last executing test programs: 11.305899572s ago: executing program 0 (id=1086): r0 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000280)={0x0, 0x2, 0x7}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0) 10.765050821s ago: executing program 0 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, r1, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 10.604675633s ago: executing program 0 (id=1090): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/27, 0x1b}], 0x1, 0xfffffffc, 0x1) 10.052719142s ago: executing program 3 (id=1091): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') link(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x6}, [], {}, [{0x8, 0x6}], {0x10, 0x2}, {0x20, 0x6}}, 0x2c, 0x1) setgroups(0x0, 0x0) 8.738261653s ago: executing program 1 (id=1094): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 7.493173492s ago: executing program 1 (id=1095): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0), 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000001c80), 0xd36, 0x18bc80) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x8007f}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) 7.193083917s ago: executing program 0 (id=1096): r0 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000280)={0x0, 0x2, 0x7}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0) 6.956271481s ago: executing program 2 (id=1097): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 6.797672273s ago: executing program 3 (id=1098): socket(0x8, 0x3, 0xff) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create(0x207ffd) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x70002012}) mlockall(0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, 0x0) syz_open_dev$vim2m(&(0x7f0000000600), 0x6, 0x2) 5.948753477s ago: executing program 0 (id=1099): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000019ed6e20d3131132d7cb011203010902120001000000000904"], 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x4d6100, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000080)="ad", 0x1}], 0x1}}], 0x1, 0x400c404) sendmmsg$inet6(r4, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x8, 0x0, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @private}}}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0xf05, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x0) 5.948312757s ago: executing program 2 (id=1100): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0a080010", @ANYRES16, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005001900000000000500180001"], 0x3c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7}) 5.869054448s ago: executing program 1 (id=1101): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40082102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) acct(&(0x7f0000000000)='./file0/file0\x00') 5.798925909s ago: executing program 2 (id=1102): socket$netlink(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002740), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0xeffd) read$FUSE(r3, &(0x7f00000000c0)={0x2020}, 0x2020) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x500f}}, {@nodecompose}, {}, {@part={'part', 0x3d, 0xc}}, {@uid}, {@barrier}, {@nls={'nls', 0x3d, 'cp949'}}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x3, 0x5f4, &(0x7f0000000640)="$eJzs3c9rHOcZB/DvrNay5YKzSewkLS0V9qElprZWmzg6FOqWUnQIJdBLLjkIex0Lr5UgbYoSSpH789r/IClFPvfUQ+nBkJ577VHQQw6F3nVzmdlZaW0rshQr2lXy+cC77zv7zrzzzOOZVzuzmA3wtbX4dk49SJHFy2+ul8tbm53e1mbn7rCd5HSSRtIcVClWkuLT5HoGJd8s36yHKz5vP+98/MbCZ+3795KiORirOVy/sd92B7NRl8wmmarroxrvxjOPV+wcYZmwS8PEwbg9fMLGYTZ/xusWmGSt5GySM/XngNSzQ2PMYT2zQ81yAAAAcEI9t53trOfcuOMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAk6RIpgZVVRrD9myK4e//T9fvpW6faA/GHQAAAAAAAAAAHIHvbmc76zk3XH5YVN/5X6wWzlev38gHWUs3q7mS9Syln35W007SGhloen2p319tP3XLItl4NITBlvPHcLAAAAAAAAAA8NX1myzufv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACToEimBlVVzg/brTSaSc4kmS7X20j+MWyfZA/GHQAAAAAcg+e2s531nBsuPyyqe/6Xqvv+M/kgK+lnOf300s3N6lnA4K6/sbXZ6W1tdu6W5clxf/y/Q4VRjZjBs4e99zxXrXFhZ4vF/Cy/yOXM5q2sZjm/zFL66WY2P61aSynSqp9etIZx7h3v9UeW3nparK9UkczkVpar2K7kRt5LLzfTqI6hWmf/Pd4rs1P8qHbAHN2s6/KI/lTXk6FVZeTUTkbm6tyX2Xh+/0wc8jx5fE/tNHaeQZ3/99Hn/Gxdl7n+w0TnfH7k7Htp/5wnF//znb/d7q3cuX1r7fLkHNIX9HgmOiOZePlrlYnpOhuDWfRws+XFattzWc7P815uppvXs5DXM5/X8lrmspBrI3m9cID5rXG4a+3S9+vGTJI/1vVkKPP6/EheR2e6VtU3+s4gS+XJ9MLR/xVofqtulPv4bV1Phscz0R45X17cPxN/fli+rvVW7qzeXnr/gPv7Xl2Xmf79RM3N5fnyQvmPVS09enaUfS/u2deu+s7v9DWe6Luw0/e0K3W6/gz35EjzVd/Le/Z1qr5XRvr2+pQDwITa/U777Ktnp2f+O/OvmU9mfjdze+bNMz85vXD629M59c/m36f+2rjf+GHxaj7Jr3fv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC9u7cOP7iz1hj8D0Ot1VwfvfMUaf8lEhKFx0hrN+sqYlHiOrzHGSQk4Flf7d9+/uvbhRz9Yvrv0bvfd7kqn0742v3BtYf7a1VvLve7c4HXcYQJfgt0/+uOOBAAAAAAAAAAAADio4/jvBOM+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBkW3w7px6kSHvuyly5vLXZ6ZVl2N5ds5mkkaT4VVJ8mlzPoKQ1Mlzxeft55+M3Fj5r37+3O1ZzuH5jv+0OZqMumU0yVddHNd6NZx6v2DnCMmGXhomDcft/AAAA//9Shwfb") 4.592603138s ago: executing program 3 (id=1103): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x33, 0x1, 0x70bd2b, 0x25dbdbfe, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 4.549482919s ago: executing program 1 (id=1104): memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 3.498301115s ago: executing program 3 (id=1105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x690000, 0x0) socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x2010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f000055e000/0x4000)=nil, 0x4000, 0x300000b, 0x11, r3, 0x10000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000000c40)={0x2020}, 0x2020) 3.466837826s ago: executing program 1 (id=1106): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f0000000440)=[0x13], 0x1}, 0x20) 3.343146778s ago: executing program 1 (id=1107): r0 = fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3f, &(0x7f0000000ac0)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRESHEX=r0], &(0x7f0000000600)='GPL\x00', 0x7, 0xba, &(0x7f0000000540)=""/186, 0x41000, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYRES32=r5, @ANYRES16=0x0, @ANYBLOB="960f715729aed36a66d7709730dfcfbaede7eeb434fd121e3caa72cd3310a5dca8e41160d03eba54f33ef66d1e4dc2775d4733fc5ad75f21386ba6728f3576b10a751bdb1b26b6ab8a15edf23b14793363fe5e57434db2003e6f8e6bcbd1772c965e2d2d78bb7e9899f2c1ec98b10c553f473df7702ba6f7aecec265f9ef918475e0d7ace73cd305224ce0718f462e29c5aec3a9a81a0239732544b0d50dbf7470ee3109596f5bed3f2cfb8fa26f1f4f49698621", @ANYRESDEC], 0x54}}, 0x20000000) socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000003d000701000000000000ebaabefaecf9fa0000047c4e6fb711ce11c9600000040008800c00018006002600800a0000280002802400140042a7ed1a0634218928630c8df6fd030000"], 0x4c}}, 0xc000) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r8 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) r9 = fsopen(&(0x7f0000000280)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 3.342613388s ago: executing program 2 (id=1108): r0 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000280)={0x0, 0x2, 0x7}) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x100000000000000, 0x0) 2.304492884s ago: executing program 2 (id=1109): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) chdir(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5c2, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0), 0x8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000001c80), 0xd36, 0x18bc80) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x8007f}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, '.'}}]}) 1.049858464s ago: executing program 3 (id=1110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 243.398747ms ago: executing program 0 (id=1111): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 641.15µs ago: executing program 3 (id=1112): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 0s ago: executing program 2 (id=1113): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x141) setrlimit(0x8, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r3, &(0x7f0000000780)=[{&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120ea360c615f41dc8f0dd8af2b", 0x62}], 0x1, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRESOCT]) chdir(&(0x7f0000000300)='./file0\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380), 0x800, &(0x7f0000001540)={[{@index_off}], [{@fowner_gt}]}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r5 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r5, &(0x7f00000004c0)="ab", 0x1, 0xc0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 65.614623][ T5752] cgroup: Unknown subsys name 'net' [ 65.785978][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.175301][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.495912][ T5764] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.504922][ T5764] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.514960][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.523582][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.532997][ T5766] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.548974][ T5766] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.569736][ T5766] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.578020][ T5766] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.582916][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.594907][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.602121][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.602748][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.618989][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.632950][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.633874][ T5764] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.655584][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.655626][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.671636][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.679727][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.689756][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.697320][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.706155][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.714663][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.722323][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.063969][ T5762] chnl_net:caif_netlink_parms(): no params data found [ 69.214951][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 69.248478][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.256008][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.264084][ T5762] bridge_slave_0: entered allmulticast mode [ 69.271557][ T5762] bridge_slave_0: entered promiscuous mode [ 69.332639][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.341746][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.351448][ T5762] bridge_slave_1: entered allmulticast mode [ 69.358272][ T5762] bridge_slave_1: entered promiscuous mode [ 69.427695][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.440980][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.450324][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 69.461591][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 69.477443][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.485201][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.492498][ T5773] bridge_slave_0: entered allmulticast mode [ 69.499754][ T5773] bridge_slave_0: entered promiscuous mode [ 69.539273][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.546563][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.553998][ T5773] bridge_slave_1: entered allmulticast mode [ 69.562082][ T5773] bridge_slave_1: entered promiscuous mode [ 69.592496][ T5762] team0: Port device team_slave_0 added [ 69.637792][ T5762] team0: Port device team_slave_1 added [ 69.676027][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.688414][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.734252][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.741672][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.767787][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.781751][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.788814][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.814801][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.826394][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.833732][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.841058][ T5765] bridge_slave_0: entered allmulticast mode [ 69.847789][ T5765] bridge_slave_0: entered promiscuous mode [ 69.873301][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.880578][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.887719][ T5765] bridge_slave_1: entered allmulticast mode [ 69.894760][ T5765] bridge_slave_1: entered promiscuous mode [ 69.927024][ T5773] team0: Port device team_slave_0 added [ 69.934945][ T5773] team0: Port device team_slave_1 added [ 69.964044][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.971432][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.978594][ T5769] bridge_slave_0: entered allmulticast mode [ 69.985645][ T5769] bridge_slave_0: entered promiscuous mode [ 69.994397][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.001676][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.009707][ T5769] bridge_slave_1: entered allmulticast mode [ 70.016824][ T5769] bridge_slave_1: entered promiscuous mode [ 70.092767][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.103561][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.110945][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.136950][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.150364][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.162878][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.194843][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.214031][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.221105][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.247128][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.270857][ T5762] hsr_slave_0: entered promiscuous mode [ 70.277154][ T5762] hsr_slave_1: entered promiscuous mode [ 70.315989][ T5765] team0: Port device team_slave_0 added [ 70.337224][ T5769] team0: Port device team_slave_0 added [ 70.346336][ T5769] team0: Port device team_slave_1 added [ 70.362332][ T5765] team0: Port device team_slave_1 added [ 70.373373][ T5773] hsr_slave_0: entered promiscuous mode [ 70.380183][ T5773] hsr_slave_1: entered promiscuous mode [ 70.386233][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.394393][ T5773] Cannot create hsr debugfs directory [ 70.481316][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.488314][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.514336][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.528546][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.535650][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.561794][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.583206][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.590384][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.616489][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.660280][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.667399][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.693726][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.729797][ T50] Bluetooth: hci0: command tx timeout [ 70.735690][ T50] Bluetooth: hci1: command tx timeout [ 70.779319][ T5765] hsr_slave_0: entered promiscuous mode [ 70.785537][ T5765] hsr_slave_1: entered promiscuous mode [ 70.792803][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.800442][ T5765] Cannot create hsr debugfs directory [ 70.816424][ T50] Bluetooth: hci3: command tx timeout [ 70.816439][ T5766] Bluetooth: hci2: command tx timeout [ 70.891875][ T5769] hsr_slave_0: entered promiscuous mode [ 70.898208][ T5769] hsr_slave_1: entered promiscuous mode [ 70.906496][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.915012][ T5769] Cannot create hsr debugfs directory [ 71.095631][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.109452][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.121598][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.137192][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.260234][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.277811][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.287749][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.297478][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.387110][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.402930][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.414147][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.423941][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.503448][ T5769] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.518310][ T5769] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.532661][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.546194][ T5769] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.557065][ T5769] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.638874][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.650951][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.681361][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.688759][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.718567][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.725966][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.760766][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.774505][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.781294][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.801350][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.808496][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.820489][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.827644][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.901519][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.923300][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.953039][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.960257][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.991013][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.998202][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.103346][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.186834][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.276220][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.283478][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.304255][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.311491][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.376639][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.533773][ T5762] veth0_vlan: entered promiscuous mode [ 72.558124][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.576877][ T5762] veth1_vlan: entered promiscuous mode [ 72.616492][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.701580][ T5762] veth0_macvtap: entered promiscuous mode [ 72.733953][ T5762] veth1_macvtap: entered promiscuous mode [ 72.749629][ T5765] veth0_vlan: entered promiscuous mode [ 72.793497][ T5765] veth1_vlan: entered promiscuous mode [ 72.807787][ T5773] veth0_vlan: entered promiscuous mode [ 72.811313][ T50] Bluetooth: hci0: command tx timeout [ 72.820233][ T5766] Bluetooth: hci1: command tx timeout [ 72.825225][ T5773] veth1_vlan: entered promiscuous mode [ 72.856455][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.873988][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.889258][ T50] Bluetooth: hci3: command tx timeout [ 72.894738][ T50] Bluetooth: hci2: command tx timeout [ 72.908293][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.936023][ T5765] veth0_macvtap: entered promiscuous mode [ 72.950277][ T5762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.959853][ T5762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.968530][ T5762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.977774][ T5762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.002556][ T5765] veth1_macvtap: entered promiscuous mode [ 73.032440][ T5773] veth0_macvtap: entered promiscuous mode [ 73.080690][ T5773] veth1_macvtap: entered promiscuous mode [ 73.097485][ T5769] veth0_vlan: entered promiscuous mode [ 73.151314][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.162616][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.174455][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.186101][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.189491][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.203504][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.211571][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.227423][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.248475][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.259403][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.269821][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.280925][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.294396][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.305088][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.316165][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.326772][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.337410][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.350103][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.361679][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.372089][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.380912][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389800][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.402957][ T5769] veth1_vlan: entered promiscuous mode [ 73.430905][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440600][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.450163][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460082][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.487109][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.496200][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.604897][ T5769] veth0_macvtap: entered promiscuous mode [ 73.633001][ T5769] veth1_macvtap: entered promiscuous mode [ 73.690050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.697930][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.707054][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.735791][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745969][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.757162][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.768134][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.779914][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.791193][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.824967][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.830606][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.839723][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.857350][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.861605][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.875595][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.886465][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.897279][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.910164][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.983470][ T5769] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.996947][ T5769] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006550][ T5769] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.016849][ T5769] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.075754][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.102894][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.123644][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.148793][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.425531][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.436970][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.520927][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.667594][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.889230][ T5766] Bluetooth: hci1: command tx timeout [ 74.890449][ T50] Bluetooth: hci0: command tx timeout [ 74.970062][ T5766] Bluetooth: hci3: command tx timeout [ 74.971004][ T50] Bluetooth: hci2: command tx timeout [ 75.385773][ T5872] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 75.569326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.577724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.673202][ T5882] netlink: set zone limit has 8 unknown bytes [ 75.689041][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.918832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.020919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.333428][ T28] audit: type=1800 audit(1750766483.306:2): pid=5878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8" name="bus" dev="overlay" ino=31 res=0 errno=0 [ 76.649465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.710414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.719119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.727439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.736218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.745090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 77.309826][ T50] Bluetooth: hci0: command tx timeout [ 77.315457][ T50] Bluetooth: hci1: command tx timeout [ 77.323428][ T50] Bluetooth: hci2: command tx timeout [ 77.330685][ T50] Bluetooth: hci3: command tx timeout [ 77.784944][ T5896] syz.3.10[5896]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.833389][ T5896] loop3: detected capacity change from 0 to 1024 [ 79.779806][ T5900] loop1: detected capacity change from 0 to 64 [ 80.007795][ T5901] netlink: 'syz.1.13': attribute type 16 has an invalid length. [ 80.020621][ T5901] netlink: 'syz.1.13': attribute type 17 has an invalid length. [ 81.500095][ T5920] netlink: set zone limit has 8 unknown bytes [ 82.081838][ T23] cfg80211: failed to load regulatory.db [ 82.150343][ T5754] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.431623][ T5754] usb 3-1: Using ep0 maxpacket: 32 [ 82.464106][ T5754] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 82.480696][ T5930] loop3: detected capacity change from 0 to 2048 [ 82.494759][ T5754] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 82.538823][ T5754] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 82.562240][ T5930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.585135][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 82.670664][ T5754] usb 3-1: Product: syz [ 82.674917][ T5754] usb 3-1: Manufacturer: syz [ 82.680241][ T5754] usb 3-1: SerialNumber: syz [ 82.702483][ T5754] usb 3-1: config 0 descriptor?? [ 82.720356][ T5908] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 83.988366][ T5939] sched: RT throttling activated [ 84.798974][ T5816] usb 3-1: USB disconnect, device number 2 [ 86.328856][ T5961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 87.821530][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.833636][ T5969] netlink: set zone limit has 8 unknown bytes [ 88.050821][ T5976] loop0: detected capacity change from 0 to 256 [ 88.493064][ T5979] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 88.502965][ T5979] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 89.554446][ T5985] loop0: detected capacity change from 0 to 1764 [ 90.612019][ T5754] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.966907][ T5754] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.071369][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.134780][ T5754] usb 1-1: Product: syz [ 91.147614][ T5754] usb 1-1: Manufacturer: syz [ 91.172894][ T5754] usb 1-1: SerialNumber: syz [ 91.185022][ T5981] loop2: detected capacity change from 0 to 32768 [ 91.215856][ T5754] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.289986][ T5816] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.305697][ T5981] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.37 (5981) [ 91.380434][ T5981] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 91.426299][ T5981] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 91.493861][ T5981] BTRFS info (device loop2): force clearing of disk cache [ 91.561536][ T5981] BTRFS info (device loop2): turning off barriers [ 91.569393][ T5981] BTRFS info (device loop2): disabling free space tree [ 91.662540][ T5981] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 91.739850][ T5981] BTRFS info (device loop2): use zstd compression, level 3 [ 91.935388][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 91.973089][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 91.985863][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.009592][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 92.027608][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 92.043512][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 92.066608][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 92.083448][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 92.102871][ T5981] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 92.123366][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.293817][ T8] usb 1-1: USB disconnect, device number 2 [ 92.398055][ T5981] BTRFS error (device loop2): open_ctree failed: -12 [ 92.408850][ T5816] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 92.439116][ T5816] ath9k_htc: Failed to initialize the device [ 92.447462][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 92.967870][ T6028] netlink: set zone limit has 8 unknown bytes [ 95.521291][ T6023] loop1: detected capacity change from 0 to 40427 [ 95.566937][ T6023] F2FS-fs (loop1): heap/no_heap options were deprecated [ 95.575034][ T6023] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 96.280763][ T6062] netlink: set zone limit has 8 unknown bytes [ 98.293331][ T6069] overlayfs: workdir and upperdir must be separate subtrees [ 104.942719][ T6116] loop3: detected capacity change from 0 to 128 [ 104.995042][ T6116] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 105.013157][ T6116] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.010641][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 111.548211][ T6171] syz.0.89 (6171) used greatest stack depth: 17032 bytes left [ 112.544123][ T6182] loop2: detected capacity change from 0 to 164 [ 112.591150][ T6182] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 112.619276][ T6182] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.552114][ T6215] loop3: detected capacity change from 0 to 164 [ 116.627687][ T6215] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 116.695771][ T6215] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 118.396006][ T6230] loop3: detected capacity change from 0 to 256 [ 118.403480][ T6230] exfat: Deprecated parameter 'utf8' [ 118.449705][ T6230] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 127.815690][ T6308] loop2: detected capacity change from 0 to 164 [ 127.994402][ T6311] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 128.227444][ T6315] loop3: detected capacity change from 0 to 256 [ 133.078543][ T6345] loop3: detected capacity change from 0 to 164 [ 133.193727][ T6346] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 133.214510][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.928944][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.094495][ T6387] loop0: detected capacity change from 0 to 256 [ 138.102379][ T6387] exfat: Deprecated parameter 'utf8' [ 138.160948][ T6387] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 138.190919][ T6388] loop2: detected capacity change from 0 to 164 [ 138.307202][ T6389] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 139.692328][ T6401] loop2: detected capacity change from 0 to 128 [ 139.771493][ T6401] vxfs: unsupported VxFS version (2066843062) [ 142.110355][ T6416] overlayfs: failed to resolve './file0': -2 [ 143.970623][ T6435] loop2: detected capacity change from 0 to 256 [ 144.072836][ T6435] exfat: Deprecated parameter 'utf8' [ 144.118740][ T6435] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 145.936574][ T6449] overlayfs: failed to resolve './file0': -2 [ 146.257769][ T6452] loop2: detected capacity change from 0 to 128 [ 146.326875][ T6452] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.426503][ T6452] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 147.341669][ T6464] loop3: detected capacity change from 0 to 128 [ 147.389045][ T6464] vxfs: unsupported VxFS version (2066843062) [ 148.390758][ T6477] loop0: detected capacity change from 0 to 256 [ 148.398481][ T6477] exfat: Deprecated parameter 'utf8' [ 148.428133][ T6477] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 149.053765][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.136169][ T6496] overlayfs: failed to resolve './file0': -2 [ 152.193472][ T6508] loop0: detected capacity change from 0 to 256 [ 153.918391][ T6516] loop3: detected capacity change from 0 to 256 [ 153.929298][ T6516] exfat: Deprecated parameter 'utf8' [ 153.964270][ T6516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 154.027719][ T6519] loop1: detected capacity change from 0 to 128 [ 154.165244][ T6519] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.233248][ T6519] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 156.919694][ T6539] overlayfs: failed to resolve './file1': -2 [ 157.774757][ T6544] overlayfs: failed to resolve './file1/file0': -2 [ 159.493507][ T6555] loop0: detected capacity change from 0 to 164 [ 161.114797][ T6563] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.191113][ T6565] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.338774][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.248813][ T6571] netlink: set zone limit has 8 unknown bytes [ 163.629554][ T6589] overlayfs: failed to resolve './file1': -2 [ 165.179075][ T5802] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 166.788866][ T5802] usb 2-1: Using ep0 maxpacket: 32 [ 166.948207][ T5802] usb 2-1: device descriptor read/all, error -71 [ 167.027270][ T6611] loop2: detected capacity change from 0 to 128 [ 167.217070][ T6611] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.275677][ T6611] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.441734][ T6637] netlink: set zone limit has 8 unknown bytes [ 169.113919][ T6636] overlayfs: failed to resolve './file1': -2 [ 170.142231][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.978933][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 172.261514][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 172.350952][ T5854] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 172.371448][ T5854] usb 3-1: config 0 has no interface number 0 [ 172.387719][ T5854] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 172.407235][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.607691][ T5854] usb 3-1: Product: syz [ 172.612589][ T5854] usb 3-1: Manufacturer: syz [ 172.617230][ T5854] usb 3-1: SerialNumber: syz [ 172.631209][ T5854] usb 3-1: config 0 descriptor?? [ 172.640203][ T5854] smsc95xx v2.0.0 [ 172.746886][ T6669] netlink: set zone limit has 8 unknown bytes [ 174.178042][ T6676] loop2: detected capacity change from 0 to 16 [ 174.228021][ T6676] erofs: (device loop2): erofs_read_superblock: dirblkbits 2 isn't supported [ 174.248740][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 175.569951][ T6689] netlink: set zone limit has 8 unknown bytes [ 175.694570][ T5854] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 175.766024][ T5854] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 176.192502][ T5854] usb 3-1: USB disconnect, device number 3 [ 178.129424][ T5801] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 178.414409][ T5801] usb 2-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 178.547464][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.826351][ T5801] usb 2-1: config 0 descriptor?? [ 179.023117][ T5801] gspca_main: tv8532-2.14.0 probing 0545:808b [ 180.697616][ T6713] loop2: detected capacity change from 0 to 164 [ 181.619992][ T5801] usb 2-1: USB disconnect, device number 4 [ 181.886888][ T6715] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 181.933683][ T6718] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 182.055694][ T6725] netlink: set zone limit has 8 unknown bytes [ 183.038815][ T5853] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.788695][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 184.790529][ T5853] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 184.807552][ T5853] usb 3-1: config 0 has no interface number 0 [ 184.819999][ T5853] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 184.848801][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.867155][ T5853] usb 3-1: Product: syz [ 184.872671][ T5853] usb 3-1: Manufacturer: syz [ 184.887605][ T5853] usb 3-1: SerialNumber: syz [ 184.901269][ T5853] usb 3-1: config 0 descriptor?? [ 184.941123][ T5853] smsc95xx v2.0.0 [ 185.392514][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 186.032962][ T6752] loop2: detected capacity change from 0 to 16 [ 186.080603][ T6752] erofs: (device loop2): erofs_read_superblock: dirblkbits 2 isn't supported [ 186.098793][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 187.535135][ T5853] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 187.554631][ T5853] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 187.562965][ T6763] loop2: detected capacity change from 0 to 164 [ 187.571832][ T5853] usb 3-1: USB disconnect, device number 4 [ 189.468495][ T6768] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 189.493573][ T6763] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 191.144859][ T6785] loop1: detected capacity change from 0 to 128 [ 191.320079][ T6785] vxfs: unsupported VxFS version (2066843062) [ 191.638950][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 191.650726][ T5768] Bluetooth: hci1: command 0x0406 tx timeout [ 191.657201][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 191.667075][ T5768] Bluetooth: hci0: command 0x0406 tx timeout [ 192.634179][ T5890] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 192.842782][ T6798] loop3: detected capacity change from 0 to 47 [ 192.850196][ T6798] ======================================================= [ 192.850196][ T6798] WARNING: The mand mount option has been deprecated and [ 192.850196][ T6798] and is ignored by this kernel. Remove the mand [ 192.850196][ T6798] option from the mount to silence this warning. [ 192.850196][ T6798] ======================================================= [ 192.896456][ T5890] usb 1-1: Using ep0 maxpacket: 32 [ 192.920234][ T5890] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.928371][ T5890] usb 1-1: config 0 has no interface number 0 [ 194.009667][ T5890] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 194.019550][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.028672][ T5890] usb 1-1: Product: syz [ 194.123620][ T5890] usb 1-1: Manufacturer: syz [ 194.136473][ T5890] usb 1-1: SerialNumber: syz [ 194.169583][ T5890] usb 1-1: config 0 descriptor?? [ 194.205617][ T5890] smsc95xx v2.0.0 [ 194.952169][ T6812] loop0: detected capacity change from 0 to 16 [ 196.177685][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.194573][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.373671][ T6812] erofs: (device loop0): erofs_read_superblock: dirblkbits 2 isn't supported [ 196.389116][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 198.458023][ T5890] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 198.480117][ T5890] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 198.516100][ T5890] usb 1-1: USB disconnect, device number 3 [ 198.865138][ T6836] loop3: detected capacity change from 0 to 128 [ 198.924662][ T6836] vxfs: unsupported VxFS version (2066843062) [ 199.950875][ T6849] netlink: set zone limit has 8 unknown bytes [ 201.388658][ T5853] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 201.598696][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 201.607260][ T5853] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 201.635905][ T5853] usb 4-1: config 0 has no interface number 0 [ 201.677792][ T5853] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 201.718675][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.726723][ T5853] usb 4-1: Product: syz [ 201.763752][ T5853] usb 4-1: Manufacturer: syz [ 201.780894][ T5853] usb 4-1: SerialNumber: syz [ 201.809477][ T5853] usb 4-1: config 0 descriptor?? [ 201.840137][ T5853] smsc95xx v2.0.0 [ 202.601629][ T6869] loop3: detected capacity change from 0 to 16 [ 203.213020][ T6869] erofs: (device loop3): erofs_read_superblock: dirblkbits 2 isn't supported [ 204.212460][ T789] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 204.419025][ T5755] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.593953][ T5853] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 204.644601][ T789] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 204.677415][ T5853] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 204.684628][ T789] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 204.725087][ T5853] usb 4-1: USB disconnect, device number 2 [ 204.758847][ T789] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 204.793937][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.817500][ T789] usb 1-1: Product: syz [ 204.836364][ T789] usb 1-1: Manufacturer: syz [ 204.877796][ T789] usb 1-1: SerialNumber: syz [ 204.935759][ T789] usb 1-1: config 0 descriptor?? [ 204.954706][ T6864] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.066411][ T6891] netlink: set zone limit has 8 unknown bytes [ 205.300201][ T6864] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 205.639598][ T789] usb 1-1: ucan: probing device on interface #0 [ 205.653787][ T789] usb 1-1: ucan: invalid EP count (1) [ 205.709430][ T789] usb 1-1: ucan: probe failed; try to update the device firmware [ 205.881205][ T789] usb 1-1: USB disconnect, device number 4 [ 210.278989][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 210.918708][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 210.942202][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 210.967836][ T9] usb 2-1: config 0 has no interface number 0 [ 211.189335][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.198477][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.206590][ T9] usb 2-1: Product: syz [ 211.210805][ T9] usb 2-1: Manufacturer: syz [ 211.215430][ T9] usb 2-1: SerialNumber: syz [ 211.223260][ T9] usb 2-1: config 0 descriptor?? [ 211.239358][ T9] smsc95xx v2.0.0 [ 211.365568][ T6933] loop0: detected capacity change from 0 to 128 [ 211.383598][ T6933] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.408029][ T6933] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.687247][ T6940] loop1: detected capacity change from 0 to 16 [ 212.810665][ T6940] erofs: (device loop1): erofs_read_superblock: dirblkbits 2 isn't supported [ 212.871780][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 212.922667][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 212.934938][ T5755] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 214.131500][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 214.142078][ T9] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 214.178910][ T9] usb 2-1: USB disconnect, device number 5 [ 214.402422][ T6953] loop3: detected capacity change from 0 to 164 [ 215.374748][ T6956] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 215.444700][ T6958] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 217.798724][ T789] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 218.698926][ T789] usb 1-1: Using ep0 maxpacket: 32 [ 218.733290][ T789] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 218.772432][ T789] usb 1-1: config 0 has no interface number 0 [ 218.788850][ T789] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 218.801583][ T789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.811081][ T789] usb 1-1: Product: syz [ 218.815381][ T789] usb 1-1: Manufacturer: syz [ 218.824446][ T789] usb 1-1: SerialNumber: syz [ 218.835727][ T789] usb 1-1: config 0 descriptor?? [ 218.909365][ T789] smsc95xx v2.0.0 [ 220.207215][ T6992] loop0: detected capacity change from 0 to 16 [ 220.275356][ T6992] erofs: (device loop0): erofs_read_superblock: dirblkbits 2 isn't supported [ 220.287513][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 220.465588][ T6998] loop1: detected capacity change from 0 to 164 [ 221.286627][ T6999] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 221.386022][ T789] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 221.400419][ T789] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 221.412942][ T789] usb 1-1: USB disconnect, device number 5 [ 221.455085][ T7003] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 222.992188][ T7020] loop1: detected capacity change from 0 to 128 [ 223.007401][ T7020] vxfs: unsupported VxFS version (2066843062) [ 223.085697][ T6879] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 225.191169][ T7039] loop0: detected capacity change from 0 to 164 [ 225.359437][ T5802] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 226.932219][ T7045] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 226.945138][ T7045] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 226.953091][ T5831] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 226.998911][ T5802] usb 4-1: Using ep0 maxpacket: 32 [ 227.177192][ T5802] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.210443][ T5802] usb 4-1: config 0 has no interface number 0 [ 227.246691][ T5802] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.281339][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.289594][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 227.298489][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.318850][ T5831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.338776][ T5802] usb 4-1: Product: syz [ 227.343100][ T5802] usb 4-1: Manufacturer: syz [ 227.347751][ T5831] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.360697][ T5802] usb 4-1: SerialNumber: syz [ 227.373554][ T5802] usb 4-1: config 0 descriptor?? [ 227.388847][ T5831] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.398058][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.407771][ T5802] smsc95xx v2.0.0 [ 227.440635][ T5831] usb 2-1: config 0 descriptor?? [ 227.666229][ T7042] loop1: detected capacity change from 0 to 16 [ 228.528267][ T7060] loop3: detected capacity change from 0 to 16 [ 229.493687][ T7042] erofs: (device loop1): mounted with root inode @ nid 36. [ 229.513802][ T7060] erofs: (device loop3): erofs_read_superblock: dirblkbits 2 isn't supported [ 230.132596][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.143403][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.153742][ T7064] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 230.163050][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.172756][ T7064] erofs: (device loop1): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 230.182126][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.191860][ T7064] erofs: (device loop1): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 230.201183][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.210870][ T7064] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 230.220314][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.230031][ T7064] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 230.240360][ T7064] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 230.287344][ T28] audit: type=1800 audit(1750766637.266:3): pid=7064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.322" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 230.438230][ T5802] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 230.508695][ T5755] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.535741][ T5802] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 230.551520][ T5831] usbhid 2-1:0.0: can't add hid device: -71 [ 230.590607][ T5831] usbhid: probe of 2-1:0.0 failed with error -71 [ 230.651162][ T5802] usb 4-1: USB disconnect, device number 3 [ 230.707626][ T5831] usb 2-1: USB disconnect, device number 6 [ 232.106764][ T7085] overlayfs: missing 'lowerdir' [ 234.728846][ T5831] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 235.504792][ T5831] usb 4-1: Using ep0 maxpacket: 32 [ 235.524768][ T5831] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 235.540048][ T5831] usb 4-1: config 0 has no interface number 0 [ 235.556978][ T5831] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 235.760864][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.774896][ T5831] usb 4-1: Product: syz [ 235.779584][ T5831] usb 4-1: Manufacturer: syz [ 235.784287][ T5831] usb 4-1: SerialNumber: syz [ 236.538132][ T7116] loop0: detected capacity change from 0 to 32768 [ 236.553890][ T7116] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.339 (7116) [ 236.979060][ T5831] usb 4-1: config 0 descriptor?? [ 236.992042][ T5831] smsc95xx v2.0.0 [ 237.019004][ T7116] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 237.049714][ T7116] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 237.058436][ T7116] BTRFS info (device loop0): force clearing of disk cache [ 237.090886][ T7116] BTRFS info (device loop0): doing ref verification [ 237.113179][ T7116] BTRFS info (device loop0): use zlib compression, level 3 [ 237.129611][ T7116] BTRFS info (device loop0): setting nodatacow, compression disabled [ 237.148133][ T7116] BTRFS info (device loop0): disabling tree log [ 237.178837][ T7116] BTRFS info (device loop0): using free space tree [ 237.850794][ T7132] loop3: detected capacity change from 0 to 16 [ 238.980116][ T7132] erofs: (device loop3): erofs_read_superblock: cannot read erofs superblock [ 239.178804][ T5831] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 239.226315][ T5831] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 239.252812][ T7135] loop2: detected capacity change from 0 to 128 [ 239.295750][ T7135] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.312957][ T7135] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.504088][ T5831] usb 4-1: USB disconnect, device number 4 [ 240.117520][ T7116] BTRFS error (device loop0): open_ctree failed: -4 [ 240.154459][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.358073][ T7145] loop2: detected capacity change from 0 to 65 [ 240.436904][ T7145] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 240.489871][ T7145] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop2 [ 243.027042][ T7160] loop1: detected capacity change from 0 to 164 [ 243.179420][ T7165] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 243.249425][ T7167] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 245.192182][ T7175] loop3: detected capacity change from 0 to 128 [ 245.386424][ T7175] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.401590][ T7175] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.293967][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 249.889451][ T7214] loop2: detected capacity change from 0 to 164 [ 249.972870][ T7214] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 250.037639][ T7220] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 250.172315][ T7223] loop1: detected capacity change from 0 to 128 [ 250.195019][ T7223] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.209417][ T7223] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 251.603558][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.936127][ T7242] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 252.944107][ T7242] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'. [ 253.728453][ T7242] team0: Port device geneve0 added [ 254.648082][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 254.911334][ T7264] loop2: detected capacity change from 0 to 164 [ 255.021276][ T7263] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.090779][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.287519][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.294981][ T7263] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 256.607088][ T7274] loop3: detected capacity change from 0 to 128 [ 256.625517][ T7274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.640760][ T7274] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 259.581774][ T7293] netlink: set zone limit has 8 unknown bytes [ 259.810799][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.187548][ T7299] loop2: detected capacity change from 0 to 128 [ 260.247549][ T7299] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.420249][ T7299] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.215348][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.362110][ T7323] loop0: detected capacity change from 0 to 128 [ 263.410999][ T7323] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.426969][ T7323] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.794482][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.132061][ T7339] overlayfs: failed to resolve './file1/file0': -2 [ 266.872819][ T7354] loop0: detected capacity change from 0 to 164 [ 266.959405][ T7354] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 267.023208][ T7356] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 267.248949][ T7357] netlink: set zone limit has 8 unknown bytes [ 271.607878][ T7386] loop0: detected capacity change from 0 to 256 [ 271.775507][ T7382] loop1: detected capacity change from 0 to 1024 [ 272.118292][ T7392] loop0: detected capacity change from 0 to 164 [ 272.374650][ T7392] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 272.615189][ T7392] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 274.886390][ T5802] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.043725][ T28] audit: type=1800 audit(1750766682.016:4): pid=7420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.410" name="bus" dev="overlay" ino=584 res=0 errno=0 [ 275.289527][ T5802] usb 1-1: Using ep0 maxpacket: 16 [ 275.601459][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.612597][ T7424] loop3: detected capacity change from 0 to 64 [ 275.628618][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.638414][ T5802] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.651310][ T5802] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.660521][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.673376][ T5802] usb 1-1: config 0 descriptor?? [ 275.907042][ T7426] loop1: detected capacity change from 0 to 1024 [ 276.591577][ T7429] netlink: 'syz.3.412': attribute type 16 has an invalid length. [ 276.599695][ T7429] netlink: 'syz.3.412': attribute type 17 has an invalid length. [ 276.853230][ T7411] loop0: detected capacity change from 0 to 16 [ 277.017287][ T7411] erofs: (device loop0): mounted with root inode @ nid 36. [ 277.517590][ T7434] loop1: detected capacity change from 0 to 128 [ 277.691499][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.701729][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.711413][ T7436] erofs: (device loop0): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 277.720698][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.730380][ T7436] erofs: (device loop0): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 277.758857][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.768638][ T7436] erofs: (device loop0): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 277.777992][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.787840][ T7436] erofs: (device loop0): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 277.797259][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.807012][ T7436] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 277.816815][ T7436] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 278.008750][ T28] audit: type=1800 audit(1750766684.836:5): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.409" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 278.059937][ T7434] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.072906][ T7434] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.395042][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.628735][ T7444] loop2: detected capacity change from 0 to 164 [ 279.973642][ T5802] usbhid 1-1:0.0: can't add hid device: -71 [ 280.160298][ T5802] usbhid: probe of 1-1:0.0 failed with error -71 [ 280.169347][ T5802] usb 1-1: USB disconnect, device number 6 [ 280.213595][ T7444] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 280.274537][ T7454] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 282.116788][ T7473] loop3: detected capacity change from 0 to 128 [ 282.145753][ T7473] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 282.251060][ T7473] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.749747][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.383261][ T7487] overlayfs: failed to resolve './file1': -2 [ 283.479495][ T7488] (null): rxe_set_mtu: Set mtu to 4096 [ 283.491397][ T7488] lo speed is unknown, defaulting to 1000 [ 283.512411][ T7488] lo speed is unknown, defaulting to 1000 [ 283.529390][ T7488] lo speed is unknown, defaulting to 1000 [ 284.104332][ T7488] infiniband sz1: set active [ 284.109575][ T7488] infiniband sz1: added lo [ 284.122952][ T5802] lo speed is unknown, defaulting to 1000 [ 284.152688][ T7493] loop1: detected capacity change from 0 to 2048 [ 284.175281][ T7488] RDS/IB: sz1: added [ 284.180018][ T7488] smc: adding ib device sz1 with port count 1 [ 284.186396][ T7488] smc: ib device sz1 port 1 has pnetid [ 284.195752][ T7488] lo speed is unknown, defaulting to 1000 [ 284.286975][ T7488] lo speed is unknown, defaulting to 1000 [ 284.373715][ T7488] lo speed is unknown, defaulting to 1000 [ 284.462381][ T7488] lo speed is unknown, defaulting to 1000 [ 284.485391][ T5802] lo speed is unknown, defaulting to 1000 [ 284.663502][ T7493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 286.215069][ T7509] loop3: detected capacity change from 0 to 164 [ 286.300286][ T7509] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 287.544397][ T7517] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 288.661452][ T7525] loop2: detected capacity change from 0 to 128 [ 288.689088][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.693077][ T7529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 288.701821][ T7525] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.728822][ T7525] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.762029][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.272716][ T7558] loop3: detected capacity change from 0 to 164 [ 293.409167][ T7558] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 293.472942][ T7558] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 293.812776][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'. [ 298.931428][ T7611] loop0: detected capacity change from 0 to 164 [ 298.957058][ T7613] loop2: detected capacity change from 0 to 256 [ 298.997942][ T7611] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 299.067132][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 299.352667][ T7621] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 300.850665][ T7633] Zero length message leads to an empty skb [ 304.320836][ T7662] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 305.699823][ T7672] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 307.818319][ T7684] loop0: detected capacity change from 0 to 128 [ 307.890435][ T7684] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.913837][ T7682] loop1: detected capacity change from 0 to 1024 [ 307.920416][ T7684] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.315723][ T7682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.602104][ T28] audit: type=1800 audit(1750766715.616:6): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 308.925139][ T28] audit: type=1804 audit(1750766715.936:7): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.476" name="/newroot/108/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 309.068902][ T28] audit: type=1800 audit(1750766715.966:8): pid=7695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.476" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 309.113023][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 309.133025][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.494244][ T7723] netlink: set zone limit has 8 unknown bytes [ 311.879095][ T7730] loop0: detected capacity change from 0 to 128 [ 311.912909][ T7730] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 311.925437][ T7730] ext4 filesystem being mounted at /132/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 312.519692][ T7735] loop3: detected capacity change from 0 to 164 [ 312.631973][ T7736] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 312.740498][ T7738] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 312.824613][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 316.954630][ T7769] loop0: detected capacity change from 0 to 128 [ 317.002420][ T7766] loop2: detected capacity change from 0 to 1764 [ 317.028969][ T7769] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.051843][ T7769] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 317.133846][ T7766] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 317.212820][ T7772] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 317.291871][ T7766] block device autoloading is deprecated and will be removed. [ 317.311901][ T7766] syz.2.497: attempt to access beyond end of device [ 317.311901][ T7766] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.532734][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.539291][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.587194][ T7780] netlink: set zone limit has 8 unknown bytes [ 317.638616][ T789] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 318.020463][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.239367][ T789] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.255953][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.278579][ T789] usb 3-1: Product: syz [ 318.282813][ T789] usb 3-1: Manufacturer: syz [ 318.287449][ T789] usb 3-1: SerialNumber: syz [ 318.297434][ T789] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.333887][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.458954][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 319.522166][ T9] ath9k_htc: Failed to initialize the device [ 319.930350][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 319.988737][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.997505][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.135828][ T789] usb 3-1: USB disconnect, device number 5 [ 320.991347][ T7798] loop3: detected capacity change from 0 to 256 [ 321.404106][ T7808] loop2: detected capacity change from 0 to 128 [ 321.453315][ T7808] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.466532][ T7808] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 322.317947][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.518243][ T7819] loop3: detected capacity change from 0 to 1024 [ 324.244842][ T7829] loop2: detected capacity change from 0 to 256 [ 325.216578][ T7835] netlink: set zone limit has 8 unknown bytes [ 325.436161][ T7836] loop3: detected capacity change from 0 to 512 [ 325.813333][ T7836] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 326.338747][ T6879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 329.275535][ T7862] loop2: detected capacity change from 0 to 1024 [ 329.946194][ T7873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.526'. [ 330.618780][ T7878] netlink: set zone limit has 8 unknown bytes [ 331.676567][ T7889] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.684972][ T7889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.804754][ T7889] loop2: detected capacity change from 0 to 128 [ 332.221481][ T5854] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 332.632254][ T7889] syz.2.532: attempt to access beyond end of device [ 332.632254][ T7889] loop2: rw=2049, sector=145, nr_sectors = 272 limit=128 [ 332.703803][ T5854] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 332.713006][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.730466][ T5854] usb 1-1: config 0 descriptor?? [ 333.065198][ T7905] loop1: detected capacity change from 0 to 1024 [ 334.753050][ T5854] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 334.760916][ T5854] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 334.768006][ T5854] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 334.775858][ T5854] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 334.786140][ T5854] macally 0003:060B:0001.0001: unknown main item tag 0x0 [ 334.799053][ T59] kworker/u4:4: attempt to access beyond end of device [ 334.799053][ T59] loop2: rw=1, sector=145, nr_sectors = 272 limit=128 [ 334.829871][ T5854] macally 0003:060B:0001.0001: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.0-1/input0 [ 334.982982][ T9] usb 1-1: USB disconnect, device number 7 [ 335.566402][ T7909] fido_id[7909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 338.220887][ T7926] netlink: set zone limit has 8 unknown bytes [ 338.274900][ T7930] loop1: detected capacity change from 0 to 164 [ 338.762744][ T7936] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 338.828934][ T7940] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 340.424312][ T7962] loop3: detected capacity change from 0 to 1024 [ 344.196663][ T7978] loop0: detected capacity change from 0 to 164 [ 345.308583][ T7986] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 345.459625][ T7986] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 348.237286][ T8014] loop0: detected capacity change from 0 to 1024 [ 352.818598][ T6875] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 353.000819][ T6875] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 353.020279][ T6875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.072933][ T6875] usb 1-1: config 0 descriptor?? [ 353.904504][ T6875] macally 0003:060B:0001.0002: unknown main item tag 0x0 [ 353.920075][ T6875] macally 0003:060B:0001.0002: unknown main item tag 0x0 [ 353.927925][ T6875] macally 0003:060B:0001.0002: unknown main item tag 0x0 [ 353.937179][ T6875] macally 0003:060B:0001.0002: unknown main item tag 0x0 [ 353.946142][ T6875] macally 0003:060B:0001.0002: unknown main item tag 0x0 [ 353.959059][ T6875] macally 0003:060B:0001.0002: hidraw0: USB HID v0.05 Device [HID 060b:0001] on usb-dummy_hcd.0-1/input0 [ 354.128608][ T5854] usb 1-1: USB disconnect, device number 8 [ 355.328688][ T5890] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 356.178418][ T5890] usb 2-1: Using ep0 maxpacket: 32 [ 356.269294][ T8066] loop0: detected capacity change from 0 to 1024 [ 356.762032][ T5890] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 358.058520][ T8069] loop2: detected capacity change from 0 to 1024 [ 358.299221][ T5890] usb 2-1: config 0 has no interface number 0 [ 358.350361][ T5890] usb 2-1: string descriptor 0 read error: -71 [ 358.356821][ T5890] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 358.367580][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.511490][ T5890] usb 2-1: config 0 descriptor?? [ 359.139416][ T5890] usb 2-1: can't set config #0, error -71 [ 359.769813][ T5890] usb 2-1: USB disconnect, device number 7 [ 360.308672][ T789] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 360.524299][ T789] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 360.569811][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.757287][ T789] usb 1-1: config 0 descriptor?? [ 361.413877][ T789] usbhid 1-1:0.0: can't add hid device: -71 [ 361.417238][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.427062][ T789] usbhid: probe of 1-1:0.0 failed with error -71 [ 361.427192][ T8101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.477819][ T789] usb 1-1: USB disconnect, device number 9 [ 361.521748][ T8101] loop1: detected capacity change from 0 to 128 [ 361.667406][ T8101] syz.1.586: attempt to access beyond end of device [ 361.667406][ T8101] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 361.783384][ T3462] kworker/u4:8: attempt to access beyond end of device [ 361.783384][ T3462] loop1: rw=1, sector=145, nr_sectors = 520 limit=128 [ 361.798631][ T5853] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 362.008757][ T5853] usb 3-1: Using ep0 maxpacket: 32 [ 362.020493][ T5853] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 362.035482][ T5853] usb 3-1: config 0 has no interface number 0 [ 362.052462][ T5853] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 362.062467][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.071369][ T5853] usb 3-1: Product: syz [ 362.076027][ T5853] usb 3-1: Manufacturer: syz [ 362.081219][ T5853] usb 3-1: SerialNumber: syz [ 362.101435][ T5853] usb 3-1: config 0 descriptor?? [ 362.116017][ T5853] smsc95xx v2.0.0 [ 363.282188][ T8118] loop3: detected capacity change from 0 to 1024 [ 364.140944][ T8112] netlink: set zone limit has 8 unknown bytes [ 364.417526][ T8128] loop2: detected capacity change from 0 to 16 [ 364.471003][ T8128] erofs: (device loop2): erofs_read_superblock: dirblkbits 2 isn't supported [ 364.483087][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.587'. [ 366.205275][ T8142] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.212512][ T8142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.417134][ T8146] loop0: detected capacity change from 0 to 128 [ 366.621533][ T8150] loop1: detected capacity change from 0 to 128 [ 366.682724][ T6879] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 366.699901][ T5853] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 366.721393][ T8150] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.740025][ T8150] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.950605][ T8154] netlink: set zone limit has 8 unknown bytes [ 367.648752][ T5853] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 367.669161][ T5853] usb 3-1: USB disconnect, device number 6 [ 367.672115][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 368.889040][ T8169] netlink: set zone limit has 8 unknown bytes [ 371.003453][ T8187] loop0: detected capacity change from 0 to 128 [ 371.050176][ T8187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.080492][ T8187] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 371.578754][ T5754] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 371.854588][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 371.881637][ T5754] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 372.051642][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.078049][ T5754] usb 4-1: config 0 has no interface number 0 [ 372.089525][ T5754] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 372.105963][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.115485][ T5754] usb 4-1: Product: syz [ 372.120579][ T5754] usb 4-1: Manufacturer: syz [ 372.125686][ T5754] usb 4-1: SerialNumber: syz [ 372.301858][ T8204] netlink: set zone limit has 8 unknown bytes [ 372.618041][ T5754] usb 4-1: config 0 descriptor?? [ 372.640363][ T5754] smsc95xx v2.0.0 [ 373.534194][ T8215] netlink: set zone limit has 8 unknown bytes [ 373.726225][ T5802] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 374.270728][ T8219] loop3: detected capacity change from 0 to 16 [ 374.293921][ T5802] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 374.319007][ T8219] erofs: (device loop3): erofs_read_superblock: dirblkbits 2 isn't supported [ 374.348701][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.474741][ T5775] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 374.500677][ T5802] usb 1-1: config 0 descriptor?? [ 374.519928][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 375.806266][ T5754] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 375.826402][ T5754] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 375.834371][ T5802] usbhid 1-1:0.0: can't add hid device: -71 [ 375.840441][ T5802] usbhid: probe of 1-1:0.0 failed with error -71 [ 375.856163][ T5754] usb 4-1: USB disconnect, device number 5 [ 375.864735][ T5802] usb 1-1: USB disconnect, device number 10 [ 376.009680][ T8235] loop3: detected capacity change from 0 to 128 [ 376.032773][ T8235] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.047509][ T8235] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 376.995978][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 377.825220][ T8246] netlink: set zone limit has 8 unknown bytes [ 378.971507][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.268029][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.734786][ T8269] loop1: detected capacity change from 0 to 1024 [ 379.933685][ T8270] loop2: detected capacity change from 0 to 128 [ 380.077730][ T8270] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.093424][ T8270] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.548791][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 380.846827][ T5769] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.988992][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 381.011008][ T5890] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 381.022672][ T5890] usb 4-1: config 0 has no interface number 0 [ 381.035814][ T5890] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 381.045705][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.054428][ T5890] usb 4-1: Product: syz [ 381.059105][ T5890] usb 4-1: Manufacturer: syz [ 381.063726][ T5890] usb 4-1: SerialNumber: syz [ 381.085327][ T5890] usb 4-1: config 0 descriptor?? [ 381.094022][ T5890] smsc95xx v2.0.0 [ 382.174640][ T8291] overlayfs: failed to resolve './file1': -2 [ 383.569453][ T5890] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 383.682252][ T5890] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 383.723255][ T5890] usb 4-1: USB disconnect, device number 6 [ 383.731819][ T8298] netlink: set zone limit has 8 unknown bytes [ 383.767653][ T8300] loop2: detected capacity change from 0 to 256 [ 383.823609][ T8300] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 386.301317][ T8318] loop0: detected capacity change from 0 to 128 [ 386.470011][ T8318] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.482689][ T8318] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.795809][ T5762] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.055896][ T8338] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 389.065932][ T8338] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 389.234265][ T5802] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 389.920697][ T5802] usb 3-1: Using ep0 maxpacket: 32 [ 389.936545][ T5802] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.990824][ T5802] usb 3-1: config 0 has no interface number 0 [ 390.043869][ T5802] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.076131][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.095534][ T8343] input: syz0 as /devices/virtual/input/input5 [ 390.118692][ T5802] usb 3-1: Product: syz [ 390.123219][ T5802] usb 3-1: Manufacturer: syz [ 390.135505][ T5802] usb 3-1: SerialNumber: syz [ 390.161770][ T5802] usb 3-1: config 0 descriptor?? [ 390.177941][ T5802] smsc95xx v2.0.0 [ 391.875331][ T5802] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 391.912880][ T5802] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 391.955810][ T5802] usb 3-1: USB disconnect, device number 7 [ 393.420892][ T8370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 393.429992][ T8370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 393.816645][ T8355] loop2: detected capacity change from 0 to 32768 [ 393.899286][ T8355] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 394.077332][ T8383] loop0: detected capacity change from 0 to 164 [ 394.208562][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 394.420465][ T8388] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 394.433623][ T8388] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 394.873593][ T8355] XFS (loop2): Ending clean mount [ 394.959756][ T5853] usb 4-1: Using ep0 maxpacket: 32 [ 395.142687][ T5853] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 395.378685][ T5853] usb 4-1: config 0 has no interface number 0 [ 395.626096][ T5853] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 395.656585][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.701499][ T5769] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 395.721105][ T5853] usb 4-1: Product: syz [ 395.725334][ T5853] usb 4-1: Manufacturer: syz [ 395.770873][ T5853] usb 4-1: SerialNumber: syz [ 395.819825][ T5853] usb 4-1: config 0 descriptor?? [ 395.840163][ T5853] smsc95xx v2.0.0 [ 396.903030][ T8405] loop3: detected capacity change from 0 to 16 [ 396.982466][ T8405] erofs: (device loop3): erofs_read_superblock: dirblkbits 2 isn't supported [ 397.121204][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 400.274710][ T8426] loop0: detected capacity change from 0 to 2048 [ 400.303669][ T8426] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 400.906762][ T5853] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -110 [ 400.978676][ T5853] smsc95xx: probe of 4-1:0.67 failed with error -110 [ 401.272409][ T8444] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 401.336647][ T5801] usb 4-1: USB disconnect, device number 7 [ 401.386338][ T8448] overlayfs: failed to resolve './file1/file0': -2 [ 403.798646][ T8460] loop3: detected capacity change from 0 to 1024 [ 408.247085][ T8495] loop2: detected capacity change from 0 to 1024 [ 411.390948][ T8512] netlink: set zone limit has 8 unknown bytes [ 413.711249][ T5854] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 413.926733][ T8531] overlayfs: failed to resolve './file1/file0': -2 [ 414.051329][ T5854] usb 1-1: Using ep0 maxpacket: 8 [ 414.115858][ T5854] usb 1-1: config 1 interface 0 has no altsetting 0 [ 414.542104][ T5854] usb 1-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 414.602351][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.714972][ T5854] usb 1-1: Product: syz [ 414.721928][ T5854] usb 1-1: Manufacturer: syz [ 414.726576][ T5854] usb 1-1: SerialNumber: syz [ 414.994758][ T8523] gre0: entered promiscuous mode [ 415.049712][ T8523] gre0: entered allmulticast mode [ 415.093483][ T8539] loop3: detected capacity change from 0 to 1024 [ 416.151753][ T5854] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 [ 416.242460][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 416.254550][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 416.309384][ C1] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 416.317985][ T5854] usb 1-1: USB disconnect, device number 11 [ 417.373269][ T5854] appletouch 1-1:1.0: input: appletouch disconnected [ 418.992725][ T8575] loop3: detected capacity change from 0 to 1024 [ 423.737444][ T8609] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 424.261523][ T8615] loop1: detected capacity change from 0 to 1024 [ 426.914675][ T5890] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 427.065162][ T8624] netlink: set zone limit has 8 unknown bytes [ 427.309507][ T5890] usb 3-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 427.334330][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.358282][ T5890] usb 3-1: config 0 descriptor?? [ 427.385086][ T5890] gspca_main: tv8532-2.14.0 probing 0545:808b [ 428.427831][ T5890] usb 3-1: USB disconnect, device number 8 [ 429.075030][ T8654] loop1: detected capacity change from 0 to 1024 [ 434.437407][ T8692] loop0: detected capacity change from 0 to 1024 [ 438.147696][ T8716] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 439.106384][ T8730] loop2: detected capacity change from 0 to 1024 [ 439.128693][ T5890] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 439.972242][ T5890] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 439.981521][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 439.990114][ T5890] usb 1-1: Product: syz [ 439.994395][ T5890] usb 1-1: Manufacturer: syz [ 440.001147][ T5890] usb 1-1: SerialNumber: syz [ 440.087697][ T5890] usb 1-1: config 0 descriptor?? [ 440.111955][ T5890] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 440.194578][ T5890] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 440.467516][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.478522][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.010721][ T8735] overlayfs: workdir and upperdir must be separate subtrees [ 442.330317][ T8750] xt_nat: multiple ranges no longer supported [ 442.340839][ T8750] (null): rxe_set_mtu: Set mtu to 1024 [ 442.944200][ T8750] infiniband syz2: set down [ 442.948830][ T8750] infiniband syz2: added ipvlan1 [ 442.954847][ T8750] syz2: rxe_create_cq: returned err = -12 [ 442.960963][ T8750] infiniband syz2: Couldn't create ib_mad CQ [ 442.967141][ T8750] infiniband syz2: Couldn't open port 1 [ 442.983764][ T8750] RDS/IB: syz2: added [ 442.987819][ T8750] smc: adding ib device syz2 with port count 1 [ 442.993999][ T8750] smc: ib device syz2 port 1 has pnetid [ 443.475070][ T9] usb 1-1: USB disconnect, device number 12 [ 444.772084][ T8772] loop1: detected capacity change from 0 to 1024 [ 446.300800][ T8778] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.308041][ T8778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.358100][ T8789] overlayfs: workdir and upperdir must be separate subtrees [ 450.742974][ T8822] loop0: detected capacity change from 0 to 1024 [ 451.020134][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.027304][ T8825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.745409][ T8849] overlayfs: workdir and upperdir must be separate subtrees [ 455.037754][ T8868] loop2: detected capacity change from 0 to 1024 [ 459.581472][ T8894] overlayfs: workdir and upperdir must be separate subtrees [ 462.510999][ T8915] loop3: detected capacity change from 0 to 1024 [ 465.961737][ T8939] overlayfs: workdir and upperdir must be separate subtrees [ 467.505098][ T8949] loop1: detected capacity change from 0 to 2048 [ 467.516284][ T8949] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 467.628913][ T8961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'. [ 468.677620][ T8964] loop3: detected capacity change from 0 to 1024 [ 470.412836][ T8961] team0 (unregistering): Port device team_slave_0 removed [ 472.239497][ T8961] team0 (unregistering): Port device team_slave_1 removed [ 472.404535][ T8987] overlayfs: workdir and upperdir must be separate subtrees [ 472.757921][ T8994] xt_nat: multiple ranges no longer supported [ 472.767498][ T8994] (null): rxe_set_mtu: Set mtu to 1024 [ 472.774648][ T8994] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 474.181473][ T9005] loop0: detected capacity change from 0 to 1024 [ 476.593406][ T9021] loop1: detected capacity change from 0 to 2048 [ 476.639516][ T9021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.879760][ T5890] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 477.118883][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 477.153522][ T9037] overlayfs: workdir and upperdir must be separate subtrees [ 477.178636][ T5890] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 477.223136][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.292015][ T9040] loop3: detected capacity change from 0 to 1024 [ 477.544232][ T5890] usb 3-1: config 0 descriptor?? [ 478.924078][ T5890] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 479.064240][ T5890] asix: probe of 3-1:0.0 failed with error -71 [ 479.120586][ T5890] usb 3-1: USB disconnect, device number 9 [ 479.495387][ T9051] netlink: set zone limit has 8 unknown bytes [ 481.993477][ T9078] loop1: detected capacity change from 0 to 1024 [ 482.488395][ T9077] loop2: detected capacity change from 0 to 164 [ 482.804565][ T9079] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 482.854904][ T9084] overlayfs: workdir and upperdir must be separate subtrees [ 482.872787][ T9085] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 483.338591][ T5890] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 484.789701][ T5854] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 485.069931][ T5854] usb 3-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 485.167197][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.293114][ T5854] usb 3-1: config 0 descriptor?? [ 485.507008][ T5854] gspca_main: tv8532-2.14.0 probing 0545:808b [ 487.401672][ T6875] usb 3-1: USB disconnect, device number 10 [ 487.489657][ T9116] netlink: set zone limit has 8 unknown bytes [ 488.435261][ T9128] loop3: detected capacity change from 0 to 1024 [ 490.054393][ T9131] loop0: detected capacity change from 0 to 164 [ 490.995339][ T9134] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 492.495882][ T9131] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 493.068747][ T5890] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 493.586956][ T9157] overlayfs: workdir and upperdir must be separate subtrees [ 493.685856][ T5890] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 493.712219][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 493.740544][ T5890] usb 3-1: Product: syz [ 493.765921][ T5890] usb 3-1: Manufacturer: syz [ 493.785336][ T5890] usb 3-1: SerialNumber: syz [ 493.803130][ T5890] usb 3-1: config 0 descriptor?? [ 493.811369][ T5890] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 493.837445][ T5890] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 495.511433][ T9179] netlink: set zone limit has 8 unknown bytes [ 496.403628][ T5754] usb 3-1: USB disconnect, device number 11 [ 499.643950][ T9207] overlayfs: workdir and upperdir must be separate subtrees [ 501.628027][ T9221] netlink: set zone limit has 8 unknown bytes [ 501.738690][ T5802] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 501.857138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.868367][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.182285][ T5802] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 502.240134][ T5802] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 502.309579][ T5802] usb 4-1: Product: syz [ 502.321113][ T5802] usb 4-1: Manufacturer: syz [ 502.325801][ T5802] usb 4-1: SerialNumber: syz [ 502.399358][ T5802] usb 4-1: config 0 descriptor?? [ 502.410898][ T5802] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 502.421213][ T5802] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 505.860101][ T6875] usb 4-1: USB disconnect, device number 8 [ 505.986042][ T9252] overlayfs: workdir and upperdir must be separate subtrees [ 506.436689][ T9260] netlink: set zone limit has 8 unknown bytes [ 511.483095][ T9303] netlink: set zone limit has 8 unknown bytes [ 512.438608][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 512.598259][ T9310] overlayfs: workdir and upperdir must be separate subtrees [ 512.668813][ T9] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 512.706889][ T9] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 512.748710][ T9] usb 4-1: Product: syz [ 512.931910][ T9] usb 4-1: Manufacturer: syz [ 513.007493][ T9] usb 4-1: SerialNumber: syz [ 513.042470][ T9] usb 4-1: config 0 descriptor?? [ 513.081022][ T9] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 513.116047][ T9] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 514.839390][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 515.136032][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 515.166153][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.481327][ T9] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 515.563560][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.924136][ T9] usb 3-1: config 0 descriptor?? [ 516.074495][ T6875] usb 4-1: USB disconnect, device number 9 [ 516.494899][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 516.505460][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 516.542764][ T9] usb 3-1: USB disconnect, device number 12 [ 520.178536][ T6875] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 522.357884][ T9376] loop0: detected capacity change from 0 to 40427 [ 522.752014][ T9376] F2FS-fs (loop0): Unrecognized mount option "18446744073709551615" or missing value [ 522.849310][ T6875] usb 3-1: unable to read config index 0 descriptor/all [ 522.976805][ T6875] usb 3-1: can't read configurations, error -71 [ 524.631430][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 525.948569][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 526.051112][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 526.088801][ T9] usb 2-1: config 0 has no interface number 0 [ 526.111560][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 526.138465][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.309255][ T9] usb 2-1: Product: syz [ 526.314416][ T9] usb 2-1: Manufacturer: syz [ 526.331687][ T9] usb 2-1: SerialNumber: syz [ 526.362857][ T9] usb 2-1: config 0 descriptor?? [ 526.513815][ T9] smsc95xx v2.0.0 [ 527.026202][ T9391] loop1: detected capacity change from 0 to 16 [ 527.046552][ T9391] erofs: (device loop1): erofs_read_superblock: dirblkbits 2 isn't supported [ 527.182065][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 527.250975][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 527.778674][ T9] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 527.806683][ T9] usb 2-1: USB disconnect, device number 9 [ 528.084113][ T9417] batman_adv: batadv0: Adding interface: dummy0 [ 528.210085][ T9417] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.235323][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.429219][ T9417] batman_adv: batadv0: Interface activated: dummy0 [ 528.610827][ T9419] batadv0: mtu less than device minimum [ 528.741921][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.758220][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.769778][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.781230][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.792651][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.804050][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.815477][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.826962][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 528.838409][ T9419] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 533.558668][ T9451] loop2: detected capacity change from 0 to 256 [ 533.648684][ T5802] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 535.271739][ T5802] usb 2-1: device descriptor read/all, error -71 [ 538.314711][ T9478] loop3: detected capacity change from 0 to 32768 [ 538.343343][ T9478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.944 (9478) [ 538.560839][ T9478] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 538.590058][ T9478] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 538.623318][ T9478] BTRFS info (device loop3): enabling auto defrag [ 538.638537][ T9478] BTRFS info (device loop3): metadata ratio 0 [ 538.644700][ T9478] BTRFS info (device loop3): enabling ssd optimizations [ 538.678550][ T9478] BTRFS info (device loop3): using spread ssd allocation scheme [ 538.686288][ T9478] BTRFS info (device loop3): using free space tree [ 539.670458][ T9507] net_ratelimit: 10 callbacks suppressed [ 539.670475][ T9507] netlink: set zone limit has 8 unknown bytes [ 540.449074][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 540.551303][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 540.611972][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 540.676898][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 540.735315][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 540.941187][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 540.982126][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 541.104022][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 541.154661][ T9478] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 541.427160][ T9478] BTRFS error (device loop3): open_ctree failed: -12 [ 541.453038][ T6879] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (6879) [ 545.324513][ T789] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 545.392984][ T9566] overlayfs: failed to resolve './file1/file0': -2 [ 545.654133][ T789] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 545.813165][ T789] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 545.920840][ T789] usb 3-1: Product: syz [ 545.925068][ T789] usb 3-1: Manufacturer: syz [ 546.128480][ T789] usb 3-1: SerialNumber: syz [ 546.786376][ T789] usb 3-1: config 0 descriptor?? [ 546.795256][ T789] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 546.804987][ T789] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 548.023317][ T9] usb 3-1: USB disconnect, device number 15 [ 552.338865][ T9623] xt_nat: multiple ranges no longer supported [ 552.568926][ T9560] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 553.459060][ T9560] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 553.518543][ T9560] usb 2-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 553.526793][ T9560] usb 2-1: Product: syz [ 553.531650][ T9560] usb 2-1: Manufacturer: syz [ 553.536826][ T9560] usb 2-1: SerialNumber: syz [ 553.626237][ T9560] usb 2-1: config 0 descriptor?? [ 553.640899][ T9560] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 553.650940][ T9560] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 554.006588][ T9642] loop2: detected capacity change from 0 to 1024 [ 556.352147][ T9] usb 2-1: USB disconnect, device number 12 [ 556.847714][ T9669] xt_nat: multiple ranges no longer supported [ 558.330597][ T9682] loop3: detected capacity change from 0 to 1024 [ 558.759234][ T9686] process 'syz.0.992' launched '/dev/fd/3' with NULL argv: empty string added [ 559.157767][ T9689] loop0: detected capacity change from 0 to 256 [ 560.721431][ T9696] overlayfs: workdir and upperdir must be separate subtrees [ 561.185738][ T9710] xt_nat: multiple ranges no longer supported [ 562.624743][ T9728] loop1: detected capacity change from 0 to 164 [ 562.741709][ T9731] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 562.817755][ T9734] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 563.292074][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.511290][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.763793][ T9749] overlayfs: workdir and upperdir must be separate subtrees [ 564.798764][ T9560] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 564.990796][ T9560] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 565.003823][ T9560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.023198][ T9560] usb 4-1: config 0 descriptor?? [ 565.455383][ T9758] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 565.486731][ T9758] (null): rxe_set_mtu: Set mtu to 1024 [ 565.498227][ T9758] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 565.756143][ T9560] usbhid 4-1:0.0: can't add hid device: -71 [ 565.809353][ T9560] usbhid: probe of 4-1:0.0 failed with error -71 [ 565.839701][ T9560] usb 4-1: USB disconnect, device number 10 [ 566.308824][ T9766] loop0: detected capacity change from 0 to 164 [ 566.505607][ T9767] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 566.632956][ T9766] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 566.779126][ T9772] loop3: detected capacity change from 0 to 1024 [ 566.892037][ T9774] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.899214][ T9774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.923540][ T9792] overlayfs: workdir and upperdir must be separate subtrees [ 568.075305][ T9800] loop3: detected capacity change from 0 to 164 [ 568.225192][ T9801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 568.259408][ T5890] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 568.540818][ T5890] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 568.552331][ T9801] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 568.557371][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.589037][ T5890] usb 1-1: config 0 descriptor?? [ 569.213580][ T5890] usbhid 1-1:0.0: can't add hid device: -71 [ 569.229358][ T5890] usbhid: probe of 1-1:0.0 failed with error -71 [ 569.248889][ T5890] usb 1-1: USB disconnect, device number 13 [ 571.284766][ T9839] overlayfs: workdir and upperdir must be separate subtrees [ 571.557959][ T9841] loop3: detected capacity change from 0 to 1024 [ 573.891228][ T9852] loop3: detected capacity change from 0 to 164 [ 574.076960][ T9855] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 574.161054][ T9857] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 574.700876][ T9862] overlayfs: failed to resolve './file1/file0': -2 [ 574.762089][ T9854] loop1: detected capacity change from 0 to 32768 [ 574.827079][ T9861] loop3: detected capacity change from 0 to 1024 [ 575.041009][ T9861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.124312][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1044'. [ 575.173446][ T9854] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 575.173446][ T9854] [ 575.191546][ T9854] ERROR: (device loop1): remounting filesystem as read-only [ 575.199273][ T9854] ialloc: diAlloc returned -5! [ 575.461756][ T9874] overlayfs: workdir and upperdir must be separate subtrees [ 575.471356][ T5801] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 575.672607][ T5801] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 575.707245][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 575.724120][ T5801] usb 3-1: Product: syz [ 575.728893][ T5801] usb 3-1: Manufacturer: syz [ 575.742833][ T5801] usb 3-1: SerialNumber: syz [ 575.774400][ T5801] usb 3-1: config 0 descriptor?? [ 575.817452][ T5801] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 575.850972][ T5801] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 576.211042][ T9878] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 577.702416][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.834092][ T9889] loop1: detected capacity change from 0 to 1024 [ 578.888754][ T5890] usb 3-1: USB disconnect, device number 16 [ 579.068993][ T9899] loop0: detected capacity change from 0 to 164 [ 579.242667][ T9903] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 579.379127][ T9906] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 579.506887][ T9910] overlayfs: failed to resolve './file1/file0': -2 [ 579.703985][ T9902] block device autoloading is deprecated and will be removed. [ 581.033338][ T9925] overlayfs: workdir and upperdir must be separate subtrees [ 581.116945][ T9924] warning: `syz.3.1059' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 581.322529][ T9930] Bluetooth: MGMT ver 1.22 [ 581.463467][ T9924] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 581.720691][ T9924] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 582.810991][ T9940] loop3: detected capacity change from 0 to 1024 [ 584.021340][ T9951] loop3: detected capacity change from 0 to 164 [ 584.197279][ T9953] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 584.302075][ T9953] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 584.503963][ T9962] overlayfs: failed to resolve './file1/file0': -2 [ 584.727360][ T9965] loop0: detected capacity change from 0 to 512 [ 584.761880][ T9965] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 584.793127][ T9966] overlayfs: workdir and upperdir must be separate subtrees [ 584.863986][ T9965] EXT4-fs (loop0): orphan cleanup on readonly fs [ 584.933071][ T9965] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1070: bg 0: block 5: invalid block bitmap [ 584.956693][ T9965] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 584.969378][ T9965] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1070: invalid indirect mapped block 3 (level 2) [ 584.983647][ T9965] EXT4-fs (loop0): 2 truncates cleaned up [ 584.990867][ T9965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 585.160462][ T5762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.221814][ T9978] loop3: detected capacity change from 0 to 1024 [ 587.264801][ T9982] loop1: detected capacity change from 0 to 512 [ 587.396756][ T9982] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1075: invalid indirect mapped block 256 (level 2) [ 587.416656][ T9982] EXT4-fs (loop1): 2 truncates cleaned up [ 587.425676][ T9982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.613516][ T9982] EXT4-fs error (device loop1): ext4_check_dx_root:2266: inode #2: comm syz.1.1075: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 587.797931][ T9985] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 588.162363][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.272535][ T9992] loop2: detected capacity change from 0 to 2048 [ 588.316235][ T9992] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 588.345182][ T9992] UDF-fs: Scanning with blocksize 512 failed [ 588.403583][ T9992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 588.459525][ T9998] loop1: detected capacity change from 0 to 164 [ 588.667120][T10000] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 588.763713][T10002] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 589.150683][T10005] loop2: detected capacity change from 0 to 1024 [ 589.250823][T10005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.284711][T10020] overlayfs: workdir and upperdir must be separate subtrees [ 590.335469][T10017] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2797: inode #13: comm syz.2.1082: corrupted in-inode xattr: bad magic number in in-inode xattr [ 590.528504][T10017] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 590.531043][ T9995] loop3: detected capacity change from 0 to 32768 [ 590.599572][T10017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1082: missing EA_INODE flag [ 590.630045][T10017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.1082: error while reading EA inode 11 err=-117 [ 590.660681][T10017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.1082: missing EA_INODE flag [ 590.855351][T10017] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.1082: error while reading EA inode 11 err=-117 [ 591.515794][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.736007][T10034] loop1: detected capacity change from 0 to 1024 [ 592.825420][T10040] loop2: detected capacity change from 0 to 64 [ 592.930291][T10042] loop3: detected capacity change from 0 to 128 [ 593.024762][T10031] loop0: detected capacity change from 0 to 40427 [ 593.052980][T10031] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 593.134769][T10031] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 594.033005][T10031] F2FS-fs (loop0): invalid crc value [ 594.039102][T10042] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.052662][T10042] ext4 filesystem being mounted at /280/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 594.222696][T10031] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 594.858692][T10060] overlayfs: workdir and upperdir must be separate subtrees [ 595.306960][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 596.243448][T10076] fuse: Bad value for 'fd' [ 596.338520][ T5854] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 596.625422][ T5854] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7 [ 596.634885][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 596.643183][ T5854] usb 1-1: Product: syz [ 596.647428][ T5854] usb 1-1: Manufacturer: syz [ 596.693866][ T5854] usb 1-1: SerialNumber: syz [ 596.884973][ T5854] usb 1-1: config 0 descriptor?? [ 596.946194][ T5854] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 596.956218][ T5854] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 597.018926][T10075] loop2: detected capacity change from 0 to 1024 [ 600.483649][T10109] overlayfs: workdir and upperdir must be separate subtrees [ 601.250519][ T5802] usb 1-1: USB disconnect, device number 14 [ 601.555727][T10115] ------------[ cut here ]------------ [ 601.561733][T10115] WARNING: CPU: 0 PID: 10115 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 601.570809][T10115] Modules linked in: [ 601.574753][T10115] CPU: 0 PID: 10115 Comm: syz.3.1112 Not tainted 6.6.94-syzkaller #0 [ 601.582955][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.593144][T10115] RIP: 0010:__alloc_pages+0x2de/0x460 [ 601.598650][T10115] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 96 f1 61 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 601.618461][T10115] RSP: 0018:ffffc9001856fa80 EFLAGS: 00010246 [ 601.624571][T10115] RAX: ffffc9001856fa00 RBX: 1ffff920030adf54 RCX: 0000000000000000 [ 601.632722][T10115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001856fae8 [ 601.641566][T10115] RBP: ffffc9001856fb80 R08: ffffc9001856fae7 R09: 0000000000000000 [ 601.649909][T10115] R10: ffffc9001856fac0 R11: fffff520030adf5d R12: 000000000000002a [ 601.657921][T10115] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 601.666024][T10115] FS: 00007f84191246c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 601.675315][T10115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.682306][T10115] CR2: 0000200000001000 CR3: 0000000031573000 CR4: 00000000003506f0 [ 601.690624][T10115] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 601.699094][T10115] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 601.707436][T10115] Call Trace: [ 601.710965][T10115] [ 601.713939][T10115] ? zone_statistics+0x170/0x170 [ 601.718978][T10115] ? v9fs_fid_find+0x270/0x270 [ 601.723787][T10115] __kmalloc_large_node+0x8c/0x1e0 [ 601.729018][T10115] ? v9fs_fid_get_acl+0x4f/0xf0 [ 601.733905][T10115] __kmalloc+0x111/0x240 [ 601.738185][T10115] v9fs_fid_get_acl+0x4f/0xf0 [ 601.743699][T10115] v9fs_get_acl+0x9a/0x350 [ 601.748162][T10115] v9fs_mount+0x862/0xb40 [ 601.752887][T10115] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 601.758317][T10115] legacy_get_tree+0xea/0x180 [ 601.763094][T10115] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 601.768585][T10115] vfs_get_tree+0x8c/0x280 [ 601.773066][T10115] do_new_mount+0x24b/0xa40 [ 601.777614][T10115] __se_sys_mount+0x2da/0x3c0 [ 601.782425][T10115] ? __x64_sys_mount+0xc0/0xc0 [ 601.787228][T10115] ? lockdep_hardirqs_on+0x98/0x150 [ 601.792539][T10115] ? __x64_sys_mount+0x20/0xc0 [ 601.797343][T10115] do_syscall_64+0x55/0xb0 [ 601.801921][T10115] ? clear_bhb_loop+0x40/0x90 [ 601.806638][T10115] ? clear_bhb_loop+0x40/0x90 [ 601.811441][T10115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.817380][T10115] RIP: 0033:0x7f841838e929 [ 601.821928][T10115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.841670][T10115] RSP: 002b:00007f8419124038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 601.850999][T10115] RAX: ffffffffffffffda RBX: 00007f84185b5fa0 RCX: 00007f841838e929 [ 601.859422][T10115] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 601.867440][T10115] RBP: 00007f8418410b39 R08: 0000200000000580 R09: 0000000000000000 [ 601.875500][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.883599][T10115] R13: 0000000000000000 R14: 00007f84185b5fa0 R15: 00007ffeb803f2f8 [ 601.891691][T10115] [ 601.894737][T10115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.902022][T10115] CPU: 0 PID: 10115 Comm: syz.3.1112 Not tainted 6.6.94-syzkaller #0 [ 601.910084][T10115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 601.920159][T10115] Call Trace: [ 601.923434][T10115] [ 601.926357][T10115] dump_stack_lvl+0x16c/0x230 [ 601.931042][T10115] ? show_regs_print_info+0x20/0x20 [ 601.936243][T10115] ? load_image+0x3b0/0x3b0 [ 601.940753][T10115] panic+0x2c0/0x710 [ 601.944647][T10115] ? bpf_jit_dump+0xd0/0xd0 [ 601.949158][T10115] __warn+0x2e0/0x470 [ 601.953146][T10115] ? __alloc_pages+0x2de/0x460 [ 601.957905][T10115] ? __alloc_pages+0x2de/0x460 [ 601.962838][T10115] report_bug+0x2be/0x4f0 [ 601.967178][T10115] ? __alloc_pages+0x2de/0x460 [ 601.971937][T10115] ? __alloc_pages+0x2de/0x460 [ 601.976697][T10115] ? __alloc_pages+0x2e0/0x460 [ 601.981458][T10115] handle_bug+0xcf/0x120 [ 601.985707][T10115] exc_invalid_op+0x1a/0x50 [ 601.990216][T10115] asm_exc_invalid_op+0x1a/0x20 [ 601.995070][T10115] RIP: 0010:__alloc_pages+0x2de/0x460 [ 602.000444][T10115] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 96 f1 61 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 602.020063][T10115] RSP: 0018:ffffc9001856fa80 EFLAGS: 00010246 [ 602.026129][T10115] RAX: ffffc9001856fa00 RBX: 1ffff920030adf54 RCX: 0000000000000000 [ 602.034097][T10115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001856fae8 [ 602.042065][T10115] RBP: ffffc9001856fb80 R08: ffffc9001856fae7 R09: 0000000000000000 [ 602.050032][T10115] R10: ffffc9001856fac0 R11: fffff520030adf5d R12: 000000000000002a [ 602.058002][T10115] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 602.065985][T10115] ? zone_statistics+0x170/0x170 [ 602.070932][T10115] ? v9fs_fid_find+0x270/0x270 [ 602.075696][T10115] __kmalloc_large_node+0x8c/0x1e0 [ 602.080808][T10115] ? v9fs_fid_get_acl+0x4f/0xf0 [ 602.085654][T10115] __kmalloc+0x111/0x240 [ 602.089891][T10115] v9fs_fid_get_acl+0x4f/0xf0 [ 602.094566][T10115] v9fs_get_acl+0x9a/0x350 [ 602.099021][T10115] v9fs_mount+0x862/0xb40 [ 602.103360][T10115] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 602.108740][T10115] legacy_get_tree+0xea/0x180 [ 602.113417][T10115] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 602.118794][T10115] vfs_get_tree+0x8c/0x280 [ 602.123213][T10115] do_new_mount+0x24b/0xa40 [ 602.127718][T10115] __se_sys_mount+0x2da/0x3c0 [ 602.132396][T10115] ? __x64_sys_mount+0xc0/0xc0 [ 602.137159][T10115] ? lockdep_hardirqs_on+0x98/0x150 [ 602.142367][T10115] ? __x64_sys_mount+0x20/0xc0 [ 602.147133][T10115] do_syscall_64+0x55/0xb0 [ 602.151557][T10115] ? clear_bhb_loop+0x40/0x90 [ 602.156237][T10115] ? clear_bhb_loop+0x40/0x90 [ 602.160910][T10115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 602.166814][T10115] RIP: 0033:0x7f841838e929 [ 602.171316][T10115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.190926][T10115] RSP: 002b:00007f8419124038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 602.199342][T10115] RAX: ffffffffffffffda RBX: 00007f84185b5fa0 RCX: 00007f841838e929 [ 602.207318][T10115] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 602.215282][T10115] RBP: 00007f8418410b39 R08: 0000200000000580 R09: 0000000000000000 [ 602.223311][T10115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.231279][T10115] R13: 0000000000000000 R14: 00007f84185b5fa0 R15: 00007ffeb803f2f8 [ 602.239257][T10115] [ 602.242518][T10115] Kernel Offset: disabled [ 602.246921][T10115] Rebooting in 86400 seconds..