last executing test programs: 10m24.932355877s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) 10m23.818161213s ago: executing program 3 (id=15): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200002, &(0x7f0000000080)={[{@block_validity}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffff}}, {@jqfmt_vfsv1}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {}, {@nogrpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x572, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000480)=ANY=[], 0x1, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 10m23.069645047s ago: executing program 3 (id=22): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x36) sendmsg$nl_route(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac2(0x2, 0x87, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000201e0400304000010203010902750003010410dc080b01020104200409040000000101200009240106000b1500020c240306040331"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 10m20.573402888s ago: executing program 3 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={0xffffffffffffffff, r4}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 10m19.870611541s ago: executing program 32 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={0xffffffffffffffff, r4}, 0x6e) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 7m13.001675814s ago: executing program 2 (id=560): bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x8, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x229) 7m12.858696369s ago: executing program 2 (id=561): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x1f, 0x31, 0x81, 0x80, 0x0, 0x0, 0x4, 0x80, 0x4}, {0xfffffffc, 0x3, 0xfe, 0x0, 0x1, 0x61, 0xfd, 0xfd, 0x1, 0x1, 0x23, 0x3, 0x20000000000000}, {0x8000, 0xa, 0x22, 0x8, 0x44, 0x0, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7m11.976668857s ago: executing program 2 (id=564): socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x5, 0x51, 0x2, 0x401}]}, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) syz_open_dev$usbfs(0x0, 0x77, 0x101301) openat$cgroup(r1, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000580)}, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) 7m11.061610107s ago: executing program 2 (id=565): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@sysvgroups}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file0\x00', 0xe1c00, 0x0, 0x4, 0x0, &(0x7f0000000000)) openat(0xffffffffffffffff, 0x0, 0x40c2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x5c) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 7m10.486845915s ago: executing program 2 (id=570): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b805000000b9000001000f01d966b8d4008ed06766f20f11c936660f38800bb9800000c00f3235008000000f3067f343730226260f019a6e9700003e2e640f01f866ba2000edf4", 0x47}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m9.785634028s ago: executing program 2 (id=573): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x1f, 0x31, 0x81, 0x80, 0x0, 0x0, 0x4, 0x80, 0x4}, {0xfffffffc, 0x3, 0xfe, 0x0, 0x1, 0x61, 0xfd, 0xfd, 0x1, 0x1, 0x23, 0x3, 0x20000000000000}, {0x8000, 0xa, 0x22, 0x8, 0x44, 0x0, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7m9.491165878s ago: executing program 33 (id=573): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x1f, 0x31, 0x81, 0x80, 0x0, 0x0, 0x4, 0x80, 0x4}, {0xfffffffc, 0x3, 0xfe, 0x0, 0x1, 0x61, 0xfd, 0xfd, 0x1, 0x1, 0x23, 0x3, 0x20000000000000}, {0x8000, 0xa, 0x22, 0x8, 0x44, 0x0, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd00"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 6m47.802959211s ago: executing program 0 (id=609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 6m45.267061774s ago: executing program 0 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x5, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) unshare(0x22020600) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r5], 0x8) inotify_init1(0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f000058e000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) 6m43.809931921s ago: executing program 0 (id=614): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x18, 0x0, &(0x7f0000000180)=[@acquire, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) 6m43.5325763s ago: executing program 0 (id=616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 6m40.972877283s ago: executing program 0 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 6m38.60321744s ago: executing program 0 (id=622): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 6m23.308141086s ago: executing program 34 (id=622): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 5m25.902230688s ago: executing program 6 (id=760): writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x2, 0x0, [{0x9a7, 0x0, 0x100}, {0xb65, 0x0, 0x7ff}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x6, 0x4, '\x00', 0x5}) 5m25.185638381s ago: executing program 6 (id=762): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xff, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0xd12}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x40, 0x80, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x800}}}}}}}}]}}, 0x0) 5m22.556731826s ago: executing program 6 (id=767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 5m19.589581553s ago: executing program 6 (id=769): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0x5, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x40000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x701, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) unshare(0x22020600) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r6], 0x8) inotify_init1(0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mprotect(&(0x7f000058e000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 5m17.036466446s ago: executing program 6 (id=773): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7) close(0x3) r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX]) setsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f00000000c0)=0x9, 0x4) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r6, 0x1, 0x1) getdents(r6, &(0x7f00000005c0)=""/156, 0x9c) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) socket$inet_udp(0x2, 0x2, 0x0) 5m15.336382081s ago: executing program 6 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 4m58.954163222s ago: executing program 35 (id=777): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 15.563314565s ago: executing program 5 (id=1426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 13.345557917s ago: executing program 4 (id=1434): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x13) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) shutdown(r1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4b0040, 0x0) getgid() 12.224591634s ago: executing program 4 (id=1435): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000080), 0x4, 0x49b, &(0x7f0000000f00)="$eJzs3M1vFVUbAPBnpvdSXl5eyotfgKhVNDZ+UFpQWbjRaOICEhNd4M7aFoIUamhNhBCpxuDSkLgnxpX/gitXalyZuNWtMSREiQkfG6+ZOzO096vQcttb6O+XXHrOnTNzzsOZM/fMnN4GsG4NZv8kEZsj4teIGMizjQUG8x/Xrpwdv37l7HgStdpbfyb1clevnB0vi5b7/bfIDKUR6WdJUUmjmdNnjo9NTU2eKvLDsyc+GJ45feb5YyfGjk4enTw5euDA/n0jL704+kJX4szadHXnx9O7drzxzoVD44cvvLexYfvCOLplMAv8r1pd87anul1Zj/1Tm48zqfS6NdyuvojIuqtaH/8D0RfznTcQr3/a08YBKyq7Zv/e/Gb1ZmquBtzDklh86/x1okGbt4C7S/lBn93/lq9VmnqsCZdfyW+AsrivFa98SyXS4j+ouoL1D0bE4bkbF7NXND2HqLV5bgAAcKe+y+Y/z7XO/7L7vgcXlEuKtaGtEfH/iNgWEfdF/LA9Ih4oyj4UEduXUHd/tC4Ntc4/00t3EN4tZfO/l4u1rcb5X1oWObS5yP2vHn81OXJsanJvRGyJiKGo9mf5kXYHLw/x2i9fdKp/4fzv8FzejnIuWBzkUqV/wQ7nvs5/dmlSevmTiJ2VdvEn9ZWAJPJnADsiYufSDr2lTBx75ptdnQo1xn/jYmv8i+jCOlPtq4in8/6fi6b4S8ni65PDG2Nqcu9weVa0+unn8292qv+O4u+CrP83NZ7/TSUG/k4WrtfOLL2O87993vGesnLL+JvO/4iYGJsd25C8XV+z3lC899HY7OypkYgNycF6vuH90fl9y3xZPot/aHf78b+t2CeL/+GIyE7iRyLi0Yh4rOi7xyPiiYjYvUj8P7765Pudtq2F/p9oe/27ef5vbez/pSf6jn//baf6F42/fgXJ+n9/PTtU7JP1f57a2DGuzs0p91nu2QwAAAB3nzQiNkeS7rmZTtM9e/Lfl78/NqVT0zOzzx6Z/vDkRP4dga1RTcsnXQMLnoeOJHPFEfP8aPGsuNy+r3hu/GX5WGF8emqih3ED+ThvN/4zf/T1unXAivN9LVi/msd/2qN2AKvvdj//3Q/AvWe583/zBLj7uf+H9avd+D/XlDf3h3tTy/h/d0tvGgKsOvN/WL9ax39yvfHPAzU52L/ibQJWh89/WJdu51v8Zdn2ZaqxzD8L0DFRWeTb+xJrJRHpilUxtyYC7HniP8vevbKE0d0p0btrEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDf9GwAA//+Ju+22") r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x560e, &(0x7f0000000000)) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000340)={0x4, 0x1, 0x9, 0x3}) mknod$loop(&(0x7f00000009c0)='./file1\x00', 0x2000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000004c0)={'TPROXY\x00'}, &(0x7f0000000500)=0x1e) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000100)={0x1}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010427bd700079dbdf2503000000180001801400020073797a5f74756e000000000000000000050005000c0000000071507d450c1db8cb14b32b6cf4d6b4412cd68527365e4fa3e4c9a08a4a1e202fae882f6b1b100a8c410accb840a2d84f21444fc5a2feef9cf3b464f1a13aab0743c9fc5349ecd1abdb9aaf07ca7770aaa147d690194cc60a9eef95524fe08d529804f05ecc67616289a0128878a4", @ANYRES8=r4, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4044880) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240606000308000000f9a153519a08039e0c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003070005490c240206"], 0x0) 11.045572102s ago: executing program 4 (id=1437): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa003, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)=0x13) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xca, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SIGNAL_MSI(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000000)={0xdddd0000, 0x2, 0x7, 0x0, 0x3ff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x151) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.744940932s ago: executing program 4 (id=1439): getpid() syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 10.274203377s ago: executing program 5 (id=1441): socket$inet6(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, 0x0, 0x800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001340)='./bus\x00', 0x4400, &(0x7f0000001040)={[{@utf8no}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@shortname_lower}, {@utf8no}, {@uni_xlate}, {@shortname_lower}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0x227, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) open(&(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20e80, 0x0) 10.090392933s ago: executing program 1 (id=1442): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) writev(0xffffffffffffffff, &(0x7f0000002b00), 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x13) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) shutdown(r1, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4b0040, 0x0) getgid() 9.987628116s ago: executing program 5 (id=1443): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x13) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) shutdown(r1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4b0040, 0x0) getgid() 9.671157016s ago: executing program 4 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x10000, 0x4) 9.669448556s ago: executing program 1 (id=1445): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x2, 0x3, 0x3a6}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000000)) io_uring_enter(r0, 0x567, 0xfffffffc, 0xb, 0x0, 0x18) 9.27349802s ago: executing program 1 (id=1446): getpid() syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x1, &(0x7f0000000000)={0x0, 0x2001, 0x7ffffff8}, 0x0) 8.447982476s ago: executing program 7 (id=1447): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r3}, 0x8) 8.385459268s ago: executing program 1 (id=1448): socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'rfdno'}, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x18ac028, 0x0, 0x3e, 0x0, 0x0) r7 = syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) process_vm_writev(r7, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88}], 0x5, 0x0) 8.221528073s ago: executing program 7 (id=1449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) 7.873628454s ago: executing program 5 (id=1450): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.996065628s ago: executing program 1 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000040)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D\xde\x1e-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\x98\xf2\x1e\xe4\'U\xb3\xf8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\r\x00\x00\x00\x86N\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xff\x01\x00\x00\x00\x00\x00\x00\x96t\\\x0f\x12C\xf0\xe5C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\x8e\xa8\x10\x94JmDv\xcc^\xf1\xc4g\xd6,\x1e\xa0\xcc\xbf\xfd\x97\v\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1\tf>>\xb5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x97\xc0\xf6\x0e\x00\x00\x00\x00\x00\x00\x00\xf9\xdcaA\x95\x9fUjHo\x93\xa0jh:\xe3\xa9\xd0:&\f\xb2VK=c&!92\xb8@A\x9eb\xab\xbd\xf8#,\x8e\x86T_\xc4\x88\x9b\x11vC\x14\x99j\x01R \xeb\xaaa\xaab\xe4B\x88jST\xfbt \x85\x13\xc73', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x100000000000000) 4.183223634s ago: executing program 7 (id=1452): getpid() syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 3.982176991s ago: executing program 5 (id=1453): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb89, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x200, 0x0, 0x2, 0x9, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0xfffffffd, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xbffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x7ff, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {0x1ff, 0x1ff, 0xffff, 0x6}, 0x51, [0x3, 0x6, 0xffffffff, 0x0, 0x8235, 0x9, 0x4, 0x7522f07c, 0x3, 0x8001, 0x8, 0xffffffff, 0x6650000, 0x216, 0x8, 0x66, 0x5, 0x10001, 0xa, 0xfffffff8, 0x260000, 0x5, 0x6, 0x2, 0x290, 0x6, 0x3ff, 0x80000000, 0x3, 0x10001, 0x4, 0xb334, 0x74, 0x3, 0xfffffc00, 0x2c, 0x90, 0xd2, 0x8, 0xfffffff8, 0x8, 0xd41, 0xff, 0x6, 0x3, 0x7730, 0x4, 0x0, 0x7fff, 0x20003, 0x1, 0x1ff, 0x4, 0x10, 0x7fff, 0x0, 0x7fff, 0x0, 0xa, 0xa4b, 0x8, 0x8e2d, 0x4, 0x9], [0x0, 0x0, 0x1, 0x1000, 0xfffffff7, 0x7d24, 0x8, 0xfc0, 0x6, 0x3, 0x4, 0xffffffff, 0x12, 0x400000, 0x4, 0x6, 0x7, 0x2, 0x401, 0x4, 0x4, 0x8, 0x5, 0xfffffffb, 0xd, 0x3, 0x101, 0x10001, 0x1ff, 0x6, 0x80000000, 0x8, 0x9, 0x3, 0x4, 0x3, 0x2, 0x4, 0x4, 0x0, 0xf, 0x2000000, 0xffff, 0x7c08, 0x6, 0x0, 0xfffffffa, 0x1f, 0x2, 0x3, 0x5, 0x6f3ea3cf, 0x5, 0x1, 0xe91, 0x5, 0x3, 0x6, 0x1000, 0xe, 0x0, 0x10000, 0x8, 0x5], [0x6, 0x5, 0x7, 0x9, 0x400000f, 0x8000, 0x7, 0xdfc, 0x8, 0xfffffffe, 0x2, 0x7, 0x6, 0x2, 0x7a, 0x5, 0xdc98, 0x5, 0x8001, 0x6, 0x2, 0x6, 0x0, 0x28, 0xfff, 0x3, 0x1, 0x1000, 0x3d, 0x7, 0x1, 0x1000, 0x2, 0x4, 0x500, 0x7, 0x4, 0x2, 0x7ff, 0xa, 0x7, 0x3ff, 0x8, 0x4, 0x5, 0x3, 0x2, 0xd6, 0x8, 0x6, 0x10001, 0x4, 0xbc9, 0x1000, 0x2, 0x40, 0x0, 0x7fffffff, 0x9, 0x3ff, 0x0, 0x2, 0x8, 0x5], [0x3, 0xf, 0x2, 0xfff, 0x2, 0x3ff, 0x2, 0x2, 0x1000, 0x9, 0x3, 0x3, 0x0, 0x1, 0x5, 0x0, 0x2, 0x240, 0x5, 0x8, 0x6, 0xa, 0xfffffffd, 0xa9, 0xda, 0x9, 0xfffffa84, 0x1fe, 0x1, 0x9, 0x7, 0x8, 0x5, 0xfffffff8, 0x4, 0xef25, 0x697, 0x9, 0x33, 0x5, 0x6e3d7acf, 0x8, 0x4, 0x80, 0xd, 0x5, 0x9, 0x4, 0x4, 0x8, 0x7, 0x70, 0x4, 0x3, 0xffffff54, 0x101, 0x3, 0x0, 0xc, 0x0, 0x3, 0xcf, 0x0, 0x2]}, 0x45c) read(r0, 0x0, 0x0) 2.533051498s ago: executing program 7 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() userfaultfd(0x80801) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000005c0), 0x0, 0xffffffffffffffff) keyctl$read(0xb, r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) write$UHID_INPUT(r5, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 1.005067878s ago: executing program 4 (id=1455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x10000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x2f) 806.895954ms ago: executing program 7 (id=1456): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000001640)={{r3}, "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"}) 262.262482ms ago: executing program 1 (id=1457): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x1, 0x0, 0x2, 0x80000001}) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x110, 0x40, 0x4, 0xc4}, {0x9, 0x5, 0xa, 0x2, 0x3ff, 0x6, 0xbf, 0x2}, {0x9, 0x5, 0xd, 0x3, 0x20, 0x40, 0x4, 0x2}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f00)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffff4391c6b9812bff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff020000000900080000bc00000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000090276215a017ee3520"]) 110.001367ms ago: executing program 5 (id=1458): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r5 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x13) pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) shutdown(r1, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00ffffffffffffff810000000c0000800800", @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4b0040, 0x0) getgid() 0s ago: executing program 7 (id=1459): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200), 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x0) kernel console output (not intermixed with test programs): r directory [ 193.617806][ T7160] udevd[7160]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 193.861971][ T7230] loop2: detected capacity change from 0 to 512 [ 193.990327][ T7230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.030172][ T7230] ext4 filesystem being mounted at /74/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.322875][ T7245] syz.4.318 uses obsolete (PF_INET,SOCK_PACKET) [ 194.530480][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.541168][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.058438][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.597023][ T7253] loop2: detected capacity change from 0 to 256 [ 195.647068][ T7253] exfat: Bad value for 'uid' [ 196.273192][ T7257] loop2: detected capacity change from 0 to 512 [ 196.309281][ T7257] EXT4-fs: Ignoring removed bh option [ 196.356919][ T7245] loop4: detected capacity change from 0 to 40427 [ 196.414984][ T7257] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 196.432364][ T7245] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 196.483295][ T7257] EXT4-fs (loop2): 1 truncate cleaned up [ 196.491195][ T7245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.510989][ T7257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.545422][ T7245] F2FS-fs (loop4): invalid crc value [ 196.605336][ T7245] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.765998][ T7257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.322: bg 0: block 465: padding at end of block bitmap is not set [ 196.840753][ T7257] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 196.856406][ T7257] EXT4-fs (loop2): This should not happen!! Data will be lost [ 196.856406][ T7257] [ 196.900010][ T7257] EXT4-fs (loop2): Total free blocks count 0 [ 196.916848][ T7245] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 196.917693][ T7257] EXT4-fs (loop2): Free/Dirty block details [ 196.936213][ T7245] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 196.956534][ T7257] EXT4-fs (loop2): free_blocks=0 [ 196.967442][ T7257] EXT4-fs (loop2): dirty_blocks=9 [ 196.979279][ T7257] EXT4-fs (loop2): Block reservation details [ 196.995873][ T7257] EXT4-fs (loop2): i_reserved_data_blocks=9 [ 197.028391][ T28] audit: type=1800 audit(1774731757.962:30): pid=7263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.322" name="file1" dev="loop2" ino=13 res=0 errno=0 [ 197.121333][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.642944][ T7285] loop1: detected capacity change from 0 to 512 [ 200.905916][ T7285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.949281][ T7285] ext4 filesystem being mounted at /99/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.556768][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.358047][ T7303] loop2: detected capacity change from 0 to 4096 [ 202.434078][ T7303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.661631][ T7306] loop4: detected capacity change from 0 to 512 [ 202.703625][ T7306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.734738][ T7306] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.745267][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.797317][ T7306] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #12: comm syz.4.332: Directory hole found for htree leaf block 0 [ 202.913207][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.927108][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 202.964328][ T8] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 202.987902][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.999534][ T8] usb 3-1: Product: syz [ 203.006484][ T8] usb 3-1: Manufacturer: syz [ 203.011141][ T8] usb 3-1: SerialNumber: syz [ 204.308826][ T5812] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 204.414686][ T5777] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 204.479414][ T5813] usb 3-1: USB disconnect, device number 6 [ 204.507636][ T5812] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 204.530689][ T5812] usb 5-1: config 1 interface 0 has no altsetting 0 [ 204.546682][ T5812] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 204.565804][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.584078][ T5812] usb 5-1: Product: п [ 204.588617][ T5812] usb 5-1: Manufacturer: 䭃앭㳱㗊鍘褻ፅ✘拍ﺨ牿ᚴ㩃夯骚┤镲❗濑똋픭ᝉ읣䰒ﲃܠ钬啶⒱騐ᑤ宛朘㦷寚仛꩑캲ꇶ쑡별﬑੦ᅍ躖뒴䶥咟蘥殿꬀㜤ְ㞭跱舂ᅤဒ∤䪾揔걸莌炆鍲䌗䂼ᖕ࿆冼牼涨笑埣 [ 204.654853][ T5777] usb 1-1: Using ep0 maxpacket: 16 [ 204.660178][ T5812] usb 5-1: SerialNumber: syz [ 204.667082][ T5777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.679360][ T5777] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.695463][ T7315] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.707195][ T5777] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 204.719701][ T5777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.738946][ T5777] usb 1-1: config 0 descriptor?? [ 204.968555][ T7315] loop4: detected capacity change from 0 to 2048 [ 205.047176][ T5812] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 1 proto 1 vid 0x04B8 pid 0x0202 [ 205.083409][ T5812] usb 5-1: USB disconnect, device number 4 [ 205.131121][ T5812] usblp0: removed [ 205.135296][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.172770][ T5777] belkin 0003:1020:0006.0005: unknown main item tag 0x3 [ 205.184072][ T5777] belkin 0003:1020:0006.0005: invalid report_count 37697 [ 205.197055][ T5777] belkin 0003:1020:0006.0005: item 0 2 1 9 parsing failed [ 205.211408][ T5777] belkin 0003:1020:0006.0005: parse failed [ 205.221448][ T5777] belkin: probe of 0003:1020:0006.0005 failed with error -22 [ 205.323432][ T7319] loop2: detected capacity change from 0 to 512 [ 205.381885][ T7319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.422108][ T5813] usb 1-1: USB disconnect, device number 7 [ 205.447630][ T7319] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.088798][ T7335] syzkaller0: entered promiscuous mode [ 206.097607][ T7335] syzkaller0: entered allmulticast mode [ 206.220980][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'. [ 206.248863][ T7336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.259772][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.395418][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.453147][ T7336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.622793][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.642674][ T5812] usb 1-1: config 250 has an invalid interface number: 28 but max is 1 [ 206.671644][ T5812] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 206.704493][ T5812] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 206.713730][ T5812] usb 1-1: config 250 has no interface number 0 [ 206.728627][ T5812] usb 1-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 206.774010][ T5812] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 206.793630][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.809543][ T5812] usb 1-1: Product: syz [ 206.814725][ T5812] usb 1-1: Manufacturer: syz [ 206.819435][ T5812] usb 1-1: SerialNumber: syz [ 207.190470][ T5812] usb 1-1: USB disconnect, device number 8 [ 208.761463][ T7363] loop0: detected capacity change from 0 to 512 [ 208.856736][ T7363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.929167][ T7363] ext4 filesystem being mounted at /78/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.700423][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.022806][ T7380] syzkaller0: entered promiscuous mode [ 210.052802][ T7380] syzkaller0: entered allmulticast mode [ 210.444962][ T5157] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.675104][ T5157] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.701627][ T5157] usb 3-1: config 250 has an invalid interface number: 28 but max is 1 [ 210.714574][ T5157] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 210.744575][ T5157] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 210.770981][ T5157] usb 3-1: config 250 has no interface number 0 [ 210.794623][ T5157] usb 3-1: config 250 interface 28 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 210.839696][ T5157] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 210.861883][ T5157] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.882583][ T5157] usb 3-1: Product: syz [ 210.900444][ T5157] usb 3-1: Manufacturer: syz [ 210.910814][ T5157] usb 3-1: SerialNumber: syz [ 211.286938][ T5157] usb 3-1: USB disconnect, device number 7 [ 211.720688][ T7385] loop0: detected capacity change from 0 to 256 [ 211.761747][ T7385] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 212.506169][ T7406] loop4: detected capacity change from 0 to 512 [ 212.569883][ T7406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.614777][ T7406] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.698656][ T7411] loop0: detected capacity change from 0 to 256 [ 212.760969][ T7411] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.812378][ T7411] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 212.927709][ T7411] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 213.473082][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.678389][ T7421] 9pnet_fd: Insufficient options for proto=fd [ 213.763717][ T7425] loop4: detected capacity change from 0 to 512 [ 213.875086][ T7429] loop0: detected capacity change from 0 to 512 [ 213.924826][ T7429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.046235][ T7429] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.376: bg 0: block 5: invalid block bitmap [ 214.071755][ T7425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.130782][ T7425] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.164584][ T7436] overlayfs: failed to clone upperpath [ 214.264177][ T7435] loop2: detected capacity change from 0 to 512 [ 214.378493][ T7429] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 214.617641][ T7435] EXT4-fs (loop2): Invalid log block size: 143 [ 214.737762][ T7429] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.376: invalid indirect mapped block 3 (level 2) [ 214.826889][ T7429] EXT4-fs (loop0): 2 truncates cleaned up [ 214.879117][ T7429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.457552][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.473437][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.090562][ T5157] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 216.159578][ T7451] loop4: detected capacity change from 0 to 512 [ 216.197909][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.211855][ T7451] ext4 filesystem being mounted at /79/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.254636][ T5157] usb 3-1: device descriptor read/64, error -71 [ 216.601199][ T7457] 9pnet_fd: Insufficient options for proto=fd [ 216.607742][ T5157] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 216.774762][ T5157] usb 3-1: device descriptor read/64, error -71 [ 216.905048][ T5157] usb usb3-port1: attempt power cycle [ 216.933598][ T7461] loop0: detected capacity change from 0 to 256 [ 216.958372][ T7461] FAT-fs (loop0): Directory bread(block 64) failed [ 216.974734][ T7461] FAT-fs (loop0): Directory bread(block 65) failed [ 217.000150][ T7461] FAT-fs (loop0): Directory bread(block 66) failed [ 217.033588][ T7461] FAT-fs (loop0): Directory bread(block 67) failed [ 217.064762][ T7461] FAT-fs (loop0): Directory bread(block 68) failed [ 217.071375][ T7461] FAT-fs (loop0): Directory bread(block 69) failed [ 217.118690][ T7461] FAT-fs (loop0): Directory bread(block 70) failed [ 217.132605][ T7461] FAT-fs (loop0): Directory bread(block 71) failed [ 217.140149][ T7461] FAT-fs (loop0): Directory bread(block 72) failed [ 217.147197][ T7461] FAT-fs (loop0): Directory bread(block 73) failed [ 217.361475][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 217.424739][ T5157] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.507359][ T7467] overlayfs: failed to clone upperpath [ 217.519920][ T5157] usb 3-1: device descriptor read/8, error -71 [ 217.914913][ T5157] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.122684][ T5157] usb 3-1: device descriptor read/8, error -71 [ 218.254861][ T5157] usb usb3-port1: unable to enumerate USB device [ 218.401473][ T7472] loop0: detected capacity change from 0 to 128 [ 218.525308][ T7472] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 218.552646][ T7472] FAT-fs (loop0): Filesystem has been set read-only [ 218.781147][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.867141][ T7475] 9pnet_fd: Insufficient options for proto=fd [ 218.983201][ T7477] 9pnet_fd: Insufficient options for proto=fd [ 220.666043][ T7504] loop2: detected capacity change from 0 to 512 [ 220.755495][ T7504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.768522][ T7504] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.028826][ T7517] 9pnet_fd: Insufficient options for proto=fd [ 221.151859][ T7520] 9pnet_fd: Insufficient options for proto=fd [ 221.544648][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.694709][ T9] usb 5-1: device descriptor read/64, error -71 [ 221.994682][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 222.156657][ T9] usb 5-1: device descriptor read/64, error -71 [ 222.304953][ T9] usb usb5-port1: attempt power cycle [ 222.325819][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.309233][ T7546] 9pnet_fd: Insufficient options for proto=fd [ 224.445684][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 224.475432][ T9] usb 5-1: device descriptor read/8, error -71 [ 224.938259][ T7553] 9pnet_fd: Insufficient options for proto=fd [ 225.255030][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 225.311043][ T9] usb 5-1: device descriptor read/8, error -71 [ 225.438205][ T9] usb usb5-port1: unable to enumerate USB device [ 225.553018][ T7549] loop0: detected capacity change from 0 to 40427 [ 225.583722][ T7549] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 225.597512][ T7549] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 225.625850][ T7549] F2FS-fs (loop0): invalid crc value [ 225.646487][ T7549] F2FS-fs (loop0): Found nat_bits in checkpoint [ 225.855525][ T7549] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 225.884592][ T7549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 226.096596][ T3548] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 226.116401][ T3548] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 226.227321][ T7570] loop4: detected capacity change from 0 to 4096 [ 226.268430][ T7570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.694858][ T5157] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 226.877103][ T5157] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.888890][ T5157] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 226.908476][ T5157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.929463][ T5157] usb 5-1: Product: syz [ 226.933728][ T5157] usb 5-1: Manufacturer: syz [ 226.955505][ T5157] usb 5-1: SerialNumber: syz [ 227.249071][ T7582] 9pnet_fd: Insufficient options for proto=fd [ 228.339237][ T5157] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 228.384035][ T7589] loop0: detected capacity change from 0 to 1024 [ 228.398887][ T5157] usb 5-1: USB disconnect, device number 9 [ 228.451546][ T7589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.481383][ T7591] overlayfs: failed to clone upperpath [ 229.044297][ T7589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.558097][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.653924][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.501038][ T7609] loop2: detected capacity change from 0 to 512 [ 231.512817][ T7609] EXT4-fs: Ignoring removed orlov option [ 231.710996][ T7609] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 232.136284][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.257818][ T7611] 9pnet_fd: Insufficient options for proto=fd [ 232.800281][ T7620] 9pnet_fd: Insufficient options for proto=fd [ 233.734069][ T7631] loop0: detected capacity change from 0 to 1024 [ 233.763486][ T7631] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.876152][ T7631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.639604][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.784469][ T7640] loop2: detected capacity change from 0 to 4096 [ 234.945663][ T7640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.731768][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.644190][ T7659] loop4: detected capacity change from 0 to 512 [ 236.760271][ T7659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 236.935823][ T7659] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 236.995983][ T7659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 237.019157][ T7659] System zones: 1-12 [ 237.023443][ T7659] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.031618][ T7659] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.446: invalid indirect mapped block 2 (level 2) [ 237.077681][ T7659] EXT4-fs (loop4): Remounting filesystem read-only [ 237.084729][ T7659] EXT4-fs (loop4): 1 truncate cleaned up [ 237.091748][ T7659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 237.190444][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 237.307245][ T7671] 9pnet_fd: Insufficient options for proto=fd [ 237.418101][ T7674] loop4: detected capacity change from 0 to 1024 [ 237.427030][ T7674] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.440726][ T7674] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 237.449336][ T7674] EXT4-fs (loop4): orphan cleanup on readonly fs [ 237.458003][ T7674] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.450: Freeing blocks not in datazone - block = 0, count = 4096 [ 237.472627][ T7674] EXT4-fs (loop4): Remounting filesystem read-only [ 237.479481][ T7674] EXT4-fs (loop4): 1 orphan inode deleted [ 237.487514][ T7674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.175327][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.088861][ T7715] loop2: detected capacity change from 0 to 1024 [ 242.100106][ T7715] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 242.117992][ T7715] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 242.126626][ T7715] EXT4-fs (loop2): orphan cleanup on readonly fs [ 242.134137][ T7715] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.465: Freeing blocks not in datazone - block = 0, count = 4096 [ 242.147969][ T7715] EXT4-fs (loop2): Remounting filesystem read-only [ 242.154660][ T7715] EXT4-fs (loop2): 1 orphan inode deleted [ 242.161782][ T7715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.316177][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.838137][ T7738] 9pnet_fd: Insufficient options for proto=fd [ 246.301635][ T7752] loop0: detected capacity change from 0 to 1024 [ 246.310131][ T7752] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.339409][ T7752] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 246.347877][ T7752] EXT4-fs (loop0): orphan cleanup on readonly fs [ 246.356502][ T7752] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.475: Freeing blocks not in datazone - block = 0, count = 4096 [ 246.378865][ T7752] EXT4-fs (loop0): Remounting filesystem read-only [ 246.385704][ T7752] EXT4-fs (loop0): 1 orphan inode deleted [ 246.392778][ T7752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.685442][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.452997][ T7762] loop4: detected capacity change from 0 to 512 [ 247.485717][ T7762] EXT4-fs: Ignoring removed bh option [ 247.498596][ T7764] loop0: detected capacity change from 0 to 256 [ 247.528156][ T7762] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 247.587360][ T7762] EXT4-fs (loop4): 1 truncate cleaned up [ 247.602649][ T7764] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 247.630595][ T7762] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.787611][ T28] audit: type=1800 audit(1774731808.712:31): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 247.915473][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.345236][ T5811] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 248.559829][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.591511][ T5811] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.614873][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.659137][ T5811] usb 5-1: config 0 descriptor?? [ 249.115298][ T5811] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 249.164927][ T5811] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0006/input/input9 [ 249.966722][ T5811] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 249.995572][ T5811] usb 5-1: USB disconnect, device number 10 [ 250.103537][ T7793] 9pnet_fd: Insufficient options for proto=fd [ 250.220169][ T7792] fido_id[7792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 251.782061][ T7814] loop0: detected capacity change from 0 to 1024 [ 251.795138][ T7814] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.807712][ T7814] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 251.816518][ T7814] EXT4-fs (loop0): orphan cleanup on readonly fs [ 251.827376][ T7814] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.495: Freeing blocks not in datazone - block = 0, count = 4096 [ 251.841431][ T7814] EXT4-fs (loop0): Remounting filesystem read-only [ 251.848263][ T7814] EXT4-fs (loop0): 1 orphan inode deleted [ 251.855500][ T7814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.918965][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.325669][ T7837] overlayfs: failed to clone upperpath [ 256.958853][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.965859][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.212072][ T7846] 9pnet_fd: Insufficient options for proto=fd [ 257.682462][ T7855] loop4: detected capacity change from 0 to 512 [ 257.740731][ T5811] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 258.413518][ T7855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.904767][ T7855] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.039274][ T7855] ext4: Bad value for 'max_dir_size_kb' [ 259.087876][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.130943][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.143323][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 49, changing to 9 [ 259.154846][ T5811] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8447, setting to 1024 [ 259.166663][ T5811] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 259.176049][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.252299][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 260.250639][ T5811] usb 3-1: USB disconnect, device number 12 [ 261.676073][ T7888] loop4: detected capacity change from 0 to 1024 [ 261.688017][ T7888] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 261.702055][ T7888] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 261.710732][ T7888] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.718962][ T7888] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.517: Freeing blocks not in datazone - block = 0, count = 4096 [ 261.733022][ T7888] EXT4-fs (loop4): Remounting filesystem read-only [ 261.739906][ T7888] EXT4-fs (loop4): 1 orphan inode deleted [ 261.747230][ T7888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 261.816132][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.869115][ T7900] overlayfs: failed to clone upperpath [ 267.283053][ T7908] loop0: detected capacity change from 0 to 512 [ 267.316028][ T7908] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.768496][ T7916] loop4: detected capacity change from 0 to 1024 [ 267.780841][ T7916] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.802990][ T7916] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 267.811522][ T7916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.818630][ T7916] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.526: Freeing blocks not in datazone - block = 0, count = 4096 [ 267.832513][ T7916] EXT4-fs (loop4): Remounting filesystem read-only [ 267.839275][ T7916] EXT4-fs (loop4): 1 orphan inode deleted [ 267.846552][ T7916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.923627][ T28] audit: type=1800 audit(1774731828.852:32): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.522" name="file1" dev="loop0" ino=1048601 res=0 errno=0 [ 267.953435][ T7920] syzkaller0: entered promiscuous mode [ 267.959068][ T7920] syzkaller0: entered allmulticast mode [ 267.979436][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.234824][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 268.318473][ T7925] loop0: detected capacity change from 0 to 4096 [ 268.354187][ T7925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.428851][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 268.521189][ T9] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 268.676983][ T9] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 269.087922][ T9] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 269.592743][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.624751][ T9] usb 3-1: Product: syz [ 269.628994][ T9] usb 3-1: Manufacturer: syz [ 269.633625][ T9] usb 3-1: SerialNumber: syz [ 269.705061][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.932295][ T9] usb 3-1: USB disconnect, device number 13 [ 269.953807][ T5812] usb 1-1: unable to get BOS descriptor or descriptor too short [ 270.001341][ T5812] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 270.019846][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.028919][ T5812] usb 1-1: Product: syz [ 270.042550][ T5812] usb 1-1: Manufacturer: syz [ 270.047387][ T5812] usb 1-1: SerialNumber: syz [ 270.720283][ T7944] xt_hashlimit: size too large, truncated to 1048576 [ 270.842316][ T5812] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 270.927130][ T5812] usb 1-1: USB disconnect, device number 9 [ 271.076985][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.270265][ T7952] loop4: detected capacity change from 0 to 1024 [ 271.282611][ T7952] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.295777][ T7952] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 271.304144][ T7952] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.312070][ T7952] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.537: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.332606][ T7952] EXT4-fs (loop4): Remounting filesystem read-only [ 271.339362][ T7952] EXT4-fs (loop4): 1 orphan inode deleted [ 271.346642][ T7952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.400463][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.604245][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.728623][ T7981] vlan0: entered promiscuous mode [ 273.800109][ T7983] loop4: detected capacity change from 0 to 1024 [ 273.818057][ T7983] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.836395][ T7983] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 273.845532][ T7983] EXT4-fs (loop4): orphan cleanup on readonly fs [ 273.852543][ T7983] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.547: Freeing blocks not in datazone - block = 0, count = 4096 [ 273.866233][ T7983] EXT4-fs (loop4): Remounting filesystem read-only [ 273.872904][ T7983] EXT4-fs (loop4): 1 orphan inode deleted [ 273.880137][ T7983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.976131][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.004354][ T7986] loop0: detected capacity change from 0 to 256 [ 274.028092][ T7986] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 274.311421][ T7988] loop4: detected capacity change from 0 to 4096 [ 274.391638][ T7988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.744856][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 274.976365][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 275.010928][ T9] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 275.044624][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.052696][ T9] usb 5-1: Product: syz [ 275.074573][ T9] usb 5-1: Manufacturer: syz [ 275.079256][ T9] usb 5-1: SerialNumber: syz [ 275.736834][ T9] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 275.820133][ T9] usb 5-1: USB disconnect, device number 11 [ 276.467707][ T5766] udevd[5766]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.551391][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.564315][ T8008] bridge_slave_1: left allmulticast mode [ 276.592361][ T8008] bridge_slave_1: left promiscuous mode [ 276.629872][ T8008] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.677540][ T8008] bridge_slave_0: left allmulticast mode [ 276.683341][ T8008] bridge_slave_0: left promiscuous mode [ 276.690869][ T8008] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.156605][ T8035] loop2: detected capacity change from 0 to 1024 [ 279.283825][ T8035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.492069][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.510419][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.524184][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.546044][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.557499][ T8046] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 279.568957][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.588820][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.608440][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.622299][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.638376][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.665667][ T5773] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 279.838280][ T8053] loop0: detected capacity change from 0 to 1024 [ 279.891760][ T8053] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.955972][ T8053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.140133][ T7803] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.791579][ T8053] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 282.936862][ T8069] overlayfs: failed to clone upperpath [ 283.373901][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.383206][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.395161][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.404016][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.416492][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.424011][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.624820][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.646968][ T3548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.932860][ T3548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.087741][ T3548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.125161][ T5157] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 284.266657][ T3548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.345000][ T5157] usb 5-1: Using ep0 maxpacket: 16 [ 284.375852][ T5157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.402954][ T5157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.468419][ T5157] usb 5-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 284.519461][ T5157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.578575][ T5157] usb 5-1: config 0 descriptor?? [ 284.750843][ T8071] chnl_net:caif_netlink_parms(): no params data found [ 284.915465][ T3548] tipc: Left network mode [ 285.040624][ T5157] usbhid 5-1:0.0: can't add hid device: -71 [ 285.046995][ T5157] usbhid: probe of 5-1:0.0 failed with error -71 [ 285.056905][ T5157] usb 5-1: USB disconnect, device number 12 [ 285.184929][ T8071] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.192143][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.233280][ T8071] bridge_slave_0: entered allmulticast mode [ 285.266615][ T8071] bridge_slave_0: entered promiscuous mode [ 285.347424][ T8071] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.374988][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.382322][ T8071] bridge_slave_1: entered allmulticast mode [ 285.400408][ T8071] bridge_slave_1: entered promiscuous mode [ 285.487159][ T51] Bluetooth: hci1: command tx timeout [ 285.543852][ T8071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.676415][ T8071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.832131][ T8112] syzkaller0: entered promiscuous mode [ 285.843874][ T8112] syzkaller0: entered allmulticast mode [ 285.923711][ T8071] team0: Port device team_slave_0 added [ 285.943609][ T8071] team0: Port device team_slave_1 added [ 286.111733][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.119389][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.146985][ T5811] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 286.165494][ T8071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.181364][ T8071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.190571][ T8071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.217174][ T8071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.532203][ T8071] hsr_slave_0: entered promiscuous mode [ 286.549004][ T8071] hsr_slave_1: entered promiscuous mode [ 286.558102][ T8071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.568411][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 286.586558][ T5811] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 286.597171][ T5811] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 286.600586][ T8071] Cannot create hsr debugfs directory [ 286.612297][ T5811] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 286.621917][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.630029][ T5811] usb 5-1: Product: syz [ 286.634272][ T5811] usb 5-1: Manufacturer: syz [ 286.639890][ T5811] usb 5-1: SerialNumber: syz [ 287.283138][ T5811] usb 5-1: USB disconnect, device number 13 [ 287.565974][ T51] Bluetooth: hci1: command tx timeout [ 287.681456][ T3548] hsr_slave_0: left promiscuous mode [ 287.703354][ T3548] hsr_slave_1: left promiscuous mode [ 287.737747][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.755683][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.782183][ T3548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.794968][ T3548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.823480][ T3548] bridge_slave_1: left allmulticast mode [ 287.845837][ T3548] bridge_slave_1: left promiscuous mode [ 287.851754][ T3548] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.889214][ T3548] bridge_slave_0: left allmulticast mode [ 287.910416][ T3548] bridge_slave_0: left promiscuous mode [ 287.918890][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.022372][ T3548] veth0_to_bridge: left promiscuous mode [ 288.056398][ T3548] veth1_macvtap: left promiscuous mode [ 288.088234][ T3548] veth0_macvtap: left promiscuous mode [ 288.125200][ T3548] veth1_vlan: left promiscuous mode [ 288.130604][ T3548] veth0_vlan: left promiscuous mode [ 289.664697][ T51] Bluetooth: hci1: command tx timeout [ 291.752922][ T8153] overlayfs: failed to clone upperpath [ 291.841455][ T51] Bluetooth: hci1: command tx timeout [ 292.791093][ T8158] loop0: detected capacity change from 0 to 512 [ 292.832492][ T8158] EXT4-fs: Ignoring removed bh option [ 292.849817][ T8158] ext2: Unknown parameter 'nouser_xattr' [ 293.663214][ T3548] team0 (unregistering): Port device team_slave_1 removed [ 293.734928][ T3548] team0 (unregistering): Port device team_slave_0 removed [ 294.133659][ T3548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.553630][ T3548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.061963][ T966] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 297.136304][ T3548] bond0 (unregistering): Released all slaves [ 297.265956][ T966] usb 1-1: Using ep0 maxpacket: 16 [ 297.273385][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.284904][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 297.309856][ T966] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 297.409497][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.448228][ T966] usb 1-1: config 0 descriptor?? [ 298.059660][ T966] usbhid 1-1:0.0: can't add hid device: -71 [ 298.223020][ T966] usbhid: probe of 1-1:0.0 failed with error -71 [ 298.477000][ T966] usb 1-1: USB disconnect, device number 10 [ 298.533810][ T8071] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.622769][ T8071] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.765655][ T8071] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.836079][ T8071] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 299.776233][ T8202] overlayfs: failed to resolve './file1': -2 [ 301.526469][ T8206] 9pnet_fd: Insufficient options for proto=fd [ 301.780694][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.866329][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.889258][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.896508][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.979292][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.986565][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.022143][ T8212] loop0: detected capacity change from 0 to 256 [ 302.070281][ T8212] FAT-fs (loop0): bogus sectors per cluster 0 [ 302.092411][ T8212] FAT-fs (loop0): Can't find a valid FAT filesystem [ 304.985174][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.075813][ T8242] loop4: detected capacity change from 0 to 4096 [ 306.300156][ T8242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.842129][ T8262] 9pnet_fd: Insufficient options for proto=fd [ 307.594702][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 307.950331][ T8266] syz.1.617 (8266): attempted to duplicate a private mapping with mremap. This is not supported. [ 308.002290][ T8071] veth0_vlan: entered promiscuous mode [ 308.058549][ T8071] veth1_vlan: entered promiscuous mode [ 308.211221][ T8071] veth0_macvtap: entered promiscuous mode [ 308.257920][ T8071] veth1_macvtap: entered promiscuous mode [ 308.377576][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.430948][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.467904][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.495831][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.533823][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.542875][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.598664][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.609488][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.619411][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.722136][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.752986][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.794675][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.816526][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.866737][ T8071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.889619][ T8071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.912134][ T8071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.932681][ T8071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.303037][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.348090][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.393479][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.403412][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.507455][ T8287] overlayfs: failed to resolve './file1': -2 [ 311.971237][ T8296] loop5: detected capacity change from 0 to 512 [ 312.106108][ T8300] xt_hashlimit: size too large, truncated to 1048576 [ 312.180384][ T8296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.190014][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 312.220630][ T8303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.244821][ T8296] ext4 filesystem being mounted at /0/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.416743][ T8303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.747190][ T8320] 9pnet_fd: Insufficient options for proto=fd [ 313.822391][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.383619][ T8349] loop5: detected capacity change from 0 to 512 [ 316.477569][ T8349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.556884][ T8349] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.033164][ T8356] overlayfs: failed to resolve './file1': -2 [ 317.424187][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.430698][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.514705][ T28] audit: type=1800 audit(1774731878.442:33): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.629" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 318.998697][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.543116][ T8378] 9pnet_fd: Insufficient options for proto=fd [ 319.637638][ T8380] loop5: detected capacity change from 0 to 512 [ 320.088621][ T8380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.494825][ T8380] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.316333][ T8410] overlayfs: failed to resolve './file1': -2 [ 324.751973][ T8436] 9pnet_fd: Insufficient options for proto=fd [ 324.760317][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.754588][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.946975][ T9] usb 6-1: config 5 has an invalid interface number: 66 but max is 0 [ 325.964535][ T9] usb 6-1: config 5 has no interface number 0 [ 326.001970][ T9] usb 6-1: config 5 interface 66 has no altsetting 0 [ 326.034602][ T9] usb 6-1: New USB device found, idVendor=7d94, idProduct=77d3, bcdDevice=81.05 [ 326.815814][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.824269][ T9] usb 6-1: Product: syz [ 326.829494][ T9] usb 6-1: Manufacturer: syz [ 326.834170][ T9] usb 6-1: SerialNumber: syz [ 327.073796][ T9] usb-storage 6-1:5.66: USB Mass Storage device detected [ 327.220874][ T9] usb 6-1: USB disconnect, device number 2 [ 327.760153][ T8482] loop4: detected capacity change from 0 to 512 [ 327.943199][ T8482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.000957][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.013269][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.024914][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.032449][ T8482] ext4 filesystem being mounted at /144/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.044882][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.055079][ T5786] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.062534][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.840990][ T8489] chnl_net:caif_netlink_parms(): no params data found [ 329.222784][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.284747][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.292051][ T8489] bridge_slave_0: entered allmulticast mode [ 329.332993][ T8489] bridge_slave_0: entered promiscuous mode [ 329.367201][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.414646][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.422038][ T8489] bridge_slave_1: entered allmulticast mode [ 329.456009][ T8489] bridge_slave_1: entered promiscuous mode [ 329.757462][ T8489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.176077][ T5786] Bluetooth: hci4: command tx timeout [ 330.282599][ T8489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.596873][ T8489] team0: Port device team_slave_0 added [ 330.636906][ T8489] team0: Port device team_slave_1 added [ 330.705559][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.745495][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.801429][ T8489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.859443][ T8489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.878146][ T8489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.944833][ T8489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.946978][ T8533] 9pnet_fd: Insufficient options for proto=fd [ 331.068548][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.232374][ T8489] hsr_slave_0: entered promiscuous mode [ 331.250323][ T8489] hsr_slave_1: entered promiscuous mode [ 331.573593][ T8542] loop4: detected capacity change from 0 to 256 [ 331.592681][ T8542] exfat: Deprecated parameter 'namecase' [ 331.631175][ T8542] exfat: Deprecated parameter 'namecase' [ 331.698460][ T8542] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 332.080970][ T1094] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.214527][ T5786] Bluetooth: hci4: command tx timeout [ 332.303360][ T1094] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.461595][ T1094] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.591694][ T1094] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.910434][ T8489] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.122789][ T8489] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.318437][ T8489] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 333.359448][ T8489] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 333.659082][ T8564] loop4: detected capacity change from 0 to 256 [ 333.800566][ T8564] FAT-fs (loop4): Directory bread(block 64) failed [ 333.811119][ T8564] FAT-fs (loop4): Directory bread(block 65) failed [ 333.844274][ T8564] FAT-fs (loop4): Directory bread(block 66) failed [ 333.875068][ T8564] FAT-fs (loop4): Directory bread(block 67) failed [ 333.881772][ T8564] FAT-fs (loop4): Directory bread(block 68) failed [ 333.909050][ T8564] FAT-fs (loop4): Directory bread(block 69) failed [ 333.941151][ T8564] FAT-fs (loop4): Directory bread(block 70) failed [ 333.963466][ T8564] FAT-fs (loop4): Directory bread(block 71) failed [ 333.996712][ T8564] FAT-fs (loop4): Directory bread(block 72) failed [ 334.003326][ T8564] FAT-fs (loop4): Directory bread(block 73) failed [ 334.304665][ T5786] Bluetooth: hci4: command tx timeout [ 335.303263][ T8489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.539603][ T8489] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.555487][ T8584] loop4: detected capacity change from 0 to 512 [ 335.596476][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.603813][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.631496][ T8584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.666793][ T8584] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.701136][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.708426][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.890942][ T8489] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 335.920703][ T8489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.222338][ T8597] loop5: detected capacity change from 0 to 128 [ 336.264728][ T8597] EXT4-fs (loop5): Test dummy encryption mode enabled [ 336.298023][ T8597] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 336.354742][ T8597] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.365102][ T5786] Bluetooth: hci4: command tx timeout [ 336.842881][ T8597] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 337.125613][ T8071] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 337.219871][ T1094] hsr_slave_0: left promiscuous mode [ 337.240571][ T1094] hsr_slave_1: left promiscuous mode [ 337.310910][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.334760][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.376475][ T1094] bridge_slave_1: left allmulticast mode [ 337.382200][ T1094] bridge_slave_1: left promiscuous mode [ 337.418762][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.468932][ T1094] bridge_slave_0: left allmulticast mode [ 337.485714][ T1094] bridge_slave_0: left promiscuous mode [ 337.491562][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.534179][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.705405][ T1094] veth1_macvtap: left promiscuous mode [ 337.711119][ T1094] veth0_macvtap: left promiscuous mode [ 337.733970][ T8620] 9pnet_fd: Insufficient options for proto=fd [ 337.746947][ T1094] veth1_vlan: left promiscuous mode [ 339.326885][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 339.330531][ T8642] loop5: detected capacity change from 0 to 256 [ 339.376496][ T8642] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.482111][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 339.604100][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.723175][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.286609][ T28] audit: type=1800 audit(1774731901.222:34): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.679" name="file1" dev="loop5" ino=1048626 res=0 errno=0 [ 340.461694][ T1094] bond0 (unregistering): Released all slaves [ 340.731096][ T8489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.307390][ T8666] loop5: detected capacity change from 0 to 128 [ 341.360194][ T8666] EXT4-fs: inline encryption not supported [ 341.416892][ T8666] EXT4-fs (loop5): Test dummy encryption mode enabled [ 341.475992][ T8666] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.538681][ T8666] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.790654][ T8489] veth0_vlan: entered promiscuous mode [ 341.843368][ T8489] veth1_vlan: entered promiscuous mode [ 341.916048][ T8683] syzkaller0: entered promiscuous mode [ 341.924343][ T8683] syzkaller0: entered allmulticast mode [ 341.961603][ T8489] veth0_macvtap: entered promiscuous mode [ 341.994870][ T5811] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.040513][ T8489] veth1_macvtap: entered promiscuous mode [ 342.084867][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.116276][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.134529][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.168048][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.189484][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.207320][ T5811] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 342.224600][ T5811] usb 6-1: config 1 has no interface number 0 [ 342.231335][ T5811] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 272 [ 342.265678][ T5811] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 342.284563][ T5811] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xD has an invalid bInterval 64, changing to 10 [ 342.316908][ T5811] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 342.334543][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.346153][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.369313][ T5811] usb 6-1: Product: syz [ 342.373548][ T5811] usb 6-1: Manufacturer: syz [ 342.382942][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.403372][ T5811] usb 6-1: SerialNumber: syz [ 342.413496][ T8679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.421173][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.434689][ T8679] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 342.458238][ T5811] usb 6-1: Error in usbnet_get_endpoints (-22) [ 342.481216][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.504759][ T8489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.538944][ T8489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.573085][ T8489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.598893][ T8489] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.627909][ T8489] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.649239][ T8489] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.675585][ T8489] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.880790][ T8702] 9pnet_fd: Insufficient options for proto=fd [ 343.252849][ T28] audit: type=1800 audit(1774731904.172:35): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.681" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 343.656562][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.664458][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.669269][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.760197][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.931018][ T786] usb 6-1: USB disconnect, device number 3 [ 344.992354][ T28] audit: type=1326 audit(1774731905.912:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8718 comm="syz.6.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb28bb9c819 code=0x0 [ 345.023051][ T8071] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.878755][ T8732] netlink: 76 bytes leftover after parsing attributes in process `syz.5.690'. [ 346.313036][ T8740] loop4: detected capacity change from 0 to 256 [ 346.367756][ T8740] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 346.696099][ T8752] overlayfs: failed to resolve './file1': -2 [ 348.657886][ T8758] 9pnet_fd: Insufficient options for proto=fd [ 351.835841][ T8779] loop5: detected capacity change from 0 to 512 [ 352.184084][ T8779] EXT4-fs (loop5): Test dummy encryption mode enabled [ 352.402558][ T8779] EXT4-fs warning (device loop5): ext4_xattr_inode_get:546: inode #11: comm syz.5.700: ea_inode file size=4 entry size=6 [ 352.403702][ T8779] EXT4-fs error (device loop5): ext4_do_update_inode:5248: inode #15: comm syz.5.700: corrupted inode contents [ 352.452897][ T8779] EXT4-fs (loop5): Remounting filesystem read-only [ 352.452930][ T8779] EXT4-fs warning (device loop5): ext4_evict_inode:272: xattr delete (err -5) [ 352.453080][ T8779] EXT4-fs (loop5): 1 orphan inode deleted [ 352.454431][ T8779] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.540551][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.033464][ T8803] loop4: detected capacity change from 0 to 512 [ 353.213285][ T8803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.327357][ T8803] EXT4-fs warning (device loop4): verify_group_input:151: Cannot add at group 49 (only 1 groups) [ 353.390134][ T8812] overlayfs: failed to resolve './file1': -2 [ 353.920054][ T8807] loop6: detected capacity change from 0 to 4096 [ 353.969441][ T8807] EXT4-fs: inline encryption not supported [ 354.067619][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.085985][ T8807] EXT4-fs (loop6): Test dummy encryption mode enabled [ 354.190492][ T8807] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 354.262279][ T8807] System zones: 0-5 [ 354.292119][ T8807] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.769360][ T8489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.610874][ T5813] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 356.764636][ T5157] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 356.841463][ T5813] usb 5-1: unable to get BOS descriptor or descriptor too short [ 356.872107][ T5813] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 356.900139][ T5813] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 356.927518][ T5813] usb 5-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 356.948782][ T5813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.974337][ T5813] usb 5-1: Product: syz [ 356.992880][ T5813] usb 5-1: Manufacturer: syz [ 357.005775][ T5157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.018299][ T5813] usb 5-1: SerialNumber: syz [ 357.031754][ T5157] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 357.056094][ T5157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.072910][ T5157] usb 6-1: config 0 descriptor?? [ 357.101527][ T5157] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 357.265173][ T5813] usb 5-1: USB disconnect, device number 15 [ 357.605561][ T8863] loop6: detected capacity change from 0 to 512 [ 357.642848][ T8863] EXT4-fs (loop6): Test dummy encryption mode enabled [ 357.678864][ T8863] EXT4-fs error (device loop6): ext4_orphan_get:1398: inode #15: comm syz.6.716: inode has both inline data and extents flags [ 357.719885][ T8863] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.716: couldn't read orphan inode 15 (err -117) [ 357.735289][ T8863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.047720][ T8489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.508551][ T5813] usb 6-1: USB disconnect, device number 4 [ 359.894596][ T8885] overlayfs: failed to resolve './file1': -2 [ 366.138024][ T8917] loop4: detected capacity change from 0 to 512 [ 366.336323][ T8917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.367671][ T5157] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 366.390039][ T8917] ext4 filesystem being mounted at /168/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.440973][ T8926] overlayfs: failed to clone upperpath [ 366.703440][ T5157] usb 7-1: unable to get BOS descriptor or descriptor too short [ 366.893603][ T5157] usb 7-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 367.106929][ T5157] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 2 [ 367.162125][ T5157] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 367.216588][ T5157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.261012][ T5157] usb 7-1: Product: syz [ 367.289170][ T5157] usb 7-1: Manufacturer: syz [ 367.319899][ T5157] usb 7-1: SerialNumber: syz [ 367.602693][ T5157] usb 7-1: USB disconnect, device number 2 [ 370.302183][ T5954] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.823857][ T8973] loop5: detected capacity change from 0 to 256 [ 371.875727][ T8973] FAT-fs (loop5): Directory bread(block 64) failed [ 371.897965][ T8973] FAT-fs (loop5): Directory bread(block 65) failed [ 371.934202][ T8973] FAT-fs (loop5): Directory bread(block 66) failed [ 371.954405][ T8973] FAT-fs (loop5): Directory bread(block 67) failed [ 371.973848][ T8973] FAT-fs (loop5): Directory bread(block 68) failed [ 372.005232][ T8973] FAT-fs (loop5): Directory bread(block 69) failed [ 372.011935][ T8973] FAT-fs (loop5): Directory bread(block 70) failed [ 372.074798][ T8973] FAT-fs (loop5): Directory bread(block 71) failed [ 372.120254][ T8973] FAT-fs (loop5): Directory bread(block 72) failed [ 372.132469][ T8947] loop6: detected capacity change from 0 to 40427 [ 372.143845][ T8973] FAT-fs (loop5): Directory bread(block 73) failed [ 374.023028][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 374.500333][ T8963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.641435][ T8995] tipc: Failed to remove unknown binding: 66,0,0/0:3328105192/3328105194 [ 374.724164][ T8995] tipc: Failed to remove unknown binding: 66,0,0/0:3328105192/3328105193 [ 374.774335][ T8995] tipc: Failed to remove unknown binding: 66,0,0/0:3328105192/3328105194 [ 376.526539][ T8963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.572915][ T9002] loop6: detected capacity change from 0 to 512 [ 376.631019][ T9002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.702245][ T9002] ext4 filesystem being mounted at /15/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.929700][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 378.852770][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.870935][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.269725][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 379.298447][ T8] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 379.324728][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.332803][ T8] usb 6-1: Product: syz [ 379.353967][ T8] usb 6-1: Manufacturer: syz [ 379.358985][ T8] usb 6-1: SerialNumber: syz [ 380.488715][ T8] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 380.559361][ T8] usb 6-1: USB disconnect, device number 5 [ 380.731905][ T8249] udevd[8249]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.096977][ T8489] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.090534][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'. [ 384.167780][ T9064] loop5: detected capacity change from 0 to 40427 [ 384.207076][ T9064] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 384.237378][ T9064] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 384.331847][ T9064] F2FS-fs (loop5): Found nat_bits in checkpoint [ 384.511469][ T9064] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 384.524676][ T9064] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 384.803508][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.810981][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.534959][ T9109] 9pnet_fd: Insufficient options for proto=fd [ 385.627301][ T5157] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 385.853700][ T5157] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 385.926539][ T5157] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 386.006266][ T5157] usb 7-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 386.038065][ T5157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.064427][ T5157] usb 7-1: Product: syz [ 386.081819][ T5157] usb 7-1: Manufacturer: syz [ 386.108817][ T5157] usb 7-1: SerialNumber: syz [ 386.800809][ T5157] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 387.161071][ T5157] usb 7-1: USB disconnect, device number 3 [ 387.203961][ T9118] loop5: detected capacity change from 0 to 512 [ 387.290131][ T9118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.319830][ T9118] ext4 filesystem being mounted at /38/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.761745][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.843139][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.771770][ T9080] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.780972][ T9080] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.790148][ T9080] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.799189][ T9080] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.205915][ T9162] 9pnet_fd: Insufficient options for proto=fd [ 397.466348][ T9193] overlayfs: failed to resolve './file0': -2 [ 403.870252][ T9229] 9pnet_fd: Insufficient options for proto=fd [ 405.455039][ T9235] binder: 9234:9235 ioctl c0306201 2000000005c0 returned -14 [ 406.906937][ T9258] loop5: detected capacity change from 0 to 256 [ 407.027870][ T9258] FAT-fs (loop5): Directory bread(block 64) failed [ 407.074645][ T9258] FAT-fs (loop5): Directory bread(block 65) failed [ 407.081361][ T9258] FAT-fs (loop5): Directory bread(block 66) failed [ 407.088965][ T9232] Bluetooth: hci1: command 0x0406 tx timeout [ 407.151147][ T9258] FAT-fs (loop5): Directory bread(block 67) failed [ 407.485231][ T9258] FAT-fs (loop5): Directory bread(block 68) failed [ 407.714560][ T9258] FAT-fs (loop5): Directory bread(block 69) failed [ 407.766862][ T9258] FAT-fs (loop5): Directory bread(block 70) failed [ 407.817366][ T9258] FAT-fs (loop5): Directory bread(block 71) failed [ 407.854871][ T9258] FAT-fs (loop5): Directory bread(block 72) failed [ 407.861469][ T9258] FAT-fs (loop5): Directory bread(block 73) failed [ 407.929108][ T9264] overlayfs: failed to resolve './file0': -2 [ 408.293045][ T9258] xt_hashlimit: size too large, truncated to 1048576 [ 411.656865][ T9294] binder: 9289:9294 ioctl c0306201 0 returned -14 [ 412.368190][ T9232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 412.379131][ T9232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 412.388295][ T9232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 412.404766][ T9232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 412.424759][ T9232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 412.436183][ T9232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.138865][ T9305] chnl_net:caif_netlink_parms(): no params data found [ 414.526115][ T9232] Bluetooth: hci3: command tx timeout [ 414.647425][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.712979][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.733534][ T9305] bridge_slave_0: entered allmulticast mode [ 414.784868][ T9305] bridge_slave_0: entered promiscuous mode [ 414.817116][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.834889][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.869517][ T9305] bridge_slave_1: entered allmulticast mode [ 414.920172][ T9305] bridge_slave_1: entered promiscuous mode [ 416.418235][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.525970][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.604871][ T9232] Bluetooth: hci3: command tx timeout [ 416.761364][ T9305] team0: Port device team_slave_0 added [ 416.849223][ T9305] team0: Port device team_slave_1 added [ 416.939574][ T9336] loop5: detected capacity change from 0 to 1024 [ 417.011249][ T9336] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 417.148318][ T9336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.321253][ T9336] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 417.547324][ T3560] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.581042][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.698125][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.733280][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.800275][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.861237][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.889236][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.928269][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.015086][ T3560] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.223799][ T3560] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.284746][ T9232] Bluetooth: hci3: command tx timeout [ 419.390990][ T9305] hsr_slave_0: entered promiscuous mode [ 419.433971][ T9305] hsr_slave_1: entered promiscuous mode [ 419.442368][ T9305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.451177][ T9305] Cannot create hsr debugfs directory [ 419.491733][ T3560] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.871151][ T9364] loop5: detected capacity change from 0 to 8192 [ 419.963774][ T9364] loop5: p1 < > p2 < > p3 p4 < > [ 419.971061][ T9364] loop5: partition table partially beyond EOD, truncated [ 420.012046][ T9364] loop5: p1 start 67108864 is beyond EOD, truncated [ 420.060709][ T9364] loop5: p3 start 100859904 is beyond EOD, truncated [ 420.718495][ T9376] udevd[9376]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 420.730946][ T9305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 420.749777][ T9233] udevd[9233]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 420.784405][ T9305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 420.894628][ T9305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 420.920895][ T9305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.325174][ T9232] Bluetooth: hci3: command tx timeout [ 421.458014][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.621894][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.729924][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.737313][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.790236][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.797506][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.849765][ T9382] loop5: detected capacity change from 0 to 40427 [ 421.924564][ T9382] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 421.932410][ T9382] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 422.008438][ T9382] F2FS-fs (loop5): invalid crc value [ 422.042487][ T9382] F2FS-fs (loop5): Found nat_bits in checkpoint [ 422.270140][ T9382] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 422.284559][ T9382] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 425.095776][ T9417] overlayfs: failed to resolve './file0': -2 [ 425.524687][ T3560] hsr_slave_0: left promiscuous mode [ 425.561443][ T3560] hsr_slave_1: left promiscuous mode [ 425.639204][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.659728][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.697203][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.725517][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.767830][ T3560] bridge_slave_1: left allmulticast mode [ 425.783900][ T3560] bridge_slave_1: left promiscuous mode [ 425.814233][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.863067][ T3560] bridge_slave_0: left allmulticast mode [ 425.884891][ T3560] bridge_slave_0: left promiscuous mode [ 425.909357][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.067583][ T3560] veth1_macvtap: left promiscuous mode [ 426.087604][ T3560] veth0_macvtap: left promiscuous mode [ 426.093343][ T3560] veth1_vlan: left promiscuous mode [ 426.149671][ T3560] veth0_vlan: left promiscuous mode [ 429.462674][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 429.560471][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 429.632660][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.743542][ T9463] overlayfs: failed to resolve './file0': -2 [ 430.316780][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.998306][ T3560] bond0 (unregistering): Released all slaves [ 431.890824][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.134656][ T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 433.242483][ T9305] veth0_vlan: entered promiscuous mode [ 433.313960][ T9305] veth1_vlan: entered promiscuous mode [ 433.351339][ T8] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.392557][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.459256][ T8] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 433.502144][ T9305] veth0_macvtap: entered promiscuous mode [ 433.508635][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.549971][ T8] usb 6-1: Product: syz [ 433.554216][ T8] usb 6-1: Manufacturer: syz [ 433.582510][ T9305] veth1_macvtap: entered promiscuous mode [ 433.606118][ T8] usb 6-1: SerialNumber: syz [ 433.698605][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.758691][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.816614][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.892539][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.938584][ T9496] loop5: detected capacity change from 0 to 128 [ 433.974474][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.052717][ T9305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.102980][ T9496] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 434.151512][ T9305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.182944][ T9496] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.226866][ T9305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.304163][ T9305] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.344564][ T9305] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.358121][ T9305] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.401274][ T9305] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.501803][ T8] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 434.567297][ T8] usb 6-1: USB disconnect, device number 6 [ 434.757612][ T3548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.808202][ T3548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.817263][ T9497] overlayfs: failed to resolve './file0': -2 [ 434.879152][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.892540][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.161427][ T8071] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.416651][ T9524] 9pnet_fd: Insufficient options for proto=fd [ 438.331471][ T9535] loop5: detected capacity change from 0 to 512 [ 438.958995][ T9539] loop7: detected capacity change from 0 to 256 [ 440.294398][ T9535] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 440.298554][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.324721][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.331742][ T9535] EXT4-fs: failed to create workqueue [ 440.344581][ T9535] EXT4-fs (loop5): mount failed [ 440.931988][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 444.421206][ T9572] bridge1: entered promiscuous mode [ 444.484832][ T9572] bridge1: entered allmulticast mode [ 445.595742][ T9581] 9pnet_fd: Insufficient options for proto=fd [ 446.292442][ T9584] loop7: detected capacity change from 0 to 256 [ 446.413060][ T9584] FAT-fs (loop7): Directory bread(block 64) failed [ 446.430410][ T9584] FAT-fs (loop7): Directory bread(block 65) failed [ 446.446167][ T9584] FAT-fs (loop7): Directory bread(block 66) failed [ 446.463949][ T9584] FAT-fs (loop7): Directory bread(block 67) failed [ 446.476143][ T9593] overlayfs: failed to clone upperpath [ 446.479965][ T9584] FAT-fs (loop7): Directory bread(block 68) failed [ 446.519143][ T9584] FAT-fs (loop7): Directory bread(block 69) failed [ 446.530068][ T9584] FAT-fs (loop7): Directory bread(block 70) failed [ 446.552283][ T9584] FAT-fs (loop7): Directory bread(block 71) failed [ 446.574677][ T9584] FAT-fs (loop7): Directory bread(block 72) failed [ 446.589225][ T9584] FAT-fs (loop7): Directory bread(block 73) failed [ 449.905203][ T9630] 9pnet_fd: Insufficient options for proto=fd [ 450.528896][ T9615] loop7: detected capacity change from 0 to 40427 [ 450.593154][ T9615] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 450.648671][ T9615] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 450.659768][ T9615] F2FS-fs (loop7): invalid crc value [ 450.688600][ T9615] F2FS-fs (loop7): Found nat_bits in checkpoint [ 450.801797][ T9615] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 450.824606][ T9615] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 451.597070][ T5157] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 452.455937][ T5157] usb 6-1: Using ep0 maxpacket: 32 [ 452.475855][ T5157] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 452.484038][ T5157] usb 6-1: config 0 has no interface number 0 [ 452.508441][ T5157] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 452.542177][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.565721][ T9669] loop7: detected capacity change from 0 to 256 [ 452.579634][ T5157] usb 6-1: Product: syz [ 452.583879][ T5157] usb 6-1: Manufacturer: syz [ 452.603184][ T5157] usb 6-1: SerialNumber: syz [ 452.612923][ T5157] usb 6-1: config 0 descriptor?? [ 452.697388][ T5157] smsc95xx v2.0.0 [ 452.751644][ T9669] FAT-fs (loop7): Directory bread(block 64) failed [ 452.770552][ T9669] FAT-fs (loop7): Directory bread(block 65) failed [ 452.801964][ T9669] FAT-fs (loop7): Directory bread(block 66) failed [ 452.818282][ T9669] FAT-fs (loop7): Directory bread(block 67) failed [ 452.894977][ T9669] FAT-fs (loop7): Directory bread(block 68) failed [ 452.914618][ T9669] FAT-fs (loop7): Directory bread(block 69) failed [ 452.961149][ T9669] FAT-fs (loop7): Directory bread(block 70) failed [ 452.981252][ T9669] FAT-fs (loop7): Directory bread(block 71) failed [ 453.021343][ T9669] FAT-fs (loop7): Directory bread(block 72) failed [ 453.053456][ T9669] FAT-fs (loop7): Directory bread(block 73) failed [ 453.152645][ T5157] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 453.196151][ T5157] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 453.993101][ T5157] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 454.004915][ T5157] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 454.015776][ T5157] usb 6-1: USB disconnect, device number 7 [ 455.550442][ T9689] loop7: detected capacity change from 0 to 512 [ 455.587762][ T9689] EXT4-fs (loop7): Test dummy encryption mode enabled [ 455.618131][ T9689] EXT4-fs (loop7): Cannot use DAX on a filesystem that may contain inline data [ 456.430399][ T9713] loop7: detected capacity change from 0 to 16 [ 456.492591][ T9713] erofs: (device loop7): mounted with root inode @ nid 36. [ 456.931803][ T9707] 9pnet_fd: Insufficient options for proto=fd [ 456.942519][ T9232] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 456.957777][ T9713] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 456.969213][ T28] audit: type=1800 audit(1774732017.902:37): pid=9713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.872" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 457.001553][ T9713] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 457.019125][ T9713] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 457.037893][ T9713] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 457.188942][ T9716] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 457.321729][ T9720] loop5: detected capacity change from 0 to 256 [ 457.354004][ T9716] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 457.408391][ T9720] FAT-fs (loop5): Directory bread(block 64) failed [ 457.415677][ T9716] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 457.439316][ T9720] FAT-fs (loop5): Directory bread(block 65) failed [ 457.469036][ T9720] FAT-fs (loop5): Directory bread(block 66) failed [ 457.505066][ T9720] FAT-fs (loop5): Directory bread(block 67) failed [ 457.511792][ T9720] FAT-fs (loop5): Directory bread(block 68) failed [ 457.583983][ T9720] FAT-fs (loop5): Directory bread(block 69) failed [ 457.623927][ T9720] FAT-fs (loop5): Directory bread(block 70) failed [ 457.719900][ T9720] FAT-fs (loop5): Directory bread(block 71) failed [ 457.860804][ T9720] FAT-fs (loop5): Directory bread(block 72) failed [ 458.008711][ T9720] FAT-fs (loop5): Directory bread(block 73) failed [ 463.047867][ T9763] 9pnet_fd: Insufficient options for proto=fd [ 464.784913][ T9783] block device autoloading is deprecated and will be removed. [ 464.830659][ T9789] block device autoloading is deprecated and will be removed. [ 465.419906][ T5786] Bluetooth: hci3: command tx timeout [ 465.964909][ T9801] loop7: detected capacity change from 0 to 256 [ 466.089925][ T9801] FAT-fs (loop7): Directory bread(block 64) failed [ 466.142656][ T9801] FAT-fs (loop7): Directory bread(block 65) failed [ 466.188947][ T9801] FAT-fs (loop7): Directory bread(block 66) failed [ 466.231983][ T9801] FAT-fs (loop7): Directory bread(block 67) failed [ 466.275150][ T9801] FAT-fs (loop7): Directory bread(block 68) failed [ 466.308403][ T9801] FAT-fs (loop7): Directory bread(block 69) failed [ 466.343823][ T9801] FAT-fs (loop7): Directory bread(block 70) failed [ 466.356067][ T9801] FAT-fs (loop7): Directory bread(block 71) failed [ 466.505397][ T9801] FAT-fs (loop7): Directory bread(block 72) failed [ 466.544556][ T9801] FAT-fs (loop7): Directory bread(block 73) failed [ 473.908557][ T9844] 9pnet_fd: Insufficient options for proto=fd [ 478.742416][ T9871] 9pnet_fd: Insufficient options for proto=fd [ 478.940608][ T9879] loop7: detected capacity change from 0 to 256 [ 484.379575][ T9922] loop7: detected capacity change from 0 to 256 [ 485.899606][ T9925] 9pnet_fd: Insufficient options for proto=fd [ 489.762210][ T9974] loop5: detected capacity change from 0 to 256 [ 489.965231][ T9974] FAT-fs (loop5): Directory bread(block 64) failed [ 489.971944][ T9974] FAT-fs (loop5): Directory bread(block 65) failed [ 490.009876][ T9981] 9pnet_fd: Insufficient options for proto=fd [ 490.030976][ T9974] FAT-fs (loop5): Directory bread(block 66) failed [ 490.054307][ T9974] FAT-fs (loop5): Directory bread(block 67) failed [ 490.070159][ T9974] FAT-fs (loop5): Directory bread(block 68) failed [ 490.085381][ T9974] FAT-fs (loop5): Directory bread(block 69) failed [ 490.110827][ T9974] FAT-fs (loop5): Directory bread(block 70) failed [ 490.140858][ T9974] FAT-fs (loop5): Directory bread(block 71) failed [ 490.151100][ T9974] FAT-fs (loop5): Directory bread(block 72) failed [ 490.171327][ T9974] FAT-fs (loop5): Directory bread(block 73) failed [ 491.468569][ T9994] tipc: MTU too low for tipc bearer [ 491.583162][ T9996] loop5: detected capacity change from 0 to 4096 [ 491.672766][ T9996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.009192][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.400732][T10058] 9pnet_fd: Insufficient options for proto=fd [ 499.743957][T10082] loop5: detected capacity change from 0 to 4096 [ 499.790740][T10082] EXT4-fs: inline encryption not supported [ 499.857332][T10082] EXT4-fs (loop5): Test dummy encryption mode enabled [ 499.998803][T10082] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 500.033257][T10082] System zones: 0-5 [ 500.072580][T10089] loop7: detected capacity change from 0 to 512 [ 500.081607][T10082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.100680][T10089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 500.488818][T10089] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 500.764779][T10089] System zones: 1-12 [ 500.800920][T10089] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #12: comm syz.7.953: missing EA_INODE flag [ 500.903656][T10089] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.953: error while reading EA inode 12 err=-117 [ 500.913760][ T28] audit: type=1800 audit(1774732061.792:38): pid=10082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.952" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 500.967044][T10089] EXT4-fs (loop7): 1 orphan inode deleted [ 500.974227][T10089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.395626][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.739331][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.766654][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.137678][T10108] 9pnet_fd: Insufficient options for proto=fd [ 503.525722][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.203664][T10154] 9pnet_fd: Insufficient options for proto=fd [ 510.045485][T10185] 9pnet_fd: Insufficient options for proto=fd [ 511.924991][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 512.139807][ T9] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.181098][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.222790][ T9] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.249282][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.260290][ T9] usb 8-1: SerialNumber: syz [ 512.507795][ T9] usb 8-1: 0:2 : does not exist [ 512.552903][ T9] usb 8-1: USB disconnect, device number 2 [ 512.643582][T10017] udevd[10017]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.265594][T10233] loop5: detected capacity change from 0 to 40427 [ 513.293753][T10233] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 513.304530][T10233] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 513.371853][T10233] F2FS-fs (loop5): Found nat_bits in checkpoint [ 513.513821][T10233] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 513.544522][T10233] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 514.935436][T10270] loop7: detected capacity change from 0 to 512 [ 514.945522][T10270] EXT4-fs: Ignoring removed i_version option [ 514.956122][T10268] overlayfs: failed to clone upperpath [ 515.026621][T10270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.175040][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.659672][T10286] netlink: 'syz.7.1000': attribute type 4 has an invalid length. [ 521.019022][T10342] overlayfs: failed to clone upperpath [ 522.500525][T10353] loop5: detected capacity change from 0 to 4096 [ 522.535638][T10353] EXT4-fs: inline encryption not supported [ 522.583665][T10353] EXT4-fs (loop5): Test dummy encryption mode enabled [ 522.626884][T10353] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 522.659409][T10353] System zones: 0-5 [ 522.672441][T10353] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 523.255967][T10371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1017'. [ 524.734964][T10384] overlayfs: failed to clone upperpath [ 526.440240][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.596437][T10401] ip6t_REJECT: ECHOREPLY is not supported [ 530.378281][T10436] overlayfs: failed to clone upperpath [ 531.017739][T10445] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 533.234493][ T5157] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 533.437041][ T5157] usb 6-1: unable to get BOS descriptor or descriptor too short [ 533.450011][ T5157] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 533.474513][ T5157] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.502903][ T5157] usb 6-1: Product: syz [ 533.513024][ T5157] usb 6-1: Manufacturer: syz [ 533.528239][ T5157] usb 6-1: SerialNumber: syz [ 533.532891][T10462] loop7: detected capacity change from 0 to 40427 [ 533.569300][T10462] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 533.584066][T10462] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 533.643491][T10462] F2FS-fs (loop7): Found nat_bits in checkpoint [ 533.777368][T10462] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 533.794477][T10462] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 534.764229][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 534.773744][ T5157] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 534.821377][ T5157] usb 6-1: USB disconnect, device number 8 [ 535.023711][T10492] udevd[10492]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.812625][T10517] 9pnet_fd: Insufficient options for proto=fd [ 541.542312][T10556] loop5: detected capacity change from 0 to 512 [ 541.679254][T10556] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 542.257104][T10569] overlayfs: failed to clone upperpath [ 542.434518][T10572] 9pnet_fd: Insufficient options for proto=fd [ 545.734654][T10597] loop5: detected capacity change from 0 to 40427 [ 545.788141][T10597] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff [ 545.804102][T10597] F2FS-fs (loop5): invalid crc value [ 545.851478][T10597] F2FS-fs (loop5): Found nat_bits in checkpoint [ 546.007379][T10597] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 546.185146][T10597] ip6tnl1: entered allmulticast mode [ 548.815203][T10632] 9pnet_fd: Insufficient options for proto=fd [ 549.836951][T10638] ip6t_REJECT: ECHOREPLY is not supported [ 554.627337][T10671] loop5: detected capacity change from 0 to 40427 [ 554.659857][T10671] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 554.685005][T10671] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 554.718593][T10671] F2FS-fs (loop5): invalid crc value [ 554.757713][T10671] F2FS-fs (loop5): Found nat_bits in checkpoint [ 554.921003][T10671] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 554.944643][T10671] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 556.100407][T10686] 9pnet_fd: Insufficient options for proto=fd [ 558.963123][T10708] overlayfs: failed to clone upperpath [ 559.324464][T10712] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1085'. [ 559.504477][T10717] 9pnet_fd: Insufficient options for proto=fd [ 562.773734][T10729] loop7: detected capacity change from 0 to 256 [ 562.841874][T10729] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 563.094694][ T9085] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 563.239998][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.246540][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.466266][ T9085] usb 6-1: unable to get BOS descriptor or descriptor too short [ 563.523877][ T9085] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 563.559157][ T9085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.601666][ T9085] usb 6-1: Product: syz [ 563.615217][ T9085] usb 6-1: Manufacturer: syz [ 563.654557][ T9085] usb 6-1: SerialNumber: syz [ 563.739179][T10735] loop7: detected capacity change from 0 to 256 [ 565.029129][ T9085] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 565.185366][ T9085] usb 6-1: USB disconnect, device number 9 [ 565.407856][T10402] udevd[10402]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.356309][T10755] xt_hashlimit: size too large, truncated to 1048576 [ 567.442781][T10756] loop7: detected capacity change from 0 to 512 [ 567.670914][T10756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 567.723503][T10756] ext4 filesystem being mounted at /63/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.027567][T10764] 9pnet_fd: Insufficient options for proto=fd [ 572.295652][T10791] 9pnet_fd: Insufficient options for proto=fd [ 574.460862][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 576.092365][T10820] 9pnet_fd: Insufficient options for proto=fd [ 578.776750][T10854] 9pnet_fd: Insufficient options for proto=fd [ 580.560120][T10859] loop7: detected capacity change from 0 to 40427 [ 580.584612][T10859] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 580.618841][T10859] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 580.674355][T10859] F2FS-fs (loop7): Found nat_bits in checkpoint [ 580.900987][T10859] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 580.922475][T10859] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 583.331837][T10889] 9pnet_fd: Insufficient options for proto=fd [ 586.759925][T10917] 9pnet_fd: Insufficient options for proto=fd [ 587.577936][T10910] loop7: detected capacity change from 0 to 40427 [ 587.587597][T10910] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 587.624774][T10910] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 587.669004][T10910] F2FS-fs (loop7): Found nat_bits in checkpoint [ 587.789080][T10910] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 587.807366][T10910] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 588.382710][T10941] loop5: detected capacity change from 0 to 4096 [ 588.408417][T10941] ext4: Unknown parameter 'appraise_type' [ 588.477322][T10796] blk_print_req_error: 13 callbacks suppressed [ 588.477342][T10796] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 589.883434][T10949] 9pnet_fd: Insufficient options for proto=fd [ 590.844571][ T9232] Bluetooth: hci3: command 0x0406 tx timeout [ 591.127092][ T5157] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 591.454555][ T5157] usb 8-1: unable to get BOS descriptor or descriptor too short [ 591.666960][ T5157] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 591.706803][ T5157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.738508][ T5157] usb 8-1: Product: syz [ 591.742757][ T5157] usb 8-1: Manufacturer: syz [ 591.780813][ T5157] usb 8-1: SerialNumber: syz [ 592.514728][ T5157] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 592.546156][ T5157] usb 8-1: USB disconnect, device number 3 [ 592.760479][T10976] udevd[10976]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.187253][T10985] 9pnet_fd: Insufficient options for proto=fd [ 594.018194][T10987] loop7: detected capacity change from 0 to 256 [ 594.621598][T10994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 594.692646][T10995] overlayfs: failed to clone upperpath [ 594.709475][T10994] tipc: Enabling of bearer rejected, failed to enable media [ 595.819865][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 596.147676][T11023] 9pnet_fd: Insufficient options for proto=fd [ 596.963476][ T5777] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 597.166885][ T5777] usb 8-1: unable to get BOS descriptor or descriptor too short [ 597.188311][ T5777] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 597.224519][ T5777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.261512][ T5777] usb 8-1: Product: syz [ 597.284514][ T5777] usb 8-1: Manufacturer: syz [ 597.298552][ T5777] usb 8-1: SerialNumber: syz [ 598.430449][ T5777] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 598.503539][ T5777] usb 8-1: USB disconnect, device number 4 [ 598.593936][T10977] udevd[10977]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.663957][T11036] mmap: syz.5.1178 (11036) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 600.142232][T11052] 9pnet_fd: Insufficient options for proto=fd [ 601.414977][ T786] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 602.364606][ T786] usb 8-1: Using ep0 maxpacket: 32 [ 602.387594][T11054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.395549][ T786] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 602.395575][ T786] usb 8-1: config 2 has no interface number 0 [ 602.395612][ T786] usb 8-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 602.395636][ T786] usb 8-1: config 2 interface 88 has no altsetting 0 [ 602.398135][ T786] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 602.398162][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.398183][ T786] usb 8-1: Product: syz [ 602.398198][ T786] usb 8-1: Manufacturer: syz [ 602.398213][ T786] usb 8-1: SerialNumber: syz [ 602.432677][T11059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 602.711709][T11059] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 603.111116][T11054] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.120359][T11054] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.130298][T11054] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.139303][T11054] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.555010][ T786] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 603.589520][ T786] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 603.624739][ T786] asix: probe of 8-1:2.88 failed with error -71 [ 603.645749][ T786] usb 8-1: USB disconnect, device number 5 [ 603.785749][T11086] 9pnet_fd: Insufficient options for proto=fd [ 605.884072][T11108] loop7: detected capacity change from 0 to 1024 [ 605.892829][T11108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 605.951057][T11108] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.927682][T11118] usb usb8: usbfs: process 11118 (syz.5.1207) did not claim interface 0 before use [ 607.643063][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.691967][T11153] loop7: detected capacity change from 0 to 256 [ 609.768735][T10973] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 622.608434][T11254] loop7: detected capacity change from 0 to 256 [ 622.701296][T11256] netlink: 'syz.1.1247': attribute type 3 has an invalid length. [ 622.741241][T11254] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 622.760032][T11256] netlink: 'syz.1.1247': attribute type 3 has an invalid length. [ 622.991398][T11259] loop7: detected capacity change from 0 to 256 [ 623.543448][T11259] FAT-fs (loop7): Directory bread(block 64) failed [ 623.575450][T11259] FAT-fs (loop7): Directory bread(block 65) failed [ 623.613048][T11259] FAT-fs (loop7): Directory bread(block 66) failed [ 623.659142][T11259] FAT-fs (loop7): Directory bread(block 67) failed [ 623.680127][T11259] FAT-fs (loop7): Directory bread(block 68) failed [ 623.711719][T11259] FAT-fs (loop7): Directory bread(block 69) failed [ 623.784682][T11259] FAT-fs (loop7): Directory bread(block 70) failed [ 623.798728][T11259] FAT-fs (loop7): Directory bread(block 71) failed [ 623.814678][T11259] FAT-fs (loop7): Directory bread(block 72) failed [ 623.824818][T11259] FAT-fs (loop7): Directory bread(block 73) failed [ 624.963642][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.970909][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.564480][ T786] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 627.747469][ T786] usb 8-1: unable to get BOS descriptor or descriptor too short [ 627.763758][ T786] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 627.779295][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.788162][ T786] usb 8-1: Product: syz [ 627.792480][ T786] usb 8-1: Manufacturer: syz [ 627.802476][ T786] usb 8-1: SerialNumber: syz [ 629.394580][ T786] usb 8-1: 1:1: cannot get freq at ep 0x1 [ 629.457553][ T786] usb 8-1: USB disconnect, device number 6 [ 629.717469][T10977] udevd[10977]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.708228][T11322] loop7: detected capacity change from 0 to 256 [ 633.272337][T11341] loop7: detected capacity change from 0 to 7 [ 633.296942][T11341] Dev loop7: unable to read RDB block 7 [ 633.302599][T11341] loop7: unable to read partition table [ 633.316008][T11341] loop7: partition table beyond EOD, truncated [ 633.335576][T11341] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5) [ 636.383353][T11368] loop7: detected capacity change from 0 to 512 [ 636.440392][T11368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.467981][T11368] ext4 filesystem being mounted at /96/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.545612][T11368] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 636.637495][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.714678][T11377] loop5: detected capacity change from 0 to 256 [ 636.778693][T10976] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 638.072118][T11389] loop7: detected capacity change from 0 to 7 [ 638.110822][T11389] Dev loop7: unable to read RDB block 7 [ 638.125973][T11389] loop7: unable to read partition table [ 638.154926][T11389] loop7: partition table beyond EOD, truncated [ 638.190827][T11389] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P@?X) failed (rc=-5) [ 639.034023][T11390] support for the xor transformation has been removed. [ 641.808289][T11415] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 641.828252][T11415] overlayfs: failed to set xattr on upper [ 641.840840][T11415] overlayfs: ...falling back to redirect_dir=nofollow. [ 641.858906][T11415] overlayfs: ...falling back to index=off. [ 641.878267][T11415] overlayfs: ...falling back to uuid=null. [ 642.376548][T11426] loop5: detected capacity change from 0 to 256 [ 644.749318][T11435] loop5: detected capacity change from 0 to 256 [ 644.774295][T11435] exfat: Deprecated parameter 'utf8' [ 644.820062][T11435] exfat: Deprecated parameter 'namecase' [ 644.854612][T11435] exfat: Deprecated parameter 'namecase' [ 644.925796][T11435] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 649.817748][T11509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 653.445824][T11545] loop5: detected capacity change from 0 to 256 [ 655.878788][T11559] ip6tnl1: entered allmulticast mode [ 660.641704][T11605] overlayfs: failed to clone upperpath [ 663.952739][T11640] loop5: detected capacity change from 0 to 4096 [ 663.972258][T11640] EXT4-fs: Ignoring removed nobh option [ 663.972503][T11640] EXT4-fs: Ignoring removed mblk_io_submit option [ 664.029096][T11640] EXT4-fs (loop5): Test dummy encryption mode enabled [ 664.038789][T11640] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=884ec018, mo2=0102] [ 664.050595][T11640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.138483][ T8071] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.374633][ T5812] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 665.574536][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 665.594670][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.634197][ T5812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.676089][ T5812] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 665.713988][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.761595][ T5812] usb 8-1: config 0 descriptor?? [ 665.802253][ T5812] hub 8-1:0.0: USB hub found [ 666.018046][ T5812] hub 8-1:0.0: config failed, can't read hub descriptor (err -90) [ 666.509518][ T5812] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.7-1/input0 [ 666.785303][ T5812] usb 8-1: USB disconnect, device number 7 [ 666.858512][T11657] fido_id[11657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 668.277237][T11665] loop5: detected capacity change from 0 to 256 [ 668.394964][T11665] FAT-fs (loop5): Directory bread(block 64) failed [ 668.401730][T11665] FAT-fs (loop5): Directory bread(block 65) failed [ 668.414570][T11665] FAT-fs (loop5): Directory bread(block 66) failed [ 668.434429][T11665] FAT-fs (loop5): Directory bread(block 67) failed [ 668.441207][T11665] FAT-fs (loop5): Directory bread(block 68) failed [ 668.476118][T11665] FAT-fs (loop5): Directory bread(block 69) failed [ 668.496176][T11665] FAT-fs (loop5): Directory bread(block 70) failed [ 668.504622][T11665] FAT-fs (loop5): Directory bread(block 71) failed [ 668.518577][T11665] FAT-fs (loop5): Directory bread(block 72) failed [ 668.530533][T11665] FAT-fs (loop5): Directory bread(block 73) failed [ 668.634039][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 668.665016][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1371'. [ 670.410557][T11671] loop7: detected capacity change from 0 to 40427 [ 670.443060][T11671] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 670.484221][T11671] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 670.631133][T11671] F2FS-fs (loop7): Found nat_bits in checkpoint [ 670.803396][T11671] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 670.840161][T11671] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 673.419837][T11711] overlayfs: failed to clone upperpath [ 675.156919][T11731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.356743][T11731] batadv_slave_0: entered promiscuous mode [ 678.374556][ T5812] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 679.327476][ T5812] usb 8-1: unable to get BOS descriptor or descriptor too short [ 679.340206][ T5812] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 679.364419][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.372598][ T5812] usb 8-1: Product: syz [ 679.395136][ T5812] usb 8-1: Manufacturer: syz [ 679.404634][ T5812] usb 8-1: SerialNumber: syz [ 683.095349][ T5812] usb 8-1: 1:1: cannot set freq 48000 to ep 0x1 [ 683.134950][ T5812] usb 8-1: USB disconnect, device number 8 [ 683.211207][T10796] udevd[10796]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 683.944859][ T5812] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 684.144767][ T5812] usb 8-1: Using ep0 maxpacket: 32 [ 684.152480][ T5812] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 684.178557][ T5812] usb 8-1: config 0 has no interface number 0 [ 684.194490][ T5812] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 684.224015][ T5812] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 684.243571][ T5812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.253684][ T5812] usb 8-1: Product: syz [ 684.263858][ T5812] usb 8-1: Manufacturer: syz [ 684.273432][ T5812] usb 8-1: SerialNumber: syz [ 684.289602][ T5812] usb 8-1: config 0 descriptor?? [ 684.305527][T11783] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 684.557869][T11783] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 684.775546][ T5812] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 684.796493][ T5812] asix: probe of 8-1:0.188 failed with error -61 [ 686.051643][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.059070][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.943443][ T5157] usb 8-1: USB disconnect, device number 9 [ 690.029077][ T5157] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 690.567570][ T5157] usb 8-1: unable to get BOS descriptor or descriptor too short [ 690.580621][ T5157] usb 8-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 690.600549][ T5157] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.620331][ T5157] usb 8-1: Product: syz [ 690.628991][ T5157] usb 8-1: Manufacturer: syz [ 690.639057][ T5157] usb 8-1: SerialNumber: syz [ 692.056377][ T28] audit: type=1326 audit(1774732252.992:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.115571][ T28] audit: type=1326 audit(1774732252.992:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.201483][ T28] audit: type=1326 audit(1774732253.012:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.291256][ T28] audit: type=1326 audit(1774732253.012:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.382929][ T28] audit: type=1326 audit(1774732253.012:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.405341][ T28] audit: type=1326 audit(1774732253.012:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.427775][ T28] audit: type=1326 audit(1774732253.012:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.457198][ T5157] usb 8-1: 1:1: cannot get freq at ep 0x1 [ 692.470153][ T28] audit: type=1326 audit(1774732253.012:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 692.782885][ T28] audit: type=1326 audit(1774732253.012:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 693.284922][ T28] audit: type=1326 audit(1774732253.012:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.4.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b1d79c819 code=0x7ffc0000 [ 693.399001][ T5157] usb 8-1: USB disconnect, device number 10 [ 693.530159][T11830] udevd[11830]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.212995][T11918] loop7: detected capacity change from 0 to 2048 [ 699.290016][T11918] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.325170][T11918] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.443073][ T9305] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.813959][T11928] loop5: detected capacity change from 0 to 256 [ 706.093258][T11970] input: syz0 as /devices/virtual/input/input11 [ 710.074226][T11993] loop7: detected capacity change from 0 to 1024 [ 710.166540][T11993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.352499][T11993] ------------[ cut here ]------------ [ 710.358635][T11993] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 710.379416][T11993] WARNING: CPU: 0 PID: 11993 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 710.388891][T11993] Modules linked in: [ 710.392890][T11993] CPU: 0 PID: 11993 Comm: syz.7.1459 Not tainted syzkaller #0 [ 710.400865][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.411072][T11993] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 710.416475][T11993] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 710.436516][T11993] RSP: 0018:ffffc900057c6d40 EFLAGS: 00010246 [ 710.442684][T11993] RAX: 3003cf0ff8644000 RBX: ffff88805e0f3000 RCX: 0000000000080000 [ 710.450746][T11993] RDX: ffffc900053a9000 RSI: 0000000000004138 RDI: 0000000000004139 [ 710.458809][T11993] RBP: ffffc900057c6ef8 R08: ffffc900057c6947 R09: 1ffff92000af8d28 [ 710.466901][T11993] R10: dffffc0000000000 R11: fffff52000af8d29 R12: ffff88805e0f0400 [ 710.474982][T11993] R13: ffff88805e0f04e8 R14: 0000000000000020 R15: ffff88801efd3b80 [ 710.483011][T11993] FS: 00007f90babf66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 710.492288][T11993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 710.498974][T11993] CR2: 000000110c3665bf CR3: 000000006204a000 CR4: 00000000003506f0 [ 710.507051][T11993] Call Trace: [ 710.510405][T11993] [ 710.513375][T11993] ? tc_new_tfilter+0x8f7/0x17c0 [ 710.518457][T11993] ? u32_get+0x370/0x370 [ 710.522795][T11993] ? u32_get+0x370/0x370 [ 710.527287][T11993] tc_new_tfilter+0x11f9/0x17c0 [ 710.532229][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.538351][T11993] ? rcu_read_unlock+0x8c/0xa0 [ 710.543178][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.549274][T11993] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 710.554497][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 710.560543][T11993] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 710.565567][T11993] ? lockdep_hardirqs_on+0x98/0x150 [ 710.570822][T11993] ? rtnetlink_bind+0x80/0x80 [ 710.575631][T11993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 710.581689][T11993] ? lock_chain_count+0x20/0x20 [ 710.586680][T11993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.592154][T11993] ? lockdep_hardirqs_on+0x98/0x150 [ 710.597477][T11993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 710.602906][T11993] ? _local_bh_enable+0xa0/0xa0 [ 710.607921][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 710.613089][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 710.618385][T11993] ? __dev_queue_xmit+0x1b2c/0x3660 [ 710.623652][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 710.628871][T11993] ? ref_tracker_free+0x690/0x840 [ 710.633976][T11993] netlink_rcv_skb+0x241/0x4d0 [ 710.638883][T11993] ? rtnetlink_bind+0x80/0x80 [ 710.643609][T11993] ? netlink_ack+0x1180/0x1180 [ 710.648511][T11993] ? __lock_acquire+0x7d40/0x7d40 [ 710.653594][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 710.658949][T11993] netlink_unicast+0x751/0x8d0 [ 710.663791][T11993] netlink_sendmsg+0x8d0/0xbf0 [ 710.668673][T11993] ? netlink_getsockopt+0x590/0x590 [ 710.673944][T11993] ? aa_sock_msg_perm+0x94/0x150 [ 710.679037][T11993] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 710.684428][T11993] ? security_socket_sendmsg+0x80/0xa0 [ 710.689940][T11993] ? netlink_getsockopt+0x590/0x590 [ 710.695275][T11993] ____sys_sendmsg+0x5ba/0x960 [ 710.700120][T11993] ? __asan_memset+0x22/0x40 [ 710.704815][T11993] ? __sys_sendmsg_sock+0x30/0x30 [ 710.709902][T11993] ? __import_iovec+0x5f2/0x850 [ 710.714923][T11993] ? import_iovec+0x73/0xa0 [ 710.719483][T11993] ___sys_sendmsg+0x2a6/0x360 [ 710.724212][T11993] ? __sys_sendmsg+0x2a0/0x2a0 [ 710.729265][T11993] __sys_sendmmsg+0x2ca/0x510 [ 710.733998][T11993] ? __ia32_sys_sendmsg+0x90/0x90 [ 710.739164][T11993] ? __ia32_sys_get_robust_list+0x110/0x110 [ 710.745168][T11993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 710.751212][T11993] ? lock_chain_count+0x20/0x20 [ 710.756173][T11993] __x64_sys_sendmmsg+0xa0/0xb0 [ 710.761080][T11993] do_syscall_64+0x55/0xa0 [ 710.765577][T11993] ? clear_bhb_loop+0x40/0x90 [ 710.770308][T11993] ? clear_bhb_loop+0x40/0x90 [ 710.775088][T11993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 710.781022][T11993] RIP: 0033:0x7f90bc99c819 [ 710.785530][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.805335][T11993] RSP: 002b:00007f90babf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 710.813801][T11993] RAX: ffffffffffffffda RBX: 00007f90bcc15fa0 RCX: 00007f90bc99c819 [ 710.821852][T11993] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 710.829934][T11993] RBP: 00007f90bca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 710.838030][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.846114][T11993] R13: 00007f90bcc16038 R14: 00007f90bcc15fa0 R15: 00007ffe31ef9958 [ 710.854150][T11993] [ 710.857249][T11993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 710.864564][T11993] CPU: 0 PID: 11993 Comm: syz.7.1459 Not tainted syzkaller #0 [ 710.872055][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.882149][T11993] Call Trace: [ 710.885465][T11993] [ 710.888427][T11993] dump_stack_lvl+0x18c/0x250 [ 710.893161][T11993] ? show_regs_print_info+0x20/0x20 [ 710.898417][T11993] ? load_image+0x400/0x400 [ 710.903032][T11993] panic+0x2dc/0x730 [ 710.907019][T11993] ? bpf_jit_dump+0xd0/0xd0 [ 710.911595][T11993] __warn+0x2e0/0x470 [ 710.915639][T11993] ? u32_change+0x1c5a/0x24f0 [ 710.920559][T11993] ? u32_change+0x1c5a/0x24f0 [ 710.925282][T11993] report_bug+0x2be/0x4f0 [ 710.929653][T11993] ? u32_change+0x1c5a/0x24f0 [ 710.934397][T11993] ? u32_change+0x1c5a/0x24f0 [ 710.939119][T11993] ? u32_change+0x1c5c/0x24f0 [ 710.943845][T11993] handle_bug+0xcf/0x120 [ 710.948136][T11993] exc_invalid_op+0x1a/0x50 [ 710.952678][T11993] asm_exc_invalid_op+0x1a/0x20 [ 710.957580][T11993] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 710.962920][T11993] Code: f8 eb 59 e8 58 b0 d8 f8 c6 05 35 39 c7 05 01 b9 10 00 00 00 48 c7 c7 80 5c c7 8b 4c 89 f6 48 c7 c2 00 5d c7 8b e8 66 68 a2 f8 <0f> 0b e9 86 f0 ff ff e8 2a b0 d8 f8 eb 24 e8 23 b0 d8 f8 c6 05 d7 [ 710.982593][T11993] RSP: 0018:ffffc900057c6d40 EFLAGS: 00010246 [ 710.988700][T11993] RAX: 3003cf0ff8644000 RBX: ffff88805e0f3000 RCX: 0000000000080000 [ 710.996701][T11993] RDX: ffffc900053a9000 RSI: 0000000000004138 RDI: 0000000000004139 [ 711.004713][T11993] RBP: ffffc900057c6ef8 R08: ffffc900057c6947 R09: 1ffff92000af8d28 [ 711.012716][T11993] R10: dffffc0000000000 R11: fffff52000af8d29 R12: ffff88805e0f0400 [ 711.020712][T11993] R13: ffff88805e0f04e8 R14: 0000000000000020 R15: ffff88801efd3b80 [ 711.028721][T11993] ? tc_new_tfilter+0x8f7/0x17c0 [ 711.033702][T11993] ? u32_get+0x370/0x370 [ 711.037988][T11993] ? u32_get+0x370/0x370 [ 711.042248][T11993] tc_new_tfilter+0x11f9/0x17c0 [ 711.047151][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 711.053171][T11993] ? rcu_read_unlock+0x8c/0xa0 [ 711.057959][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 711.064048][T11993] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 711.069178][T11993] ? tcf_proto_signal_destroying+0x240/0x240 [ 711.075183][T11993] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 711.080139][T11993] ? lockdep_hardirqs_on+0x98/0x150 [ 711.085369][T11993] ? rtnetlink_bind+0x80/0x80 [ 711.090080][T11993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 711.096097][T11993] ? lock_chain_count+0x20/0x20 [ 711.101015][T11993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 711.106416][T11993] ? lockdep_hardirqs_on+0x98/0x150 [ 711.111649][T11993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 711.117053][T11993] ? _local_bh_enable+0xa0/0xa0 [ 711.121937][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 711.127070][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 711.132212][T11993] ? __dev_queue_xmit+0x1b2c/0x3660 [ 711.137440][T11993] ? __dev_queue_xmit+0x265/0x3660 [ 711.142587][T11993] ? ref_tracker_free+0x690/0x840 [ 711.147656][T11993] netlink_rcv_skb+0x241/0x4d0 [ 711.152486][T11993] ? rtnetlink_bind+0x80/0x80 [ 711.157193][T11993] ? netlink_ack+0x1180/0x1180 [ 711.161992][T11993] ? __lock_acquire+0x7d40/0x7d40 [ 711.167049][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 711.172296][T11993] netlink_unicast+0x751/0x8d0 [ 711.177108][T11993] netlink_sendmsg+0x8d0/0xbf0 [ 711.181907][T11993] ? netlink_getsockopt+0x590/0x590 [ 711.187148][T11993] ? aa_sock_msg_perm+0x94/0x150 [ 711.192118][T11993] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 711.197448][T11993] ? security_socket_sendmsg+0x80/0xa0 [ 711.202933][T11993] ? netlink_getsockopt+0x590/0x590 [ 711.208160][T11993] ____sys_sendmsg+0x5ba/0x960 [ 711.212949][T11993] ? __asan_memset+0x22/0x40 [ 711.217572][T11993] ? __sys_sendmsg_sock+0x30/0x30 [ 711.222628][T11993] ? __import_iovec+0x5f2/0x850 [ 711.227504][T11993] ? import_iovec+0x73/0xa0 [ 711.232028][T11993] ___sys_sendmsg+0x2a6/0x360 [ 711.236735][T11993] ? __sys_sendmsg+0x2a0/0x2a0 [ 711.241553][T11993] __sys_sendmmsg+0x2ca/0x510 [ 711.246252][T11993] ? __ia32_sys_sendmsg+0x90/0x90 [ 711.251314][T11993] ? __ia32_sys_get_robust_list+0x110/0x110 [ 711.257242][T11993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 711.263267][T11993] ? lock_chain_count+0x20/0x20 [ 711.268154][T11993] __x64_sys_sendmmsg+0xa0/0xb0 [ 711.273028][T11993] do_syscall_64+0x55/0xa0 [ 711.277499][T11993] ? clear_bhb_loop+0x40/0x90 [ 711.282227][T11993] ? clear_bhb_loop+0x40/0x90 [ 711.286935][T11993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.292861][T11993] RIP: 0033:0x7f90bc99c819 [ 711.297300][T11993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.316937][T11993] RSP: 002b:00007f90babf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.325382][T11993] RAX: ffffffffffffffda RBX: 00007f90bcc15fa0 RCX: 00007f90bc99c819 [ 711.333380][T11993] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 711.341373][T11993] RBP: 00007f90bca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 711.349359][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.357356][T11993] R13: 00007f90bcc16038 R14: 00007f90bcc15fa0 R15: 00007ffe31ef9958 [ 711.365360][T11993] [ 711.368969][T11993] Kernel Offset: disabled [ 711.373312][T11993] Rebooting in 86400 seconds..