start checkpoint disabled! [ 924.279887][T16489] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 924.296096][T15546] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 924.371112][T15546] usb 4-1: Product: syz [ 924.430166][T15546] usb 4-1: Manufacturer: syz [ 924.481386][T16190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 925.631944][T15546] cdc_wdm 4-1:1.0: skipping garbage [ 925.637279][T15546] cdc_wdm 4-1:1.0: skipping garbage [ 926.072754][T15546] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 926.082910][T15546] cdc_wdm 4-1:1.0: Unknown control protocol [ 926.100614][T15546] usb 4-1: USB disconnect, device number 5 [ 926.921653][T12262] kworker/u8:12: attempt to access beyond end of device [ 926.921653][T12262] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 926.947230][T16523] loop0: detected capacity change from 0 to 16 [ 926.948454][T12262] kworker/u8:12: attempt to access beyond end of device [ 926.948454][T12262] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 926.981940][T16523] erofs (device loop0): mounted with root inode @ nid 36. [ 926.995106][T12262] CPU: 1 UID: 0 PID: 12262 Comm: kworker/u8:12 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 926.995131][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 926.995142][T12262] Workqueue: writeback wb_workfn (flush-7:2) [ 926.995173][T12262] Call Trace: [ 926.995181][T12262] [ 926.995189][T12262] dump_stack_lvl+0x189/0x250 [ 926.995222][T12262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.995247][T12262] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 926.995274][T12262] ? __pfx_queue_work_on+0x10/0x10 [ 926.995301][T12262] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 926.995327][T12262] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 926.995354][T12262] ? f2fs_hw_is_readonly+0x39b/0x470 [ 926.995383][T12262] f2fs_handle_critical_error+0x37c/0x540 [ 926.995414][T12262] f2fs_write_end_io+0x495/0x810 [ 926.995438][T12262] ? blkg_put+0x22/0x240 [ 926.995478][T12262] __submit_merged_bio+0x27a/0x6a0 [ 926.995509][T12262] __submit_merged_write_cond+0x255/0x530 [ 926.995540][T12262] f2fs_write_data_pages+0x261d/0x3000 [ 926.995604][T12262] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 926.995645][T12262] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 926.995712][T12262] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 926.995750][T12262] ? trace_f2fs_writepages+0x7f/0x200 [ 926.995774][T12262] ? f2fs_write_node_pages+0x478/0x6e0 [ 926.995815][T12262] ? __lock_acquire+0xab9/0xd20 [ 926.995842][T12262] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 926.995869][T12262] do_writepages+0x32e/0x550 [ 926.995901][T12262] ? reacquire_held_locks+0x127/0x1d0 [ 926.995931][T12262] ? writeback_sb_inodes+0x384/0x1010 [ 926.995967][T12262] __writeback_single_inode+0x145/0xff0 [ 926.995993][T12262] ? do_raw_spin_unlock+0x122/0x240 [ 926.996017][T12262] writeback_sb_inodes+0x6c7/0x1010 [ 926.996072][T12262] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 926.996144][T12262] ? rcu_is_watching+0x15/0xb0 [ 926.996180][T12262] wb_writeback+0x43b/0xaf0 [ 926.996215][T12262] ? queue_io+0x3d1/0x590 [ 926.996243][T12262] ? __pfx_wb_writeback+0x10/0x10 [ 926.996278][T12262] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.996310][T12262] wb_workfn+0x409/0xef0 [ 926.996349][T12262] ? __pfx_wb_workfn+0x10/0x10 [ 926.996377][T12262] ? __lock_acquire+0xab9/0xd20 [ 926.996411][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 926.996442][T12262] ? _raw_spin_unlock_irq+0x23/0x50 [ 926.996464][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 926.996486][T12262] ? process_scheduled_works+0x9ef/0x17b0 [ 926.996512][T12262] process_scheduled_works+0xae1/0x17b0 [ 926.996570][T12262] ? __pfx_process_scheduled_works+0x10/0x10 [ 926.996614][T12262] worker_thread+0x8a0/0xda0 [ 926.996643][T12262] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 926.996677][T12262] ? __kthread_parkme+0x7b/0x200 [ 926.996715][T12262] kthread+0x70e/0x8a0 [ 926.996737][T12262] ? __pfx_worker_thread+0x10/0x10 [ 926.996760][T12262] ? __pfx_kthread+0x10/0x10 [ 926.996777][T12262] ? preempt_schedule_thunk+0x16/0x30 [ 926.996803][T12262] ? __pfx_kthread+0x10/0x10 [ 926.996822][T12262] ret_from_fork+0x3fc/0x770 [ 926.996849][T12262] ? __pfx_ret_from_fork+0x10/0x10 [ 926.996880][T12262] ? __switch_to_asm+0x39/0x70 [ 926.996896][T12262] ? __switch_to_asm+0x33/0x70 [ 926.996912][T12262] ? __pfx_kthread+0x10/0x10 [ 926.996936][T12262] ret_from_fork_asm+0x1a/0x30 [ 926.996975][T12262] [ 926.996982][T12262] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 927.095896][T16190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.394243][T16545] loop5: detected capacity change from 0 to 1764 [ 930.403193][T16545] iso9660: Bad value for 'uid' [ 930.408220][T16545] iso9660: Bad value for 'uid' [ 930.483188][T16545] loop5: detected capacity change from 0 to 1024 [ 931.355814][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.537178][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.545215][T16190] veth0_vlan: entered promiscuous mode [ 934.604387][T16551] loop3: detected capacity change from 0 to 512 [ 934.612997][T16190] veth1_vlan: entered promiscuous mode [ 935.220304][T16190] veth0_macvtap: entered promiscuous mode [ 935.246690][T16551] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3264: casefold flag without casefold feature [ 935.838644][T16190] veth1_macvtap: entered promiscuous mode [ 935.908894][T16551] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3264: couldn't read orphan inode 15 (err -117) [ 936.520654][T16551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.593531][T16190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.633294][T16190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.682157][T12730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.283848][T12730] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.293936][T12730] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.306170][T12730] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.393246][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.607566][T12262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.822598][T16575] loop5: detected capacity change from 0 to 40427 [ 937.836874][T12262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.845919][T16575] F2FS-fs (loop5): invalid crc value [ 937.888208][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 937.900816][T16575] F2FS-fs (loop5): Start checkpoint disabled! [ 937.910949][T16575] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 937.956047][T12729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.968530][T12729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.057110][ T5840] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 939.068645][ T5840] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 939.087076][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 939.089335][T12871] kworker/u8:15: attempt to access beyond end of device [ 939.089335][T12871] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 939.103287][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 939.128987][ T5840] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 939.154017][T12871] kworker/u8:15: attempt to access beyond end of device [ 939.154017][T12871] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 939.169105][ T5840] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 939.170776][T12871] CPU: 1 UID: 0 PID: 12871 Comm: kworker/u8:15 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 939.170803][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.170817][T12871] Workqueue: writeback wb_workfn (flush-7:5) [ 939.170850][T12871] Call Trace: [ 939.170858][T12871] [ 939.170867][T12871] dump_stack_lvl+0x189/0x250 [ 939.170904][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 939.170931][T12871] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 939.170960][T12871] ? __pfx_queue_work_on+0x10/0x10 [ 939.170990][T12871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 939.171017][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 939.171046][T12871] ? f2fs_hw_is_readonly+0x39b/0x470 [ 939.171076][T12871] f2fs_handle_critical_error+0x37c/0x540 [ 939.171108][T12871] f2fs_write_end_io+0x495/0x810 [ 939.171135][T12871] ? blkg_put+0x22/0x240 [ 939.171176][T12871] __submit_merged_bio+0x27a/0x6a0 [ 939.171208][T12871] __submit_merged_write_cond+0x255/0x530 [ 939.171240][T12871] f2fs_write_data_pages+0x261d/0x3000 [ 939.171300][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 939.171342][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.171399][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.171429][T12871] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 939.171466][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 939.171556][T12871] ? __lock_acquire+0xab9/0xd20 [ 939.171592][T12871] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 939.171626][T12871] do_writepages+0x32e/0x550 [ 939.171666][T12871] ? reacquire_held_locks+0x127/0x1d0 [ 939.171698][T12871] ? writeback_sb_inodes+0x384/0x1010 [ 939.171748][T12871] __writeback_single_inode+0x145/0xff0 [ 939.171782][T12871] ? do_raw_spin_unlock+0x122/0x240 [ 939.171814][T12871] writeback_sb_inodes+0x6c7/0x1010 [ 939.171881][T12871] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 939.171964][T12871] ? rcu_is_watching+0x15/0xb0 [ 939.172009][T12871] wb_writeback+0x43b/0xaf0 [ 939.172053][T12871] ? queue_io+0x3d1/0x590 [ 939.172091][T12871] ? __pfx_wb_writeback+0x10/0x10 [ 939.172134][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.172173][T12871] wb_workfn+0x409/0xef0 [ 939.172219][T12871] ? __pfx_wb_workfn+0x10/0x10 [ 939.172252][T12871] ? __lock_acquire+0xab9/0xd20 [ 939.172293][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 939.172331][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.172360][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 939.172389][T12871] ? process_scheduled_works+0x9ef/0x17b0 [ 939.172422][T12871] process_scheduled_works+0xae1/0x17b0 [ 939.172486][T12871] ? __pfx_process_scheduled_works+0x10/0x10 [ 939.172539][T12871] worker_thread+0x8a0/0xda0 [ 939.172573][T12871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 939.172616][T12871] ? __kthread_parkme+0x7b/0x200 [ 939.172661][T12871] kthread+0x70e/0x8a0 [ 939.172701][T12871] ? __pfx_worker_thread+0x10/0x10 [ 939.172736][T12871] ? __pfx_kthread+0x10/0x10 [ 939.172769][T12871] ? _raw_spin_unlock_irq+0x23/0x50 [ 939.172798][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 939.172825][T12871] ? __pfx_kthread+0x10/0x10 [ 939.172845][T12871] ret_from_fork+0x3fc/0x770 [ 939.172876][T12871] ? __pfx_ret_from_fork+0x10/0x10 [ 939.172910][T12871] ? __switch_to_asm+0x39/0x70 [ 939.172928][T12871] ? __switch_to_asm+0x33/0x70 [ 939.172948][T12871] ? __pfx_kthread+0x10/0x10 [ 939.172969][T12871] ret_from_fork_asm+0x1a/0x30 [ 939.173008][T12871] [ 939.173090][T12871] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 939.187890][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 939.533847][ T5840] usb 4-1: Product: syz [ 939.538157][ T5840] usb 4-1: Manufacturer: syz [ 939.631259][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 939.636876][ T5840] cdc_wdm 4-1:1.0: skipping garbage [ 939.748207][ T5840] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 939.754140][ T5840] cdc_wdm 4-1:1.0: Unknown control protocol [ 940.452056][T16585] loop4: detected capacity change from 0 to 16 [ 940.461067][ T5920] usb 4-1: USB disconnect, device number 6 [ 940.465713][T16585] erofs (device loop4): mounted with root inode @ nid 36. [ 943.499191][T16610] loop3: detected capacity change from 0 to 512 [ 943.516040][T16610] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3278: casefold flag without casefold feature [ 943.533998][T16610] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3278: couldn't read orphan inode 15 (err -117) [ 943.604786][T16615] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 944.213489][T16610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.405723][T16618] loop4: detected capacity change from 0 to 16 [ 944.432172][T16618] erofs (device loop4): mounted with root inode @ nid 36. [ 946.422704][T16626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 946.432089][T16626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 946.743835][T16629] loop2: detected capacity change from 0 to 512 [ 946.839335][T16631] loop5: detected capacity change from 0 to 16 [ 946.840119][T16629] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3282: casefold flag without casefold feature [ 946.862185][T16629] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3282: couldn't read orphan inode 15 (err -117) [ 946.876168][T16631] erofs (device loop5): mounted with root inode @ nid 36. [ 947.090719][T16629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.032256][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.936897][T14770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.224079][T16659] syz.2.3289: attempt to access beyond end of device [ 950.224079][T16659] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 951.048307][T16659] gfs2: error -5 reading superblock [ 952.867551][T16687] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 955.133509][T16704] loop3: detected capacity change from 0 to 512 [ 955.827915][T16708] nvme_fabrics: unknown parameter or missing value '(' in ctrl creation request [ 956.241179][T16704] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3298: casefold flag without casefold feature [ 957.073703][T16704] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3298: couldn't read orphan inode 15 (err -117) [ 958.238015][ T31] INFO: task kworker/0:7:5938 blocked for more than 143 seconds. [ 958.246481][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 958.425035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.433783][ T31] task:kworker/0:7 state:D stack:22120 pid:5938 tgid:5938 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 958.446702][ T31] Workqueue: events_power_efficient hub_init_func3 [ 958.453261][ T31] Call Trace: [ 958.456553][ T31] [ 958.459895][ T31] __schedule+0x16f5/0x4d00 [ 958.464539][ T31] ? schedule+0x165/0x360 [ 958.468953][ T31] ? __pfx___schedule+0x10/0x10 [ 958.473832][ T31] ? schedule+0x91/0x360 [ 958.478122][ T31] schedule+0x165/0x360 [ 958.482302][ T31] schedule_preempt_disabled+0x13/0x30 [ 958.487784][ T31] __mutex_lock+0x724/0xe80 [ 958.492336][ T31] ? __mutex_lock+0x51b/0xe80 [ 958.497035][ T31] ? hub_activate+0xb7/0x1ea0 [ 958.507433][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 958.512537][ T31] ? __lock_acquire+0xab9/0xd20 [ 958.517426][ T31] hub_activate+0xb7/0x1ea0 [ 958.521983][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 958.527725][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 958.568513][T16704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.586793][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 958.592818][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 958.611030][ T31] process_scheduled_works+0xae1/0x17b0 [ 958.616640][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 958.645446][ T31] worker_thread+0x8a0/0xda0 [ 958.657834][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 958.667853][ T31] ? __kthread_parkme+0x7b/0x200 [ 958.672836][ T31] kthread+0x70e/0x8a0 [ 958.676940][ T31] ? __pfx_worker_thread+0x10/0x10 [ 958.682362][ T31] ? __pfx_kthread+0x10/0x10 [ 958.686969][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 958.692374][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.697595][ T31] ? __pfx_kthread+0x10/0x10 [ 958.702241][ T31] ret_from_fork+0x3fc/0x770 [ 958.706852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 958.725384][ T31] ? __switch_to_asm+0x39/0x70 [ 958.731002][ T31] ? __switch_to_asm+0x33/0x70 [ 958.735873][ T31] ? __pfx_kthread+0x10/0x10 [ 958.744108][ T31] ret_from_fork_asm+0x1a/0x30 [ 958.749803][ T31] [ 958.767256][T14257] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.791846][ T31] INFO: task kworker/0:8:5956 blocked for more than 143 seconds. [ 958.817493][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 958.833564][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 958.843853][ T31] task:kworker/0:8 state:D stack:21544 pid:5956 tgid:5956 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 958.861441][ T31] Workqueue: usb_hub_wq hub_event [ 958.866704][ T31] Call Trace: [ 958.882396][ T31] [ 958.885425][ T31] __schedule+0x16f5/0x4d00 [ 958.890110][ T31] ? schedule+0x165/0x360 [ 958.894541][ T31] ? __pfx___schedule+0x10/0x10 [ 958.902907][ T31] ? try_to_wake_up+0x7e5/0x1290 [ 958.908113][ T31] ? schedule+0x91/0x360 [ 958.912448][ T31] schedule+0x165/0x360 [ 958.916739][ T31] schedule_timeout+0x9a/0x270 [ 958.924962][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 958.930549][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 958.933347][T16716] loop4: detected capacity change from 0 to 32768 [ 958.935858][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.943047][T16716] XFS: ikeep mount option is deprecated. [ 958.954655][ T31] ? wait_for_completion+0x267/0x5d0 [ 958.963784][ T31] wait_for_completion+0x2bf/0x5d0 [ 958.969130][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 958.974864][ T31] ? __flush_work+0xd2/0xbc0 [ 958.980241][ T31] ? __flush_work+0xd2/0xbc0 [ 958.985212][ T31] __flush_work+0x9b9/0xbc0 [ 958.989940][ T31] ? __flush_work+0xd2/0xbc0 [ 958.994754][ T31] ? __pfx___flush_work+0x10/0x10 [ 959.002239][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 959.006661][T16716] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 959.007593][ T31] ? __pfx___timer_delete_sync+0x10/0x10 [ 959.022502][ T31] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 959.030902][ T31] ? flush_delayed_work+0x11d/0x190 [ 959.036391][ T31] flush_delayed_work+0x13e/0x190 [ 959.041484][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 959.047335][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.056370][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 959.066962][ T31] hub_quiesce+0x1f0/0x330 [ 959.070993][T16716] XFS (loop4): Ending clean mount [ 959.071462][ T31] hub_disconnect+0xc8/0x470 [ 959.078638][T16716] XFS (loop4): Quotacheck needed: Please wait. [ 959.084440][ T31] usb_unbind_interface+0x26b/0x910 [ 959.094536][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 959.100446][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 959.106581][ T31] bus_remove_device+0x34d/0x410 [ 959.110211][T16716] XFS (loop4): Quotacheck: Done. [ 959.111678][ T31] device_del+0x511/0x8e0 [ 959.123501][ T31] ? kfree+0x18e/0x440 [ 959.127608][ T31] ? __pfx_device_del+0x10/0x10 [ 959.132806][ T31] ? kobject_put+0x446/0x480 [ 959.137438][ T31] usb_disable_device+0x3e9/0x8a0 [ 959.142507][ T31] usb_disconnect+0x330/0x950 [ 959.147209][ T31] hub_event+0x1cdb/0x4a00 [ 959.151675][ T31] ? do_raw_spin_lock+0x121/0x290 [ 959.156703][ T31] ? register_lock_class+0x51/0x320 [ 959.164558][ T31] ? __pfx_hub_event+0x10/0x10 [ 959.169378][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 959.175149][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.181144][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 959.187204][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 959.194212][ T31] process_scheduled_works+0xae1/0x17b0 [ 959.202243][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 959.579232][ T31] worker_thread+0x8a0/0xda0 [ 959.583875][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 959.590807][ T31] ? __kthread_parkme+0x7b/0x200 [ 959.595786][ T31] kthread+0x70e/0x8a0 [ 959.599909][ T31] ? __pfx_worker_thread+0x10/0x10 [ 959.605052][ T31] ? __pfx_kthread+0x10/0x10 [ 959.609699][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.614927][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.620163][ T31] ? __pfx_kthread+0x10/0x10 [ 959.624770][ T31] ret_from_fork+0x3fc/0x770 [ 959.629413][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 959.634645][ T31] ? __switch_to_asm+0x39/0x70 [ 959.639463][ T31] ? __switch_to_asm+0x33/0x70 [ 959.644252][ T31] ? __pfx_kthread+0x10/0x10 [ 959.648877][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.653663][ T31] [ 959.664736][ T31] [ 959.664736][ T31] Showing all locks held in the system: [ 959.674034][ T31] 1 lock held by khungtaskd/31: [ 959.678930][ T31] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 959.691268][ T31] 2 locks held by getty/5592: [ 959.698010][ T31] #0: ffff88814cf0f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 959.707862][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 959.718153][ T31] 5 locks held by kworker/1:5/5906: [ 959.723358][ T31] #0: ffff888144abdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 959.734722][ T31] #1: ffffc90004d3fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 959.746573][ T31] #2: ffff888144f17198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 959.755582][ T31] #3: ffff88807a515198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 959.764769][ T31] #4: ffff888029975160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 959.776264][ T31] 2 locks held by kworker/u8:7/5925: [ 959.781600][ T31] 3 locks held by kworker/0:7/5938: [ 959.786827][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 959.799241][ T31] #1: ffffc90004ebfbc0 ((work_completion)(&(&hub->init_work)->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 959.812534][ T31] #2: ffff8880280f2198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 959.821634][ T31] 5 locks held by kworker/0:8/5956: [ 959.826822][ T31] #0: ffff888144abdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 959.838165][ T31] #1: ffffc90004effbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 959.850047][ T31] #2: ffff888144f07198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 959.858983][ T31] #3: ffff8880280f2198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 959.868202][ T31] #4: ffff888032cd6160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 959.879811][ T31] 3 locks held by kworker/0:0/15523: [ 959.885112][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 959.897493][ T31] #1: ffffc900043afbc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 959.910627][ T31] #2: ffff88807a515198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 959.919973][ T31] 1 lock held by syz-executor/16190: [ 959.925267][ T31] #0: ffffffff8e1419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 959.936222][ T31] [ 959.939125][ T31] ============================================= [ 959.939125][ T31] [ 959.947557][ T31] NMI backtrace for cpu 1 [ 959.947571][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 959.947589][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 959.947599][ T31] Call Trace: [ 959.947605][ T31] [ 959.947612][ T31] dump_stack_lvl+0x189/0x250 [ 959.947639][ T31] ? __wake_up_klogd+0xd9/0x110 [ 959.947658][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 959.947683][ T31] ? __pfx__printk+0x10/0x10 [ 959.947711][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 959.947736][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 959.947755][ T31] ? _printk+0xcf/0x120 [ 959.947776][ T31] ? __pfx__printk+0x10/0x10 [ 959.947797][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 959.947822][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 959.947848][ T31] watchdog+0xfee/0x1030 [ 959.947870][ T31] ? watchdog+0x1de/0x1030 [ 959.947896][ T31] kthread+0x70e/0x8a0 [ 959.947918][ T31] ? __pfx_watchdog+0x10/0x10 [ 959.947935][ T31] ? __pfx_kthread+0x10/0x10 [ 959.947953][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 959.947977][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 959.948002][ T31] ? __pfx_kthread+0x10/0x10 [ 959.948020][ T31] ret_from_fork+0x3fc/0x770 [ 959.948044][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 959.948072][ T31] ? __switch_to_asm+0x39/0x70 [ 959.948088][ T31] ? __switch_to_asm+0x33/0x70 [ 959.948103][ T31] ? __pfx_kthread+0x10/0x10 [ 959.948121][ T31] ret_from_fork_asm+0x1a/0x30 [ 959.948151][ T31] [ 960.099128][ T31] Sending NMI from CPU 1 to CPUs 0: [ 960.104349][ C0] NMI backtrace for cpu 0 [ 960.104363][ C0] CPU: 0 UID: 0 PID: 8538 Comm: kworker/u8:11 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 960.104382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.104393][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 960.104423][ C0] RIP: 0010:check_preemption_disabled+0x3/0x120 [ 960.104442][ C0] Code: e3 8b 48 c7 c6 e0 1c e3 8b eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 <41> 56 53 48 83 ec 10 65 48 8b 05 de 76 30 07 48 89 44 24 08 65 8b [ 960.104455][ C0] RSP: 0018:ffffc90019dc73b8 EFLAGS: 00000002 [ 960.104467][ C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 31e201a3be004600 [ 960.104495][ C0] RDX: ffffc90019dc7501 RSI: ffffffff8d9a65dc RDI: ffffffff8be31d00 [ 960.104507][ C0] RBP: dffffc0000000000 R08: ffffc90019dc7868 R09: 0000000000000000 [ 960.104518][ C0] R10: ffffc90019dc7558 R11: fffff520033b8ead R12: ffffc90019dc7878 [ 960.104530][ C0] R13: ffffffff81728c65 R14: ffffffff8e13bee0 R15: ffff888056215a00 [ 960.104543][ C0] FS: 0000000000000000(0000) GS:ffff888125c1d000(0000) knlGS:0000000000000000 [ 960.104556][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 960.104567][ C0] CR2: 00007ffda9407f98 CR3: 00000000744f0000 CR4: 00000000003526f0 [ 960.104582][ C0] Call Trace: [ 960.104588][ C0] [ 960.104596][ C0] lock_release+0xbc/0x3e0 [ 960.104615][ C0] ? deref_stack_reg+0x19f/0x230 [ 960.104648][ C0] ? unwind_next_frame+0xa5/0x2390 [ 960.104668][ C0] unwind_next_frame+0x19a9/0x2390 [ 960.104692][ C0] ? unwind_next_frame+0xa5/0x2390 [ 960.104714][ C0] ? kasan_save_track+0x3e/0x80 [ 960.104738][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 960.104753][ C0] arch_stack_walk+0x11c/0x150 [ 960.104779][ C0] ? kasan_save_free_info+0x46/0x50 [ 960.104800][ C0] stack_trace_save+0x9c/0xe0 [ 960.104813][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 960.104826][ C0] ? chacha_block_generic+0x53/0xc80 [ 960.104848][ C0] ? __lock_acquire+0xab9/0xd20 [ 960.104868][ C0] kasan_save_track+0x3e/0x80 [ 960.104888][ C0] ? kasan_save_track+0x3e/0x80 [ 960.104936][ C0] kasan_save_free_info+0x46/0x50 [ 960.104953][ C0] __kasan_slab_free+0x62/0x70 [ 960.104975][ C0] ? skb_release_data+0x62d/0x7c0 [ 960.104993][ C0] kfree+0x18e/0x440 [ 960.105017][ C0] skb_release_data+0x62d/0x7c0 [ 960.105040][ C0] consume_skb+0x9e/0xf0 [ 960.105056][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 960.105081][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 960.105103][ C0] process_scheduled_works+0xae1/0x17b0 [ 960.105148][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.105176][ C0] worker_thread+0x8a0/0xda0 [ 960.105196][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 960.105221][ C0] ? __kthread_parkme+0x7b/0x200 [ 960.105246][ C0] kthread+0x70e/0x8a0 [ 960.105261][ C0] ? __pfx_worker_thread+0x10/0x10 [ 960.105279][ C0] ? __pfx_kthread+0x10/0x10 [ 960.105294][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 960.105313][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.105334][ C0] ? __pfx_kthread+0x10/0x10 [ 960.105348][ C0] ret_from_fork+0x3fc/0x770 [ 960.105367][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 960.105390][ C0] ? __switch_to_asm+0x39/0x70 [ 960.105405][ C0] ? __switch_to_asm+0x33/0x70 [ 960.105419][ C0] ? __pfx_kthread+0x10/0x10 [ 960.105433][ C0] ret_from_fork_asm+0x1a/0x30 [ 960.105455][ C0] [ 960.110366][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 960.110397][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 960.110426][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.110442][ T31] Call Trace: [ 960.110454][ T31] [ 960.110465][ T31] dump_stack_lvl+0x99/0x250 [ 960.110506][ T31] ? __asan_memcpy+0x40/0x70 [ 960.110538][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 960.110585][ T31] ? __pfx__printk+0x10/0x10 [ 960.110631][ T31] panic+0x2db/0x790 [ 960.110668][ T31] ? __pfx_panic+0x10/0x10 [ 960.110697][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 960.110732][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 960.110762][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 960.110796][ T31] watchdog+0x102d/0x1030 [ 960.110821][ T31] ? watchdog+0x1de/0x1030 [ 960.110851][ T31] kthread+0x70e/0x8a0 [ 960.110875][ T31] ? __pfx_watchdog+0x10/0x10 [ 960.110897][ T31] ? __pfx_kthread+0x10/0x10 [ 960.110919][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 960.110948][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 960.110976][ T31] ? __pfx_kthread+0x10/0x10 [ 960.110997][ T31] ret_from_fork+0x3fc/0x770 [ 960.111027][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 960.111063][ T31] ? __switch_to_asm+0x39/0x70 [ 960.111084][ T31] ? __switch_to_asm+0x33/0x70 [ 960.111103][ T31] ? __pfx_kthread+0x10/0x10 [ 960.111124][ T31] ret_from_fork_asm+0x1a/0x30 [ 960.111160][ T31] [ 960.589999][ T31] Kernel Offset: disabled [ 960.594326][ T31] Rebooting in 86400 seconds..