last executing test programs: 3.818904971s ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file2\x00', 0x10040, &(0x7f00000000c0)={[{@user_xattr}, {@nomblk_io_submit}, {@delalloc}]}, 0xfd, 0x26d, &(0x7f0000000180)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0x58) 3.584209422s ago: executing program 3 (id=85): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc) 3.461285439s ago: executing program 1 (id=86): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x1, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x3}]}) write$ppp(r0, &(0x7f0000000100)="00a7", 0x2) 3.267449378s ago: executing program 3 (id=87): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 3.009421931s ago: executing program 2 (id=89): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @remote, 0x11}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="01", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0xb7}, &(0x7f0000000440)=0x20) 2.907341716s ago: executing program 1 (id=90): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x2, 0x8c86, 0x3}) 2.813913381s ago: executing program 0 (id=91): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 2.754579663s ago: executing program 1 (id=92): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001f80)='.\x00', 0x101000, 0x108) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x9, 0x0, &(0x7f0000000180)) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.647976789s ago: executing program 2 (id=93): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) 2.61790118s ago: executing program 3 (id=94): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2.595681061s ago: executing program 0 (id=95): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc0009058502", @ANYRES8], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/245, 0xf5}], 0x1, 0x7791, 0x3) 2.337107334s ago: executing program 2 (id=96): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xcc042, 0x8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 2.336304514s ago: executing program 3 (id=97): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000540)) 2.082396517s ago: executing program 3 (id=98): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x3, 0x2, "f6ad"}, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x1, 0x2}}) 1.873049247s ago: executing program 2 (id=99): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') 1.531454684s ago: executing program 2 (id=100): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) 965.902012ms ago: executing program 1 (id=101): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550c, 0x0) 727.730933ms ago: executing program 0 (id=102): r0 = socket(0x10, 0x80003, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 547.017213ms ago: executing program 2 (id=103): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905812340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, {0x6a}}}, 0x0) 487.801296ms ago: executing program 0 (id=104): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x8000, 0x1c, 0xd, 0x8, 0x401, 0xa929, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x9aa1, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r1}) 317.454464ms ago: executing program 0 (id=105): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x400, 0x0) 169.311761ms ago: executing program 1 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4a) 89.635655ms ago: executing program 3 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}}, 0x4) 0s ago: executing program 0 (id=108): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@user_xattr}, {@i_version}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 79.974543][ T5758] cgroup: Unknown subsys name 'net' [ 80.116956][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.790808][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.504137][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.513273][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.522775][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.530881][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.539237][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.548630][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.558002][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.565599][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.574293][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.574299][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.606888][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.615226][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.624138][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.632716][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.641017][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.649162][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.658063][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.666080][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.666087][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.681239][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.687493][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.696988][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.698932][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.717488][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.118298][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 84.336322][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.344808][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.353257][ T5772] bridge_slave_0: entered allmulticast mode [ 84.360849][ T5772] bridge_slave_0: entered promiscuous mode [ 84.370311][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.382270][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.389935][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.397482][ T5772] bridge_slave_1: entered allmulticast mode [ 84.404688][ T5772] bridge_slave_1: entered promiscuous mode [ 84.446402][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.477021][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.496378][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.560022][ T5772] team0: Port device team_slave_0 added [ 84.589187][ T5772] team0: Port device team_slave_1 added [ 84.648830][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.656842][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.664502][ T5770] bridge_slave_0: entered allmulticast mode [ 84.672612][ T5770] bridge_slave_0: entered promiscuous mode [ 84.680757][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.712213][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.720037][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.747301][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.760306][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.768605][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.776030][ T5770] bridge_slave_1: entered allmulticast mode [ 84.784325][ T5770] bridge_slave_1: entered promiscuous mode [ 84.827010][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.834598][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.861480][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.923851][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.943385][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.953864][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.961873][ T5771] bridge_slave_0: entered allmulticast mode [ 84.970378][ T5771] bridge_slave_0: entered promiscuous mode [ 84.994530][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.021515][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.029359][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.036590][ T5771] bridge_slave_1: entered allmulticast mode [ 85.044319][ T5771] bridge_slave_1: entered promiscuous mode [ 85.081492][ T5772] hsr_slave_0: entered promiscuous mode [ 85.089051][ T5772] hsr_slave_1: entered promiscuous mode [ 85.126617][ T5770] team0: Port device team_slave_0 added [ 85.173381][ T5770] team0: Port device team_slave_1 added [ 85.194231][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.201837][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.209632][ T5769] bridge_slave_0: entered allmulticast mode [ 85.217094][ T5769] bridge_slave_0: entered promiscuous mode [ 85.226087][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.233770][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.242364][ T5769] bridge_slave_1: entered allmulticast mode [ 85.250623][ T5769] bridge_slave_1: entered promiscuous mode [ 85.260991][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.296442][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.303564][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.330829][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.357823][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.385020][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.392202][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.419077][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.480759][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.494336][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.507022][ T5771] team0: Port device team_slave_0 added [ 85.546936][ T5771] team0: Port device team_slave_1 added [ 85.613434][ T5769] team0: Port device team_slave_0 added [ 85.620457][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.631793][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.659117][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.698767][ T5770] hsr_slave_0: entered promiscuous mode [ 85.705738][ T5770] hsr_slave_1: entered promiscuous mode [ 85.712315][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.720513][ T5770] Cannot create hsr debugfs directory [ 85.720540][ T5084] Bluetooth: hci3: command tx timeout [ 85.733580][ T5769] team0: Port device team_slave_1 added [ 85.751597][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.759239][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.785748][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.798247][ T5084] Bluetooth: hci2: command tx timeout [ 85.804228][ T5084] Bluetooth: hci0: command tx timeout [ 85.810291][ T5785] Bluetooth: hci1: command tx timeout [ 85.855423][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.864214][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.891742][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.904830][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.912158][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.939053][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.048914][ T5771] hsr_slave_0: entered promiscuous mode [ 86.055937][ T5771] hsr_slave_1: entered promiscuous mode [ 86.063189][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.071226][ T5771] Cannot create hsr debugfs directory [ 86.140525][ T5769] hsr_slave_0: entered promiscuous mode [ 86.148779][ T5769] hsr_slave_1: entered promiscuous mode [ 86.155819][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.163956][ T5769] Cannot create hsr debugfs directory [ 86.336706][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.351230][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.393483][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.408613][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.550917][ T5770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.590805][ T5770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.624830][ T5770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.645291][ T5770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.744461][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.756479][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.769844][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.781439][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.912241][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.928079][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.941603][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.965539][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.996814][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.091953][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.103326][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.115730][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.156171][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.163967][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.201584][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.209046][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.224910][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.278810][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.335148][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.342603][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.355891][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.363325][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.390893][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.398449][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.443230][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.465901][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.473291][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.586719][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.644489][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.652023][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.690487][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697723][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.800290][ T5084] Bluetooth: hci3: command tx timeout [ 87.887299][ T5084] Bluetooth: hci2: command tx timeout [ 87.892974][ T5084] Bluetooth: hci0: command tx timeout [ 87.899002][ T5084] Bluetooth: hci1: command tx timeout [ 87.913859][ T5771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.977676][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.340824][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.428206][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.450848][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.548503][ T5772] veth0_vlan: entered promiscuous mode [ 88.581382][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.603715][ T5772] veth1_vlan: entered promiscuous mode [ 88.670480][ T5770] veth0_vlan: entered promiscuous mode [ 88.685102][ T5769] veth0_vlan: entered promiscuous mode [ 88.724890][ T5770] veth1_vlan: entered promiscuous mode [ 88.736763][ T5769] veth1_vlan: entered promiscuous mode [ 88.753938][ T5771] veth0_vlan: entered promiscuous mode [ 88.801112][ T5771] veth1_vlan: entered promiscuous mode [ 88.853541][ T5770] veth0_macvtap: entered promiscuous mode [ 88.871201][ T5770] veth1_macvtap: entered promiscuous mode [ 88.881447][ T5772] veth0_macvtap: entered promiscuous mode [ 88.896739][ T5772] veth1_macvtap: entered promiscuous mode [ 88.936004][ T5769] veth0_macvtap: entered promiscuous mode [ 88.963191][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.976039][ T5769] veth1_macvtap: entered promiscuous mode [ 88.999275][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.013622][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.025796][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.040701][ T5771] veth0_macvtap: entered promiscuous mode [ 89.052635][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.070769][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.083478][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.097109][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.113138][ T5771] veth1_macvtap: entered promiscuous mode [ 89.126664][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.136409][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.146244][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.156133][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.188783][ T5770] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.197991][ T5770] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.206826][ T5770] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.218201][ T5770] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.232187][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.244272][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.255288][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.267621][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.280970][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.294734][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.307015][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.318607][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.329733][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.341728][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.352838][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.364917][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.375921][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.386934][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.397297][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.409559][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.421379][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.446296][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.457235][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.469828][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.482657][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.493085][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.503900][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.515438][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.531492][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.541503][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.551678][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562361][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.612293][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.624669][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.638824][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.648408][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.823187][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.848287][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.871323][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.879494][ T5785] Bluetooth: hci3: command tx timeout [ 89.892530][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.945398][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.958010][ T5785] Bluetooth: hci1: command tx timeout [ 89.963675][ T5785] Bluetooth: hci0: command tx timeout [ 89.969685][ T5084] Bluetooth: hci2: command tx timeout [ 89.975390][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.027138][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.061886][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.083511][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.093854][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.174933][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.207294][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.228996][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.261036][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.275032][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.515690][ T5839] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 90.539876][ T5839] pim6reg1: linktype set to 6 [ 90.864771][ T5852] syz.0.5[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.910656][ T5852] loop0: detected capacity change from 0 to 16 [ 91.002588][ T5852] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.129021][ T5852] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 49 is not supported yet [ 91.149790][ T5852] erofs: (device loop0): erofs_init_inode_xattrs: xattr_isize 12 of nid 49 is not supported yet [ 91.181161][ T5836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.437969][ T5836] usb 2-1: Using ep0 maxpacket: 16 [ 91.458615][ T5836] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.487747][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.517586][ T5836] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 91.527062][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.582544][ T5866] loop3: detected capacity change from 0 to 2048 [ 91.600858][ T5836] usb 2-1: config 0 descriptor?? [ 91.631801][ T5866] UDF-fs: bad mount option "vL‘Ëolume=000000000063" or missing value [ 91.958383][ T5785] Bluetooth: hci3: command tx timeout [ 92.037750][ T5785] Bluetooth: hci0: command tx timeout [ 92.043616][ T5084] Bluetooth: hci2: command tx timeout [ 92.044584][ T5778] Bluetooth: hci1: command tx timeout [ 92.093663][ T5836] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 92.111950][ T5856] loop2: detected capacity change from 0 to 32768 [ 92.127340][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 92.205012][ T5856] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.333394][ T8] usb 1-1: config index 0 descriptor too short (expected 19492, got 36) [ 92.353371][ T8] usb 1-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 92.374947][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 92.398021][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 92.435288][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.453508][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.471533][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 92.502419][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.545530][ T8] usb 1-1: config 0 descriptor?? [ 92.556441][ T5815] usb 2-1: USB disconnect, device number 2 [ 92.591390][ T5856] XFS (loop2): Ending clean mount [ 92.788919][ T5769] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.803159][ T5808] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 92.827344][ T5808] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 92.835238][ T5808] hid-generic 0006:0004:0009.0002: unknown main item tag 0x0 [ 92.853369][ T5808] hid-generic 0006:0004:0009.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 93.002452][ T8] lg-g15 0003:046D:C225.0003: unknown main item tag 0x0 [ 93.066523][ T8] lg-g15 0003:046D:C225.0003: unknown main item tag 0x0 [ 93.095419][ T8] lg-g15 0003:046D:C225.0003: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.0-1/input0 [ 93.176580][ T5887] fido_id[5887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 93.297172][ T27] usb 1-1: USB disconnect, device number 2 [ 93.510893][ T5895] fido_id[5895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.585335][ T5898] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 93.700290][ T5901] loop2: detected capacity change from 0 to 64 [ 93.821113][ T5903] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23'. [ 94.029618][ T5907] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 94.255476][ T5911] loop2: detected capacity change from 0 to 512 [ 94.311868][ T5911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.333901][ T5913] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 94.353967][ T5911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.367977][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.377507][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.493769][ T5911] EXT4-fs (loop2): 1 orphan inode deleted [ 94.529766][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.537124][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.545867][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.553411][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.567066][ T5911] EXT4-fs (loop2): 1 truncate cleaned up [ 94.596203][ T5911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.623248][ T5913] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.702418][ T5911] EXT4-fs (loop2): shut down requested (1) [ 94.815356][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.824864][ T5926] loop1: detected capacity change from 0 to 32768 [ 95.945253][ T5926] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root [ 95.945253][ T5926] [ 95.997799][ T5926] ERROR: (device loop1): remounting filesystem as read-only [ 96.342759][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.051419][ T5965] loop3: detected capacity change from 0 to 1024 [ 97.069519][ T5965] ======================================================= [ 97.069519][ T5965] WARNING: The mand mount option has been deprecated and [ 97.069519][ T5965] and is ignored by this kernel. Remove the mand [ 97.069519][ T5965] option from the mount to silence this warning. [ 97.069519][ T5965] ======================================================= [ 97.113787][ T5971] loop1: detected capacity change from 0 to 1024 [ 97.130503][ T5971] EXT4-fs: Ignoring removed oldalloc option [ 97.136510][ T5971] EXT4-fs: Ignoring removed bh option [ 97.179832][ T5971] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.217831][ T5965] EXT4-fs: inline encryption not supported [ 97.245223][ T5965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.250926][ T5971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.287790][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.335760][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.455140][ T5981] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 15: block 161:freeing already freed block (bit 10); block bitmap corrupt. [ 97.492604][ T965] cfg80211: failed to load regulatory.db [ 97.517345][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 97.525243][ T786] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 97.540035][ T786] usb 3-1: config 179 has no interface number 0 [ 97.546712][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 97.568874][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 97.582046][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 97.593885][ T786] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 97.598070][ T5982] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 97.610044][ T786] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 97.669396][ T786] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 97.689377][ T5982] EXT4-fs (loop3): Remounting filesystem read-only [ 97.708322][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.742510][ T5968] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.780111][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.800788][ T5770] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.879705][ T5986] loop0: detected capacity change from 0 to 512 [ 98.015223][ T5988] loop3: detected capacity change from 0 to 128 [ 98.063087][ T5990] loop1: detected capacity change from 0 to 64 [ 98.367452][ T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5 [ 98.831715][ T5836] usb 3-1: USB disconnect, device number 2 [ 98.831784][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 98.846688][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 98.862932][ T5836] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 99.557560][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.761045][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.787336][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.801575][ T6025] "syz.3.72" (6025) uses obsolete ecb(arc4) skcipher [ 99.815812][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.851281][ T6024] loop2: detected capacity change from 0 to 2048 [ 99.871361][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.908871][ T6010] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 99.916977][ T6024] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 99.952878][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 99.993255][ T6024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.557287][ T965] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.747425][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 100.786795][ T5836] usb 2-1: USB disconnect, device number 3 [ 100.838880][ T965] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.864020][ T965] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 100.889811][ T965] usb 4-1: can't read configurations, error -71 [ 101.015312][ T6040] loop2: detected capacity change from 0 to 512 [ 101.061052][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.094184][ T6040] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.106837][ T6034] loop0: detected capacity change from 0 to 32768 [ 101.218485][ T6034] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.262601][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.371864][ T6034] XFS (loop0): Ending clean mount [ 101.575098][ T6055] loop1: detected capacity change from 0 to 128 [ 101.616493][ T5771] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.628290][ T6055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.686783][ T6055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.709922][ T6059] loop2: detected capacity change from 0 to 64 [ 101.740682][ T6055] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.862815][ T5770] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.174277][ T6067] Zero length message leads to an empty skb [ 102.341229][ T6071] capability: warning: `syz.0.84' uses 32-bit capabilities (legacy support in use) [ 102.358154][ T6071] program syz.0.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.023867][ T6088] loop2: detected capacity change from 0 to 2048 [ 103.058140][ T6088] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.107603][ T5808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.134894][ T28] audit: type=1800 audit(1774448656.974:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.96" name="file2" dev="loop2" ino=1416 res=0 errno=0 [ 103.317380][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 103.333656][ T5808] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 103.358113][ T5808] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.377274][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.392482][ T5808] usb 1-1: Product: syz [ 103.398567][ T5808] usb 1-1: Manufacturer: syz [ 103.403718][ T5808] usb 1-1: SerialNumber: syz [ 103.418321][ T5808] usb 1-1: config 0 descriptor?? [ 103.427117][ T6085] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.517734][ T965] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.529484][ T6077] loop1: detected capacity change from 0 to 40427 [ 103.559135][ T6077] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 103.576071][ T6094] process 'syz.2.99' launched './file2' with NULL argv: empty string added [ 103.577043][ T6077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 103.628477][ T6077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 103.728164][ T965] usb 4-1: Using ep0 maxpacket: 16 [ 103.739334][ T5836] usb 1-1: USB disconnect, device number 3 [ 103.756672][ T965] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 103.800445][ T965] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 103.811942][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.828912][ T965] usb 4-1: Product: syz [ 103.833374][ T965] usb 4-1: Manufacturer: syz [ 103.839061][ T965] usb 4-1: SerialNumber: syz [ 103.854724][ T965] usb 4-1: config 0 descriptor?? [ 103.888140][ T965] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 103.904058][ T6077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 103.914286][ T965] usb 4-1: Detected FT232R [ 103.919502][ T6077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 104.119151][ T965] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 104.167944][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.184532][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.195518][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.210236][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.224182][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.236754][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.246528][ T6077] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 104.332885][ T965] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 104.573973][ T965] usb 4-1: USB disconnect, device number 4 [ 104.610626][ T965] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 104.636764][ T965] ftdi_sio 4-1:0.0: device disconnected [ 105.009900][ T6113] loop0: detected capacity change from 0 to 16 [ 105.019882][ T6113] erofs: (device loop0): mounted with root inode @ nid 36. [ 105.044122][ T6113] syz.0.105: attempt to access beyond end of device [ 105.044122][ T6113] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 105.065027][ T6113] syz.0.105: attempt to access beyond end of device [ 105.065027][ T6113] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 105.129528][ T6114] syz.0.105: attempt to access beyond end of device [ 105.129528][ T6114] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 105.143988][ T5808] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.246656][ T5771] BUG: Bad page state in process syz-executor pfn:75134 [ 105.254472][ T5771] page:ffffea0001d44d00 refcount:0 mapcount:0 mapping:ffff88805d1ea7d8 index:0x2 pfn:0x75134 [ 105.266325][ T5771] aops:z_erofs_cache_aops ino:0 [ 105.271595][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 105.280015][ T5771] page_type: 0xffffffff() [ 105.284418][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d1ea7d8 [ 105.293668][ T5771] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 105.303729][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 105.312021][ T5771] page_owner tracks the page as allocated [ 105.318633][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6113, tgid 6112 (syz.0.105), ts 105043341416, free_ts 102446084668 [ 105.341916][ T5771] post_alloc_hook+0x1c1/0x200 [ 105.347047][ T5771] get_page_from_freelist+0x1951/0x19e0 [ 105.353286][ T5771] __alloc_pages+0x1f0/0x460 [ 105.358998][ T5771] z_erofs_do_read_page+0x2181/0x36b0 [ 105.367264][ T5771] z_erofs_readahead+0x88b/0xda0 [ 105.372287][ T5771] read_pages+0x189/0x850 [ 105.377381][ T5771] page_cache_ra_unbounded+0x68a/0x770 [ 105.383531][ T5771] force_page_cache_ra+0x2c1/0x320 [ 105.388834][ T5771] generic_fadvise+0x47e/0x780 [ 105.393763][ T5771] __x64_sys_fadvise64+0x140/0x180 [ 105.400464][ T5771] do_syscall_64+0x55/0xa0 [ 105.404971][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.411267][ T5771] page last free stack trace: [ 105.416098][ T5771] free_unref_page_prepare+0x7b2/0x8c0 [ 105.422707][ T5771] free_unref_page_list+0xbe/0x860 [ 105.428297][ T5771] release_pages+0x1f7a/0x2200 [ 105.433407][ T5771] tlb_flush_mmu+0x379/0x510 [ 105.438831][ T5771] tlb_finish_mmu+0xf9/0x220 [ 105.444768][ T5771] exit_mmap+0x428/0xb90 [ 105.451257][ T5771] __mmput+0x118/0x3c0 [ 105.457382][ T5771] exit_mm+0x1f2/0x2c0 [ 105.462503][ T5771] do_exit+0x8dd/0x2460 [ 105.468693][ T5771] do_group_exit+0x21b/0x2d0 [ 105.474257][ T5771] get_signal+0x12fc/0x13f0 [ 105.481690][ T5771] arch_do_signal_or_restart+0xc2/0x800 [ 105.487917][ T5771] exit_to_user_mode_loop+0x70/0x110 [ 105.493797][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 105.499788][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 105.507099][ T5771] do_syscall_64+0x61/0xa0 [ 105.513183][ T5771] Modules linked in: [ 105.517585][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 [ 105.526344][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.538123][ T5771] Call Trace: [ 105.542391][ T5771] [ 105.546182][ T5771] dump_stack_lvl+0x18c/0x250 [ 105.551388][ T5771] ? show_regs_print_info+0x20/0x20 [ 105.557083][ T5771] ? swiotlb_print_info+0x70/0x70 [ 105.562922][ T5771] bad_page+0x14b/0x170 [ 105.567498][ T5771] free_unref_page_prepare+0x85f/0x8c0 [ 105.573923][ T5771] free_unref_page+0x32/0x2e0 [ 105.579737][ T5771] ? __folio_put+0xef/0x210 [ 105.584846][ T5771] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 105.591776][ T5771] erofs_shrink_workstation+0x11f/0x290 [ 105.597729][ T5771] ? erofs_shrinker_unregister+0x170/0x170 [ 105.604020][ T5771] ? io_schedule+0xd0/0xd0 [ 105.608493][ T5771] ? kobject_put+0x428/0x460 [ 105.613233][ T5771] erofs_shrinker_unregister+0x5d/0x170 [ 105.619479][ T5771] erofs_put_super+0x4e/0x150 [ 105.624644][ T5771] ? erofs_free_inode+0xb0/0xb0 [ 105.630497][ T5771] generic_shutdown_super+0x134/0x2b0 [ 105.636169][ T5771] kill_block_super+0x44/0x90 [ 105.640887][ T5771] erofs_kill_sb+0x4c/0x140 [ 105.645714][ T5771] deactivate_locked_super+0x97/0x100 [ 105.651575][ T5771] cleanup_mnt+0x43b/0x4d0 [ 105.656301][ T5771] task_work_run+0x1d4/0x260 [ 105.661120][ T5771] ? task_work_cancel+0x220/0x220 [ 105.666413][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 105.672281][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 105.678152][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 105.683855][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 105.689375][ T5771] do_syscall_64+0x61/0xa0 [ 105.693927][ T5771] ? clear_bhb_loop+0x40/0x90 [ 105.698811][ T5771] ? clear_bhb_loop+0x40/0x90 [ 105.704053][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.710517][ T5771] RIP: 0033:0x7fef33f9d9d7 [ 105.715304][ T5771] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.735642][ T5771] RSP: 002b:00007ffdb16d76c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.744467][ T5771] RAX: 0000000000000000 RBX: 00007fef34032050 RCX: 00007fef33f9d9d7 [ 105.752942][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb16d7780 [ 105.761467][ T5771] RBP: 00007ffdb16d7780 R08: 00007ffdb16d8780 R09: 00000000ffffffff [ 105.769563][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb16d8810 [ 105.777960][ T5771] R13: 00007fef34032050 R14: 0000000000019ab4 R15: 00007ffdb16d8850 [ 105.786255][ T5771] [ 105.791034][ T5771] Disabling lock debugging due to kernel taint [ 105.798249][ T5771] BUG: Bad page state in process syz-executor pfn:25020 [ 105.805524][ T5771] page:ffffea0000940800 refcount:0 mapcount:0 mapping:ffff88805d1ea7d8 index:0x3 pfn:0x25020 [ 105.818042][ T5771] aops:z_erofs_cache_aops ino:0 [ 105.823361][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 105.831685][ T5771] page_type: 0xffffffff() [ 105.836240][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d1ea7d8 [ 105.845373][ T5771] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 105.854048][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 105.861415][ T5771] page_owner tracks the page as allocated [ 105.867305][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6113, tgid 6112 (syz.0.105), ts 105043360189, free_ts 102446070347 [ 105.890497][ T5771] post_alloc_hook+0x1c1/0x200 [ 105.895505][ T5771] get_page_from_freelist+0x1951/0x19e0 [ 105.901662][ T5771] __alloc_pages+0x1f0/0x460 [ 105.906689][ T5771] z_erofs_do_read_page+0x2181/0x36b0 [ 105.913224][ T5771] z_erofs_readahead+0x88b/0xda0 [ 105.918504][ T5771] read_pages+0x189/0x850 [ 105.923074][ T5771] page_cache_ra_unbounded+0x68a/0x770 [ 105.929512][ T5771] force_page_cache_ra+0x2c1/0x320 [ 105.934933][ T5771] generic_fadvise+0x47e/0x780 [ 105.939995][ T5771] __x64_sys_fadvise64+0x140/0x180 [ 105.945419][ T5771] do_syscall_64+0x55/0xa0 [ 105.950245][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.956550][ T5771] page last free stack trace: [ 105.961517][ T5771] free_unref_page_prepare+0x7b2/0x8c0 [ 105.967298][ T5771] free_unref_page_list+0xbe/0x860 [ 105.973269][ T5771] release_pages+0x1f7a/0x2200 [ 105.978523][ T5771] tlb_flush_mmu+0x379/0x510 [ 105.983619][ T5771] tlb_finish_mmu+0xf9/0x220 [ 105.988410][ T5771] exit_mmap+0x428/0xb90 [ 105.992818][ T5771] __mmput+0x118/0x3c0 [ 105.997051][ T5771] exit_mm+0x1f2/0x2c0 [ 106.001316][ T5771] do_exit+0x8dd/0x2460 [ 106.005939][ T5771] do_group_exit+0x21b/0x2d0 [ 106.010777][ T5771] get_signal+0x12fc/0x13f0 [ 106.016350][ T5771] arch_do_signal_or_restart+0xc2/0x800 [ 106.022151][ T5771] exit_to_user_mode_loop+0x70/0x110 [ 106.027793][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 106.033586][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 106.039446][ T5771] do_syscall_64+0x61/0xa0 [ 106.044379][ T5771] Modules linked in: [ 106.048867][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Tainted: G B syzkaller #0 [ 106.059080][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.069871][ T5771] Call Trace: [ 106.073713][ T5771] [ 106.077046][ T5771] dump_stack_lvl+0x18c/0x250 [ 106.082047][ T5771] ? show_regs_print_info+0x20/0x20 [ 106.087573][ T5771] ? swiotlb_print_info+0x70/0x70 [ 106.093106][ T5771] bad_page+0x14b/0x170 [ 106.097387][ T5771] free_unref_page_prepare+0x85f/0x8c0 [ 106.103097][ T5771] free_unref_page+0x32/0x2e0 [ 106.107829][ T5771] ? __folio_put+0xef/0x210 [ 106.112549][ T5771] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 106.119492][ T5771] erofs_shrink_workstation+0x11f/0x290 [ 106.125535][ T5771] ? erofs_shrinker_unregister+0x170/0x170 [ 106.132185][ T5771] ? io_schedule+0xd0/0xd0 [ 106.136730][ T5771] ? kobject_put+0x428/0x460 [ 106.141628][ T5771] erofs_shrinker_unregister+0x5d/0x170 [ 106.147309][ T5771] erofs_put_super+0x4e/0x150 [ 106.152468][ T5771] ? erofs_free_inode+0xb0/0xb0 [ 106.158017][ T5771] generic_shutdown_super+0x134/0x2b0 [ 106.163546][ T5771] kill_block_super+0x44/0x90 [ 106.168568][ T5771] erofs_kill_sb+0x4c/0x140 [ 106.173309][ T5771] deactivate_locked_super+0x97/0x100 [ 106.179244][ T5771] cleanup_mnt+0x43b/0x4d0 [ 106.183873][ T5771] task_work_run+0x1d4/0x260 [ 106.188789][ T5771] ? task_work_cancel+0x220/0x220 [ 106.194259][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.200288][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 106.206065][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 106.212323][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 106.218089][ T5771] do_syscall_64+0x61/0xa0 [ 106.222731][ T5771] ? clear_bhb_loop+0x40/0x90 [ 106.228020][ T5771] ? clear_bhb_loop+0x40/0x90 [ 106.233008][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.239312][ T5771] RIP: 0033:0x7fef33f9d9d7 [ 106.243856][ T5771] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.264559][ T5771] RSP: 002b:00007ffdb16d76c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.273897][ T5771] RAX: 0000000000000000 RBX: 00007fef34032050 RCX: 00007fef33f9d9d7 [ 106.282022][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb16d7780 [ 106.290462][ T5771] RBP: 00007ffdb16d7780 R08: 00007ffdb16d8780 R09: 00000000ffffffff [ 106.298736][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb16d8810 [ 106.306901][ T5771] R13: 00007fef34032050 R14: 0000000000019ab4 R15: 00007ffdb16d8850 [ 106.315263][ T5771] [ 106.319699][ T5771] BUG: Bad page state in process syz-executor pfn:5d99d [ 106.327918][ T5771] page:ffffea0001766740 refcount:0 mapcount:0 mapping:ffff88805d1ea7d8 index:0x4 pfn:0x5d99d [ 106.338627][ T5771] aops:z_erofs_cache_aops ino:0 [ 106.343719][ T5771] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 106.352240][ T5771] page_type: 0xffffffff() [ 106.357094][ T5771] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805d1ea7d8 [ 106.366133][ T5771] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 106.375605][ T5771] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 106.382990][ T5771] page_owner tracks the page as allocated [ 106.388945][ T5771] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6113, tgid 6112 (syz.0.105), ts 105043379451, free_ts 102446055538 [ 106.412305][ T5771] post_alloc_hook+0x1c1/0x200 [ 106.417631][ T5771] get_page_from_freelist+0x1951/0x19e0 [ 106.424725][ T5771] __alloc_pages+0x1f0/0x460 [ 106.429780][ T5771] z_erofs_do_read_page+0x2181/0x36b0 [ 106.435625][ T5771] z_erofs_readahead+0x88b/0xda0 [ 106.441079][ T5771] read_pages+0x189/0x850 [ 106.445786][ T5771] page_cache_ra_unbounded+0x68a/0x770 [ 106.451817][ T5771] force_page_cache_ra+0x2c1/0x320 [ 106.457625][ T5771] generic_fadvise+0x47e/0x780 [ 106.463232][ T5771] __x64_sys_fadvise64+0x140/0x180 [ 106.468668][ T5771] do_syscall_64+0x55/0xa0 [ 106.473774][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.480014][ T5771] page last free stack trace: [ 106.485331][ T5771] free_unref_page_prepare+0x7b2/0x8c0 [ 106.491049][ T5771] free_unref_page_list+0xbe/0x860 [ 106.496407][ T5771] release_pages+0x1f7a/0x2200 [ 106.501535][ T5771] tlb_flush_mmu+0x379/0x510 [ 106.506283][ T5771] tlb_finish_mmu+0xf9/0x220 [ 106.511164][ T5771] exit_mmap+0x428/0xb90 [ 106.515633][ T5771] __mmput+0x118/0x3c0 [ 106.519954][ T5771] exit_mm+0x1f2/0x2c0 [ 106.524093][ T5771] do_exit+0x8dd/0x2460 [ 106.529262][ T5771] do_group_exit+0x21b/0x2d0 [ 106.534015][ T5771] get_signal+0x12fc/0x13f0 [ 106.538805][ T5771] arch_do_signal_or_restart+0xc2/0x800 [ 106.546593][ T5771] exit_to_user_mode_loop+0x70/0x110 [ 106.552395][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 106.558317][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 106.564258][ T5771] do_syscall_64+0x61/0xa0 [ 106.569207][ T5771] Modules linked in: [ 106.573229][ T5771] CPU: 0 PID: 5771 Comm: syz-executor Tainted: G B syzkaller #0 [ 106.583090][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.593716][ T5771] Call Trace: [ 106.597316][ T5771] [ 106.600418][ T5771] dump_stack_lvl+0x18c/0x250 [ 106.605845][ T5771] ? show_regs_print_info+0x20/0x20 [ 106.611859][ T5771] ? swiotlb_print_info+0x70/0x70 [ 106.617231][ T5771] bad_page+0x14b/0x170 [ 106.621728][ T5771] free_unref_page_prepare+0x85f/0x8c0 [ 106.628048][ T5771] free_unref_page+0x32/0x2e0 [ 106.633186][ T5771] ? __folio_put+0xef/0x210 [ 106.637827][ T5771] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 106.644581][ T5771] erofs_shrink_workstation+0x11f/0x290 [ 106.650451][ T5771] ? erofs_shrinker_unregister+0x170/0x170 [ 106.656655][ T5771] ? io_schedule+0xd0/0xd0 [ 106.661397][ T5771] ? kobject_put+0x428/0x460 [ 106.666193][ T5771] erofs_shrinker_unregister+0x5d/0x170 [ 106.672270][ T5771] erofs_put_super+0x4e/0x150 [ 106.677183][ T5771] ? erofs_free_inode+0xb0/0xb0 [ 106.682275][ T5771] generic_shutdown_super+0x134/0x2b0 [ 106.688030][ T5771] kill_block_super+0x44/0x90 [ 106.693101][ T5771] erofs_kill_sb+0x4c/0x140 [ 106.698495][ T5771] deactivate_locked_super+0x97/0x100 [ 106.704122][ T5771] cleanup_mnt+0x43b/0x4d0 [ 106.708896][ T5771] task_work_run+0x1d4/0x260 [ 106.714160][ T5771] ? task_work_cancel+0x220/0x220 [ 106.719409][ T5771] ? exit_to_user_mode_loop+0x3b/0x110 [ 106.725267][ T5771] exit_to_user_mode_loop+0xe6/0x110 [ 106.731001][ T5771] exit_to_user_mode_prepare+0xee/0x180 [ 106.736865][ T5771] syscall_exit_to_user_mode+0x1a/0x50 [ 106.742368][ T5771] do_syscall_64+0x61/0xa0 [ 106.746994][ T5771] ? clear_bhb_loop+0x40/0x90 [ 106.752052][ T5771] ? clear_bhb_loop+0x40/0x90 [ 106.756877][ T5771] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.762813][ T5771] RIP: 0033:0x7fef33f9d9d7 [ 106.767269][ T5771] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.788191][ T5771] RSP: 002b:00007ffdb16d76c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.796864][ T5771] RAX: 0000000000000000 RBX: 00007fef34032050 RCX: 00007fef33f9d9d7 [ 106.805236][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb16d7780 [ 106.813510][ T5771] RBP: 00007ffdb16d7780 R08: 00007ffdb16d8780 R09: 00000000ffffffff [ 106.821839][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb16d8810 [ 106.829958][ T5771] R13: 00007fef34032050 R14: 0000000000019ab4 R15: 00007ffdb16d8850 [ 106.838076][ T5771] [ 106.867342][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 106.875824][ T5808] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.887587][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 106.907343][ T5808] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 106.919831][ T5808] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 106.937132][ T5808] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 106.949392][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 106.958859][ T5808] usb 3-1: SerialNumber: syz [ 106.971250][ T6107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.979206][ T6107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.990197][ T5808] hub 3-1:1.0: bad descriptor, ignoring hub [ 106.996901][ T5808] hub: probe of 3-1:1.0 failed with error -5 [ 107.202060][ T6107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.209979][ T6107] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 107.628054][ T5808] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 107.967588][ T5808] usb 3-1: USB disconnect, device number 3