last executing test programs: 4m17.417265469s ago: executing program 2 (id=3): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000010000)=ANY=[@ANYBLOB="18000000000000000000000000000000630104000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m16.383590799s ago: executing program 2 (id=6): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000005c0)='./file0\x00', &(0x7f00000006c0)='./bus\x00') 4m15.363239951s ago: executing program 2 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000000140)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES64=r8, @ANYRES64=r4, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r8, @ANYRESHEX=r3], 0x1, 0x14f9, &(0x7f000001b000)="$eJzs3Au4jdX2MPAx5pyvW9JKcp9jjpeVNiZJkkuSXJIkSZLcEpIkSUJik1sSkpB7kntIbrGT+/2We5IcSZKEhCTze3Q6f53T+Z6+/3fO9/n//3v8nmc+e4797jHWnGusZ633ffez97cdB1etX61SXWaGfwn+9UsqAGQCgH4AcA0ARABQKnup7JeOZ9aY+q89iPj3emjalV6BuJKk/+mb9P9/Dvy/yJH+p2/S//RN+p++Sf/TN+l/+ib9FyI92zo9z7Uy0u+Q+//pmXz+p2/S//RN+p++Sf/TN+l/+ib9T9+k/+mb9D99k/4LkZ5d6fvP/31Gxt+esSu9jn/vuMIvPyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ6cS5cJkBgL/Nr/S6hBBCCCGEEEII8e8TMl7pFQghhBBCCCGEEOL/PQQFGgxEkAEyQibIDFngKsgKV0M2uAYScC1kh+sgB1wPOSEX5IY8kBfyQX6wQOCAIYYCUBCScAMUghshBQpDESgKHopBcbgJSsDNUBJugVJwK5SG26AMlIVyUB5uhwpwB1SEO6ES3AWVoQpUhWpwN1SHe6AG3As14T6oBffDuTJ/XWVdeAjqwcNQHx6BBvAoNIRG0BiaQNN/zEcE+F1+bXgA6sCD/5D/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi/9k/tl/yO+EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//HiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRWiVbYGltjG2yDbbEttsN22B7bYwfsgB2xI3bCztgZX8QX8SV8CbtjZdUDe2JP7IW9sA/2xb74CvbHV/FVfA0H4iAcjK/j6/gGDsUzOAyH4wgcgRXUKByNY5DVOByP43ECTsCJOBEn4WScjFNxGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF+BCXIiLcDGmYRouwbO4FJfhclyBK3EVrsQ1uBbX4HrcgOtxE27CLbgFP8FPcDtux524E3fjbvwUP8XP8DMciPtxPx7AA3gQD+IhPISH8TAewSN4FI/iMTyGx/E4nsCTeApP4mk8jWfwLJ7Dc3gez+MFfD7v1/V2F143ENQlRhmVQWVQmVQmlUVlUVlVVpVNZVMJlVDZVXaVQ+VQOVVOlVvlVnlVXpVf5VekSLGKVQFVQCVVUhVShVSKSlFFVBHllVfFVXFVQpVQJVVJVUrdqkqr21QZVVa18OVVeVVBtfQV1Z2qkqqkKqsqqqqqpqqp6qq6qqFqqJqqpqqlaqna6gFVR/XAPviQutSZ+moQNlCDsaFqpBqrJuoNfEw1U0OxuWqhWqon1HAchq1VM99GPa3aqtHYTj2rxuBzqoMahx3VC6qT6qy6qBdVV9Xcd1Pd1STsoXqqqdhL9VZ9VF81E6uoSx2rql5TA9UgNVi9rhbgG2qoelMNU8PVCPWWGqlGqdFqjBqrxqnx6m01Qb2jJqp31SQ1WU1RU9U0NV3NUO+pmWqWmq3eV3PUB2qumqfmqwVqofpQLVKLVZr6SC1RH6ulaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoreoTtU1tVzvUTrVL7VZ71Kdqr/pM7VOfq/3qC3VAYSrAl+qQ+kodVl+rI+obdVR9q46p79Rx9b06oU6qU+oHdVr9qM78+t4IAOpndUH9oi6qoECjVlproyOdQWfUmXRmnUVfpbPqq3U2fY1O6Gt1dn2dzqGv1zl1Lp1b59F5dT6dX1tN2mnWsS6gC+qkvkEX0jfqFF1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66o79SV9F26sq6iq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT7/yD/nX+SP+DXR9+it+pP9Da9Xe/QO/UuvVvv0Xv0Xr1X79P79H69Xx/QB/RBfVAf0of0YX1YH9FH9FF9VB/Tx/RxfVyf0Cf1T/oHfVr/qM9oDWf1T/q8Pq8v/PYcgEGjjDbGRCaDyWgymcwmi7nKZDVXm2zmGpMw15rs5jqTw1xvcppcJrfJY/KafCa/sYaMM2xiU8AUNElzgylkbjQpprApYooab4qZ4uamfzn/z9bX1DQ1zUwz09w0Ny1NS9PKtDKtTWvTxrQxbU1b0860M+1Ne9PBdDAdTUfTyXQyXUwX09V0Nd1MN5NqUk1P87LpZXqbPqav6WdeMf1NfzPADDADzUAz2Aw2Q8wQM9QMNcPMMDPCjDAjzUgz2ow2Y81YM96MNxPMBDPRTDSTzCQzxUwx08w0M8PMMDPNTDPbzDZzzBwz18w18818s9AsNIvMIpNm0swSs8QsNcvMMrPCrDCrzCqzxqwx68w6s8FsMJvMJrPUbDVbzTazzewwO8wus8vsMXvMXrPX7DP7zH6z3xwwB0xmADhkDpnD5rA5Yo6Yo+aoOWaOmePmuDlhTphT5pQ5bU6bM+aMOWfOmfPmvLlgLpiL5uKl075IRSoykYkyRBmiTFGmKEuUJcoaZY2yRdmiRJSIskfZoxzR9VHOKFeUO8oT5Y3yRfkjG1HkIo7iqEBUMEpGN0SFohujlKhwVCQqGvmoWFQ8uikqEd0clYxuiUpFt0alo9uiMlHZqFz3384moorRnVGl6K6oclQlqhpVi+6Oqkf3RDWie6Oa0X1Rrej+qHb0QFQnejCqGz0U1YsejupHj0QNokejhlGjqHHUJGr6z+pH5aPbowrRHf/p+iGcyfW472a721Tbw/a0L9tetrftY/vafvYV29++agfY1+xAO8gOtq/bIfYNO9S+aYfZ4XaEfcuOtKPsaDvGjrXj7Hj7tp1g37ET7bt2kp1sp9ipdpqdbmfY9+xMO8vOtu/bOfYDO9fOs/PtArvQfmgX2cU2zX5kl9iP7VK7zC63K+xKu8qutmvsWrvOrrcb7Ea7yW62W+xW+4ndZrfbHXan3WV32z32U7vXfmb32c/tfvuFPWD/YhV8aQ/Zr+xh+7U9Yr+xR+239pj9zh6339sT9qQ9ZX+wp+2P9ow9a8/Zn+x5+7O9YH+xF224dHJ/6eOdDBnKQBkoE2WiLJSFslJWykbZKEEJyk7ZKQfloJyUk3JTbspLeSk/5adLmJgKUAFKUpIKUSFKoRQqQkXIk6fiVJxKUAkqSSWpFJWi0lSaylAZKkfl6Ha6ne6gO+hOupPuoruoClWhalSNqlN1qkE1qCbVpFpUi2pTbapDdagu1aV6VI/qU31qQA2oITWkxtSYmlJTakbNqDk1p5bUklpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlEn6kJdqCt1pW7UjVIplXpST+pFvagP9aF+1I/6U38aQANoIA2kwTSYhtAQGkpDaRgNpxH0Fo2kUTSaxtBYGkfjaTxNoAk0kSbSJJpEU2gKTaNpNINm0EyaSbNpNs2hOTSX5tJ8mk8LaSEtokWURmm0hJbQUlpKy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaBvtoB20i3bRHtpDe2kv7aN9tJ/20wE6QAfpIB2iQ3SYDtMROkJH6Sgdo2N0nI7TCTpBp+gUnabTdIbO0Dk6R+fpZ7pAv9BFCpTJZXZZ3FUuq7vaZXPXuH+Mc7s8Lq/L5/I763K6XH8Xk3MuxRV2RVxR510xV9zd9Ie4jCvryrny7nZXwd3hKv4hru7ucTXcva6mu89Vc3f/XVzL3e9qu0dcHfeoq+sauXquiavvHnEN3KOuoWvkGrsmrpV70rV2T7k27mnX1j3zh3iRW+zWunVuvdvg9rrP3Dn3kzvqvnXn3c+um+vu+rlXXH/3qhvgXnMD3aA/xCPcW26kG+VGuzFurBv3h3iKm+qmueluhnvPzXSz/hAvdB+6OS7NzXXz3Hy34Nf40prS3EduifvYLXXL3HK3wq10q9xqt+Y/1rrCbXKb3Ra3x33qtrntbofb6Xa53b/Gl/axz33u9rsv3BH3jTvovnSH3DF32H39a3xpf8fcd+64+96dcCfdKfeDO+1+dGfc2V/3f2nvP7hf3EUXHDCyYs2GI9ackTNxZs7CV3FWvpqz8TWc4Gs5O1/HOfh6zsm5ODfn4bycj/OzZWLHzDEX4IKc5Bu4EN/IKVyYi3BR9lyMi/NNXIJv5pJ8C5fiW7k038ZluCyX4/J8O1fgO7gi38mV+C6uzFW4Klfju7k638M1+F6uyfdxLb6fa/MDXIcf5Lr8ENfjh7k+P8IN+FFuyI24MTfhpvwYN+PHuTm34Jb8BLfiJ7k1P8Vt+Gluy89wO36W2/Nz3IGf5478AnfiztyFX+Su/BJ34+6cyj24J7/Mvbg39+G+3I9f4f78Kg/g13ggD+LB/DoP4Td4KL/Jw3g4j+C3eCSP4tE8hsfyOB7Pb/MEfocn8rs8iSfzFJ7K03g6z+D3eCbP4tn8Ps/hD3guz+P5vIAX8oe8iBdzGn/ES/hjXsrLeDmv4JW8ilfzGl7L63g9b+CNvIk38xbeyp/wNt7OO3gn7+LdvIc/5b38Ge/jz3k/f8EH+C98kL/kQ/wVH+av+Qh/w0f5Wz7G3/Fx/p5P8Ek+xT/waf6Rz/BZPsc/8Xn+mS/wL3yRA0OMsYp1bOIozhBnjDPFmeMs8VVx1vjqOFt8TZyIr42zx9fFOeLr45xxrjh3nCfOG+eL88c2ptjFHMdxgbhgnIxviAvFN8YpceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rLxI/eVj2+PK8R3xBXjO+NK8V1x5bhKXDWuFt8dV4/viWvE98Y14/vikvH9ce34gbhO/GBcN34orhc/HNePH4kbxI/GDeNGceO4Sdw0fixuFj8eN49bxC3jJ+JW8ZNx6/ipuE38dNw2fuZPj6fGPeKe8cvxy3EI9+r5yQXJhckPk4uSi5NpyY+SS5IfJ5cmlyWXJ1ckVyZXJVcn1yTXJtcl1yc3JDcmNyU3J7ckQ6iWETx65bU3PvIZfEafyWf2WfxVPqu/2mfz1/iEv9Zn99f5HP56n9Pn8rl9Hp/X5/P5vfXknWcf+wK+oE/6G3whf6NP8YV9EV/Ue1/MF/dNfFPf1Dfzj/vmvoVv6Z/wT/gn/ZP+Kf+Uf9q39c/4dv5Z394/5zv45/3z/gXfyXf2XfyLvqt/yXfz3X2qT/U9fU/fy/fyfSLw/Xw/39/39wP8AD/QD/SD/WA/xA/xQ/1QP8wP8yP8CD/Sj/Sj/Wg/1o/14/14P8FP8BP9RD/JT/JT/BQ/zU/zM/wMP9PP9LP9bD8nZY6f6+f6+X6+X+gX+kV+kU/zaX6JX+KX+qV+uV/uV/qVfrVf7df6tX69X+83+o1+s9/st/qtfpvf5nf4HX6X3+X3+D1+r9/r9/l9fr/f7w/4A/6gP+gP+a/8Yf+1P+K/8Uf9t/6Y/84f99/7E/6kP+V/8Kf9j/6MP+vP+Z/8ef+zv+B/8Rd98OMTbycmJN5JTEy8m5iUeXJiSmJqYlpiemJG4r3EzMSsxOzE+4k5iQ8ScxPzEvMTCxILEx8mFiUWJ9ISHyWWJD5OLE0sSyxPrEisTKxKhJBvWxwKhIIhGW4IhcKNISUUDkVC0eBDsVA83BRKhJtDyXBLKBVuDaXDbaFMKBvKhUdDw9AoNA5NQtPwWGgWHg/NQ4vQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dAxvBA6hc6hS3gxdA0vhW6he0gNPULP8HLoFXqHPqFv6BdeCf3Dq2FAeC0MDIPC4PB6GBLeCEPDm2FYGB5GhLfCyDAqjA5jwtgwLowPb4cJ4Z0wMbwbJoXJYUqYGqaF6WFGeC/MDLPC7PB+mBM+CHPDvDA/LAgLw4dhUVgc0sJHYUn4OCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCVsDZ+EbWF72BF2hl1hd9gTPg17w2dhX/g87A9fhAPhL+Fg+DIcCl+Fw+HrcCR8E46Gb8Ox8F04Hr4PJ8LJcCr8EE6HH8OZcDacCz+F8+HncCH8Ei7++jdr3a/EDXQhhBBCiP9WUv/keI9/8j3127ikJwBcvT3P4d8f1wCwMedf571V3lYJAHi6e8eH/jYqV05N/dvjLtUQFZwHAInL+RngcrwMWsKT0AZaQAn426+vfq+36nye/6R+8laALL/LyQSX48v1b/6n+++tRs350/rzAFIKXs7JDJfjy/VL/m/q52r2J/UzfzkeoPnvcrLC5fhy/eLwODwDbf7uJ4UQQgghhBBCiL/qrcq1/7Pr20vX53nN5ZyMcDn+/fW5EEIIIYQQQggh/mt6rnOXpx5r06ZFe5n8V5zsljbJ5MpMrvAbkxBCCCGEEOLf7vJJ/5VeiRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkX79//h3Yld6j0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV9r8CAAD//7VdJvI=") r9 = add_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000740)="57a125f19956845f4a1b0735e03961edb9347bf4789b698e803d507114c30307b97ba9e9b7a42dccc8e237f9fdda13c9120db7b89c9269d98366c2bcdf8a0e42d690ca0f273d00cfc7a92a57d0a8", 0x4e, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='&/\x00', r9) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20448, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noload}, {@discard}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x607, &(0x7f0000001580)="$eJzs3c9vFGUfAPDv7G5LS3nfFvLmVTxIjTGQKC0tYIjxAFdDGvwRL16stCBSoKE1WjShJHgxMV6MMfHkQUz8I5TIlZMmJh68eDIkxB8cTVwz25nS7e72x9J2K/P5hKUzzzOzzzPdfveZefZ5ZgMorMH0v1LE3oiYTiL6k/nFvEpkmYML29374/3T6SOJavXl35JIsrR8+yT72Zft3BMR33+XxJ5yY7kzc1fOj09NTV7O1odnL0wPz8xdOXjuwvjZybOTF0efHT129MjRYyOH2jquq03STl5/653+D8de+/Lzv5KRr34eS+J4vJBtuPQ4IuLHUlul1huMwdrvJGnM6ju2Ac+/HZSzv5OlL3FSWbrF/NZXijXLX7+uiHgk+qMc91+8/vjgxY5WDthU1SSiChRUIv6hoPLzgPzaftl1cGzEdTCwPd09sdAB0Bj/lYW+weip9Q3svJfE0m6dJCLa65mrtysibt8au37m1tj1aOyHAzbR/LWIeLRZ/Ce1+B+InhioxX+pLv7T84JT2c80/aU2y68sW2+M/8NtPjOwmoX471kx/qNF/L++JP7fWHOJ9RE/eH/xzd66+O99kMMCAAAAAACAQrp5IiKeafb5f2lx/E80Gf/TFxHHN6D8wWXrjZ//l+5sQDFAE3dPRDzfdPxvKR/9O1DOlv5TGw/QlZw5NzV5KCL+GxEHomtHuj6yQhkHP9rzWau8wWz8X/5Iy7+djQXM6nGnsqN+n4nx2fEHPW4g4u61iMeajv9NFtv/pEn7n74fTK+xjD1P3TjVKm/1+Ac2S/WLiP1N2//7d61IVr4/x3DtfGA4Pyto9Ph7H3/Tqvx243/5uGFg/dL2f+fK8T+QLL1fz8z6yzg8V6m2ymv3/L87eaV2y5nuLO3d8dnZyyMR3cnJcppalz66/jrDwyiPhzxe0vg/8OTK/X/Nzv97m9zZKfm9fk5x7v9/9/3Sqj55/D/x58K+zv9h66TxP7Gu9n/9C6M3Br5tVf7a2v8jtbb+QJai/w8WfJqHaXd9emMULgZ0XdZW1xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgaliNgVSWlocblUGhqK6IuI/8XO0tSlmdmnz1x6++JEmlf7/v9S/k2//QvrSf79/wNL1keXrR+OiN0R8Um5t7Y+dPrS1ESnDx4AAAAAAAAAAAAAAAAAAAC2ib4W8/9Tv5Y7XTtg01U6XQGgY5rE/w+dqAew9bT/UFziH4pL/ENxiX8oLvEPxSX+objEPxSX+AcAAAAAgIfK7n03f0oiYv653toj1Z3ldXW0ZsBmK3W6AkDHlGv/gCIy9AeKyzU+kKyS39Nyp9X2XMn06QfYGQAAAAAAAAAAAAAKZ/9e8/+hqMz/h+Iy+R+KK5//v6/D9QC2nmt8IFaZyd90/v+qewEAAAAAAAAAAAAAG2lm7sr58ampycsbubAj1rjx15tRersLr26PamzlQrVavZr+FWyX+vzLF/Kh8FtceiXWtnE+129tz9y59yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDePwEAAP//J5YmtQ==") 4m12.106193326s ago: executing program 1 (id=9): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "2371fc31ccccb7db", "375c8cf618576b0c8e03dd9be5908fb9", "adbee8fc", "372639e28ade0290"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4m7.811264439s ago: executing program 1 (id=19): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0xd, 0x8005, 0x1, 0x1}) 4m6.575481959s ago: executing program 1 (id=23): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x7) 4m5.624664372s ago: executing program 1 (id=26): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m4.171933069s ago: executing program 3 (id=29): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x14, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 4m3.973527951s ago: executing program 1 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@void, @void, @eth={@empty, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x9, 0xffffff67, 0x167, 0x0, 0x5d, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e23, 0x4e22, 0x3c, 0x0, @wg=@data={0x4, 0xb4f, 0xfffffffffffffffb, "fc02c2f91c6dacac8bf906baebab7b4e0cba34e554d78aa6664e76c2e68bbaed07975e0d"}}}}}}}, 0x66) 4m3.237926729s ago: executing program 3 (id=32): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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") creat(&(0x7f00000000c0)='./file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4m2.778870365s ago: executing program 1 (id=35): ioperm(0x0, 0x4, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f0000000040)) 3m57.806970927s ago: executing program 32 (id=35): ioperm(0x0, 0x4, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, &(0x7f0000000040)) 3m57.525989543s ago: executing program 33 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000002c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x1, 0x0, &(0x7f0000000140)) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES64=r8, @ANYRES64=r4, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r8, @ANYRESHEX=r3], 0x1, 0x14f9, &(0x7f000001b000)="$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") r9 = add_key(&(0x7f0000000600)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000740)="57a125f19956845f4a1b0735e03961edb9347bf4789b698e803d507114c30307b97ba9e9b7a42dccc8e237f9fdda13c9120db7b89c9269d98366c2bcdf8a0e42d690ca0f273d00cfc7a92a57d0a8", 0x4e, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='&/\x00', r9) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20448, 0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@noload}, {@discard}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x607, &(0x7f0000001580)="$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") 3m57.434882762s ago: executing program 3 (id=39): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x4c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @broadcast}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x38}}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) 3m56.842401982s ago: executing program 3 (id=41): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m54.571232456s ago: executing program 3 (id=43): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='io_uring_register\x00', r0, 0x0, 0x200}, 0x18) io_uring_register$IORING_UNREGISTER_PBUF_RING(0xffffffffffffffff, 0x17, &(0x7f0000000300)={0x0}, 0x1) 3m52.697718927s ago: executing program 3 (id=47): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0xd, 0x8005, 0x1, 0x1}) 3m48.184614327s ago: executing program 34 (id=47): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000200)={0xd, 0x8005, 0x1, 0x1}) 47.519323938s ago: executing program 7 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48000000140003040000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x40) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x1000, 0x0, {0xa, 0x78, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x1000000, 0xfffff001}}]}, 0x40}}, 0x0) 46.291565279s ago: executing program 7 (id=514): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x7, 0x0) 44.641164363s ago: executing program 7 (id=520): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 43.334996058s ago: executing program 7 (id=523): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0x6}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 42.207276252s ago: executing program 7 (id=528): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x80000) read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) 40.929838019s ago: executing program 7 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x515e, 0xfffffffc) 25.549050806s ago: executing program 35 (id=534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') preadv(r1, &(0x7f0000000400)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1, 0x515e, 0xfffffffc) 9.751308462s ago: executing program 4 (id=619): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x880) 9.255525454s ago: executing program 5 (id=620): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x974}, &(0x7f0000000180)=0x8) 9.195172352s ago: executing program 6 (id=621): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.122973572s ago: executing program 0 (id=622): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) 8.57313962s ago: executing program 4 (id=623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000107afffe800000000000000000000000000000ff020000000000000000000000000001"], 0x0) 7.778458898s ago: executing program 5 (id=624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 7.321772719s ago: executing program 0 (id=625): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 7.015078694s ago: executing program 4 (id=626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000010401020000018000000000000000000800054000"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 6.222253258s ago: executing program 5 (id=627): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000000840)="$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") open(0x0, 0x121040, 0x1a5) 5.655097916s ago: executing program 6 (id=628): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c92012000e00050015010a"], 0x17) 5.597192732s ago: executing program 4 (id=629): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0x6}}, 0x26) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) 5.454307942s ago: executing program 0 (id=630): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) r4 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 4.398817393s ago: executing program 6 (id=631): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001200)="8f8a", 0x2}], 0x1}}], 0x2, 0x4) 4.398608594s ago: executing program 5 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x880) 4.266772203s ago: executing program 4 (id=633): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) 4.094615938s ago: executing program 0 (id=634): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="a800000000000080e8dec85a44e0f01cf138ee1fe6e1a2ac1fd2be"], 0xa8) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) 3.082196968s ago: executing program 6 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x5, 0x1, "700000abfe0868127a08000004b70247"}}}, 0x270800) 2.764827712s ago: executing program 5 (id=636): setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB='/ '], 0x110) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 2.646767727s ago: executing program 4 (id=637): syz_mount_image$exfat(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf8,iocharset=cp862,iocharset=cp864,discard,errors=remount-ro,fmask=00000000000000000007777,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1526, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x85, 0xa5a, &(0x7f0000001700)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) 2.360236473s ago: executing program 0 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 1.779226117s ago: executing program 6 (id=639): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 1.424969369s ago: executing program 5 (id=640): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000500)='./file2\x00', 0x80408a, &(0x7f0000000540)=ANY=[], 0x11, 0x6c1, &(0x7f000000abc0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000200), &(0x7f0000000080)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)=""/199, 0xc7) 1.154858343s ago: executing program 0 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x204001, @void, @value}, 0x94) 0s ago: executing program 6 (id=642): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {}, 0x6}}, 0x26) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000004060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 189.170992][ T5772] cgroup: Unknown subsys name 'net' [ 189.302396][ T5772] cgroup: Unknown subsys name 'cpuset' [ 189.325833][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.502363][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.509212][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.803036][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 245.072591][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.081691][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.090101][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.098246][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.106288][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.115842][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.124179][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.132564][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.141664][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.150849][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.172855][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.184488][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.193305][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.204866][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.206847][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.215114][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.227465][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.231189][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.243845][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.258107][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.275573][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.276291][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.292658][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.306885][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.325551][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.768516][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 247.122156][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 247.341850][ T53] Bluetooth: hci4: command tx timeout [ 247.347549][ T53] Bluetooth: hci0: command tx timeout [ 247.401157][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 247.401488][ T5799] Bluetooth: hci2: command tx timeout [ 247.416779][ T53] Bluetooth: hci1: command tx timeout [ 247.479767][ T5799] Bluetooth: hci3: command tx timeout [ 247.795902][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 247.821749][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 248.117422][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.126917][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.137222][ T5794] bridge_slave_0: entered allmulticast mode [ 248.147281][ T5794] bridge_slave_0: entered promiscuous mode [ 248.192540][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.202139][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.210166][ T5794] bridge_slave_1: entered allmulticast mode [ 248.220081][ T5794] bridge_slave_1: entered promiscuous mode [ 248.443799][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.595165][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.831385][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.839022][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.847025][ T5808] bridge_slave_0: entered allmulticast mode [ 248.856785][ T5808] bridge_slave_0: entered promiscuous mode [ 249.032908][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.043401][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.051357][ T5808] bridge_slave_1: entered allmulticast mode [ 249.061139][ T5808] bridge_slave_1: entered promiscuous mode [ 249.215854][ T5794] team0: Port device team_slave_0 added [ 249.224058][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.232404][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.240601][ T5795] bridge_slave_0: entered allmulticast mode [ 249.252541][ T5795] bridge_slave_0: entered promiscuous mode [ 249.299181][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.307113][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.314966][ T5796] bridge_slave_0: entered allmulticast mode [ 249.324722][ T5796] bridge_slave_0: entered promiscuous mode [ 249.381433][ T5794] team0: Port device team_slave_1 added [ 249.389147][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.398160][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.406188][ T5795] bridge_slave_1: entered allmulticast mode [ 249.409320][ T5799] Bluetooth: hci0: command tx timeout [ 249.416194][ T5795] bridge_slave_1: entered promiscuous mode [ 249.423346][ T5799] Bluetooth: hci4: command tx timeout [ 249.470858][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.478514][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.486455][ T5796] bridge_slave_1: entered allmulticast mode [ 249.489063][ T5799] Bluetooth: hci2: command tx timeout [ 249.496727][ T5796] bridge_slave_1: entered promiscuous mode [ 249.500084][ T5799] Bluetooth: hci1: command tx timeout [ 249.511456][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.519048][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.526757][ T5797] bridge_slave_0: entered allmulticast mode [ 249.536581][ T5797] bridge_slave_0: entered promiscuous mode [ 249.582971][ T5799] Bluetooth: hci3: command tx timeout [ 249.637353][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.729978][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.737589][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.745668][ T5797] bridge_slave_1: entered allmulticast mode [ 249.755096][ T5797] bridge_slave_1: entered promiscuous mode [ 249.777723][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.907917][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.941423][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.034287][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.042734][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.070227][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.094275][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.106020][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.113362][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.139964][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.231803][ T5796] team0: Port device team_slave_0 added [ 250.252287][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.273797][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.353555][ T5796] team0: Port device team_slave_1 added [ 250.447311][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.510375][ T5808] team0: Port device team_slave_0 added [ 250.607400][ T5795] team0: Port device team_slave_0 added [ 250.624907][ T5808] team0: Port device team_slave_1 added [ 250.706778][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.715488][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.742277][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.796592][ T5795] team0: Port device team_slave_1 added [ 250.815011][ T5797] team0: Port device team_slave_0 added [ 250.897218][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.905992][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.933616][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.986271][ T5797] team0: Port device team_slave_1 added [ 250.996930][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.005749][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.033768][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.062030][ T5794] hsr_slave_0: entered promiscuous mode [ 251.072431][ T5794] hsr_slave_1: entered promiscuous mode [ 251.084693][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.092349][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.118889][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.273897][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.281393][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.307901][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.464950][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.472341][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.480121][ T5799] Bluetooth: hci0: command tx timeout [ 251.498752][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.510457][ T5799] Bluetooth: hci4: command tx timeout [ 251.519451][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.527595][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.555407][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.560162][ T53] Bluetooth: hci1: command tx timeout [ 251.572398][ T5799] Bluetooth: hci2: command tx timeout [ 251.639901][ T53] Bluetooth: hci3: command tx timeout [ 251.693679][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.701013][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.727458][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.939317][ T5796] hsr_slave_0: entered promiscuous mode [ 251.948599][ T5796] hsr_slave_1: entered promiscuous mode [ 251.957644][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.965500][ T5796] Cannot create hsr debugfs directory [ 251.987175][ T5808] hsr_slave_0: entered promiscuous mode [ 251.999305][ T5808] hsr_slave_1: entered promiscuous mode [ 252.007887][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.015815][ T5808] Cannot create hsr debugfs directory [ 252.076038][ T5795] hsr_slave_0: entered promiscuous mode [ 252.086264][ T5795] hsr_slave_1: entered promiscuous mode [ 252.095151][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.103045][ T5795] Cannot create hsr debugfs directory [ 252.491496][ T5797] hsr_slave_0: entered promiscuous mode [ 252.504365][ T5797] hsr_slave_1: entered promiscuous mode [ 252.513381][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.521372][ T5797] Cannot create hsr debugfs directory [ 253.460904][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.589213][ T53] Bluetooth: hci4: command tx timeout [ 253.589415][ T5799] Bluetooth: hci0: command tx timeout [ 253.636619][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.651911][ T5799] Bluetooth: hci1: command tx timeout [ 253.657614][ T5799] Bluetooth: hci2: command tx timeout [ 253.697001][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.734749][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.735328][ T5799] Bluetooth: hci3: command tx timeout [ 254.078041][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.106179][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.150848][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.213793][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.243406][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 254.297018][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 254.362756][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 254.450299][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.597635][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.668219][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.758746][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.787635][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.824336][ T5797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.881078][ T5797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.985636][ T5797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.077103][ T5797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.231477][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.543795][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.741940][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.749863][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.811094][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.818694][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.846972][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.079957][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.199400][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.207129][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.282066][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.303799][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.331467][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.339064][ T4165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.633738][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.673889][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.704841][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.768768][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.794339][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.802204][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.834059][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.841995][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.938066][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.946033][ T4043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.962293][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.970017][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.100735][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.165560][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.173312][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.189945][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.197559][ T4043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.546024][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.770981][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.327523][ T5794] veth0_vlan: entered promiscuous mode [ 259.423589][ T5794] veth1_vlan: entered promiscuous mode [ 259.449223][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.830441][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.882093][ T5794] veth0_macvtap: entered promiscuous mode [ 259.982537][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.044193][ T5794] veth1_macvtap: entered promiscuous mode [ 260.074192][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.173262][ T5795] veth0_vlan: entered promiscuous mode [ 260.308836][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.350982][ T5795] veth1_vlan: entered promiscuous mode [ 260.467116][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.557797][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.568583][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.578255][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.587570][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.727970][ T5797] veth0_vlan: entered promiscuous mode [ 260.777544][ T5796] veth0_vlan: entered promiscuous mode [ 260.874917][ T5797] veth1_vlan: entered promiscuous mode [ 260.946821][ T5796] veth1_vlan: entered promiscuous mode [ 261.024915][ T5795] veth0_macvtap: entered promiscuous mode [ 261.117902][ T5795] veth1_macvtap: entered promiscuous mode [ 261.347652][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.383088][ T5797] veth0_macvtap: entered promiscuous mode [ 261.453375][ T5797] veth1_macvtap: entered promiscuous mode [ 261.476758][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.519676][ T5796] veth0_macvtap: entered promiscuous mode [ 261.605873][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.616206][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.625512][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.634797][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.695729][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.722785][ T5796] veth1_macvtap: entered promiscuous mode [ 261.792070][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.913426][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.941815][ T5797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.951258][ T5797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.962886][ T5797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.972181][ T5797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.058562][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.133613][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.143148][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.152378][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.161527][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.295918][ T5808] veth0_vlan: entered promiscuous mode [ 263.418836][ T5808] veth1_vlan: entered promiscuous mode [ 263.854456][ T5808] veth0_macvtap: entered promiscuous mode [ 263.951914][ T5808] veth1_macvtap: entered promiscuous mode [ 264.177836][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.280167][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.358012][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.371580][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.382357][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.391641][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.393418][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.401762][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.615238][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.623590][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.148894][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.160011][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.197486][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 269.398495][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.407043][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.420566][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.428568][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.773986][ T4043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.782867][ T4043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.514425][ T4165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.523886][ T4165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.553368][ T5980] loop0: detected capacity change from 0 to 256 [ 270.612031][ T5980] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.636870][ T4165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.645238][ T4165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.820957][ T5980] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 271.014594][ T5985] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.808812][ T5983] loop1: detected capacity change from 0 to 4096 [ 271.944986][ T5983] ======================================================= [ 271.944986][ T5983] WARNING: The mand mount option has been deprecated and [ 271.944986][ T5983] and is ignored by this kernel. Remove the mand [ 271.944986][ T5983] option from the mount to silence this warning. [ 271.944986][ T5983] ======================================================= [ 272.316115][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.326021][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.341019][ T5995] bridge0: entered allmulticast mode [ 272.354088][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.372614][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.429758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 272.672937][ T5995] bridge_slave_1: left allmulticast mode [ 272.678903][ T5995] bridge_slave_1: left promiscuous mode [ 272.686253][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.713293][ T5995] bridge_slave_0: left allmulticast mode [ 272.719248][ T5995] bridge_slave_0: left promiscuous mode [ 272.726429][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.029116][ T5996] Zero length message leads to an empty skb [ 273.102432][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 273.250894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 273.270711][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.278739][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.574174][ T6001] loop2: detected capacity change from 0 to 256 [ 273.732100][ T6001] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ ' [ 273.751131][ T30] audit: type=1804 audit(1747949974.277:2): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name=2F6E6577726F6F742F302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop1" ino=33 res=1 errno=0 [ 274.473808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 274.811904][ T5996] loop0: detected capacity change from 0 to 4096 [ 274.931787][ T5996] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 275.094332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 275.426402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 275.470173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 275.550701][ T5996] ntfs3(loop0): Failed to read $AttrDef (-4). [ 275.911777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.204506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 276.219579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.228263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 277.350293][ T6018] loop3: detected capacity change from 0 to 512 [ 277.602460][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.616452][ T6018] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.872046][ T6018] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 277.884018][ T6018] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 277.894311][ T6018] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.13: Failed to acquire dquot type 0 [ 277.925773][ T6026] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 277.936930][ T6026] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 277.946947][ T6026] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.13: Failed to acquire dquot type 0 [ 278.436570][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.068644][ T6039] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 280.910562][ T5855] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 281.190857][ T5855] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 281.200900][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.286225][ T5855] usb 1-1: config 0 descriptor?? [ 281.880279][ T5855] uclogic 0003:28BD:0055.0001: interface is invalid, ignoring [ 282.030931][ T5855] usb 1-1: USB disconnect, device number 2 [ 282.207472][ T6058] loop1: detected capacity change from 0 to 1024 [ 282.345338][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.142015][ T5797] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 283.154389][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 283.238608][ T5797] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 283.276011][ T6068] capability: warning: `syz.3.29' uses deprecated v2 capabilities in a way that may be insecure [ 283.838744][ T5797] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.021194][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.247300][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.484911][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.730633][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.310530][ T35] bridge_slave_1: left allmulticast mode [ 285.316461][ T35] bridge_slave_1: left promiscuous mode [ 285.323426][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.465116][ T35] bridge_slave_0: left allmulticast mode [ 285.471445][ T35] bridge_slave_0: left promiscuous mode [ 285.478145][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.209423][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.271161][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.301040][ T35] bond0 (unregistering): Released all slaves [ 286.987487][ T35] hsr_slave_0: left promiscuous mode [ 287.024334][ T35] hsr_slave_1: left promiscuous mode [ 287.032120][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.039955][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.070467][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.089893][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.118633][ T35] veth1_macvtap: left promiscuous mode [ 287.126374][ T35] veth0_macvtap: left promiscuous mode [ 287.132395][ T35] veth1_vlan: left promiscuous mode [ 287.137855][ T35] veth0_vlan: left promiscuous mode [ 287.983431][ T35] team0 (unregistering): Port device team_slave_1 removed [ 288.063508][ T35] team0 (unregistering): Port device team_slave_0 removed [ 289.969994][ T1993] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 290.422282][ T1993] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 290.431979][ T1993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.508984][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.526200][ T1993] usb 5-1: config 0 descriptor?? [ 290.530829][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.544423][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.584078][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.597547][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.854451][ T6101] loop3: detected capacity change from 0 to 1024 [ 290.957722][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.968095][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.133087][ T6101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.280018][ T1993] uclogic 0003:28BD:0055.0002: interface is invalid, ignoring [ 291.376100][ T1993] usb 5-1: USB disconnect, device number 2 [ 291.669355][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.712751][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.739877][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.769910][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.792968][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 292.275995][ T6114] loop0: detected capacity change from 0 to 2048 [ 292.334414][ T6114] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.529270][ T6114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.627511][ T5796] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 292.762448][ T53] Bluetooth: hci3: command tx timeout [ 292.836439][ T5796] EXT4-fs error (device loop3): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 293.379373][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.779399][ T3724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.880003][ T53] Bluetooth: hci5: command tx timeout [ 293.950673][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.021117][ T3724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.112009][ T6110] chnl_net:caif_netlink_parms(): no params data found [ 294.287479][ T3724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.322832][ T6127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.374027][ T6100] chnl_net:caif_netlink_parms(): no params data found [ 294.505987][ T3724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.734210][ T6130] loop4: detected capacity change from 0 to 1024 [ 294.841054][ T53] Bluetooth: hci3: command tx timeout [ 295.525544][ T3724] bridge_slave_1: left allmulticast mode [ 295.532289][ T3724] bridge_slave_1: left promiscuous mode [ 295.538986][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.578722][ T4043] hfsplus: b-tree write err: -5, ino 4 [ 295.640887][ T3724] bridge_slave_0: left allmulticast mode [ 295.646842][ T3724] bridge_slave_0: left promiscuous mode [ 295.654101][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.967893][ T53] Bluetooth: hci5: command tx timeout [ 296.455243][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.507761][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.524503][ T3724] bond0 (unregistering): Released all slaves [ 296.935745][ T53] Bluetooth: hci3: command tx timeout [ 297.283069][ T3724] hsr_slave_0: left promiscuous mode [ 297.302199][ T3724] hsr_slave_1: left promiscuous mode [ 297.312339][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.322271][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.432831][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.440781][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.541571][ T3724] veth1_macvtap: left promiscuous mode [ 297.547735][ T3724] veth0_macvtap: left promiscuous mode [ 297.554190][ T3724] veth1_vlan: left promiscuous mode [ 297.560329][ T3724] veth0_vlan: left promiscuous mode [ 298.039929][ T53] Bluetooth: hci5: command tx timeout [ 298.506499][ T3724] team0 (unregistering): Port device team_slave_1 removed [ 298.543875][ T3724] team0 (unregistering): Port device team_slave_0 removed [ 299.030314][ T53] Bluetooth: hci3: command tx timeout [ 299.621490][ T6110] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.629174][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.637319][ T6110] bridge_slave_0: entered allmulticast mode [ 299.647355][ T6110] bridge_slave_0: entered promiscuous mode [ 299.742293][ T6100] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.750448][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.758217][ T6100] bridge_slave_0: entered allmulticast mode [ 299.822365][ T6100] bridge_slave_0: entered promiscuous mode [ 299.885840][ T6110] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.893867][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.901787][ T6110] bridge_slave_1: entered allmulticast mode [ 299.911733][ T6110] bridge_slave_1: entered promiscuous mode [ 299.941969][ T6100] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.949417][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.958592][ T6100] bridge_slave_1: entered allmulticast mode [ 299.967138][ T6100] bridge_slave_1: entered promiscuous mode [ 300.140421][ T53] Bluetooth: hci5: command tx timeout [ 300.328632][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 300.361016][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 300.394246][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 300.421721][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 300.435816][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 300.768752][ T6100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.789676][ T6110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.299434][ T6100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.384248][ T6110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.641402][ T6168] process 'syz.4.53' launched '/dev/fd/8/./file2' with NULL argv: empty string added [ 301.963403][ T6100] team0: Port device team_slave_0 added [ 302.048860][ T6110] team0: Port device team_slave_0 added [ 302.066791][ T6100] team0: Port device team_slave_1 added [ 302.090308][ T6110] team0: Port device team_slave_1 added [ 302.426717][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.437483][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.466697][ T6110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.529100][ T5799] Bluetooth: hci1: command tx timeout [ 302.558146][ T6110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.565505][ T6110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.592260][ T6110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.628403][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.637193][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.664052][ T6100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.985900][ T6100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.993271][ T6100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.020410][ T6100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.405090][ T6110] hsr_slave_0: entered promiscuous mode [ 303.418000][ T6110] hsr_slave_1: entered promiscuous mode [ 303.427268][ T6110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.435222][ T6110] Cannot create hsr debugfs directory [ 303.815974][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 303.857736][ T6100] hsr_slave_0: entered promiscuous mode [ 303.870458][ T6100] hsr_slave_1: entered promiscuous mode [ 303.879910][ T6100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.887746][ T6100] Cannot create hsr debugfs directory [ 304.600034][ T5799] Bluetooth: hci1: command tx timeout [ 306.458149][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.466612][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.474819][ T6163] bridge_slave_0: entered allmulticast mode [ 306.484701][ T6163] bridge_slave_0: entered promiscuous mode [ 306.618506][ T6110] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 306.741524][ T6110] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 306.759202][ T5799] Bluetooth: hci1: command tx timeout [ 306.871231][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.878648][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.886541][ T6163] bridge_slave_1: entered allmulticast mode [ 306.895440][ T6163] bridge_slave_1: entered promiscuous mode [ 306.931655][ T6110] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.011708][ T6110] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.512795][ T6100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.601385][ T6100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.696913][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.741195][ T6100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.868266][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.902519][ T6100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.365664][ T6163] team0: Port device team_slave_0 added [ 308.463701][ T6163] team0: Port device team_slave_1 added [ 308.850487][ T5799] Bluetooth: hci1: command tx timeout [ 309.166743][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.175442][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.204357][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.371497][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 309.441485][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.448685][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.477028][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.616882][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.628383][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.638860][ T24] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 309.648393][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.823709][ T24] usb 5-1: config 0 descriptor?? [ 309.871703][ T4165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.097311][ T4165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.310296][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 310.318871][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 310.345583][ T4165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.368084][ T24] usb 5-1: USB disconnect, device number 3 [ 310.448611][ T6163] hsr_slave_0: entered promiscuous mode [ 310.459882][ T6163] hsr_slave_1: entered promiscuous mode [ 310.468942][ T6163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.476931][ T6163] Cannot create hsr debugfs directory [ 310.572911][ T4165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.616069][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.143296][ T6100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.783014][ T4165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.804613][ T6215] loop4: detected capacity change from 0 to 1024 [ 311.832656][ T4165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.883419][ T4165] bond0 (unregistering): Released all slaves [ 312.084535][ T6110] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.178521][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.186404][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.227206][ T6100] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.540404][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.548001][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.731477][ T4043] hfsplus: b-tree write err: -5, ino 4 [ 312.886777][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.894524][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.915968][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.923827][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.976730][ T4165] hsr_slave_0: left promiscuous mode [ 313.011385][ T4165] hsr_slave_1: left promiscuous mode [ 313.021262][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.029658][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.114061][ T4165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.122255][ T4165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.272658][ T4165] veth1_macvtap: left promiscuous mode [ 313.282267][ T4165] veth0_macvtap: left promiscuous mode [ 313.295010][ T4165] veth1_vlan: left promiscuous mode [ 313.300927][ T4165] veth0_vlan: left promiscuous mode [ 314.191740][ T4165] team0 (unregistering): Port device team_slave_1 removed [ 314.245785][ T4165] team0 (unregistering): Port device team_slave_0 removed [ 315.933027][ T6163] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 316.062762][ T6163] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 316.192225][ T6163] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 316.293981][ T6163] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.415152][ T5858] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 317.639023][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.706484][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.718154][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.729634][ T5858] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 317.739014][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.886300][ T5858] usb 1-1: config 0 descriptor?? [ 318.049411][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.170969][ T6100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.286087][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.401015][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 318.411705][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 318.418104][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.427438][ T4165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.472350][ T5858] usb 1-1: USB disconnect, device number 3 [ 318.569902][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.577536][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.025221][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.531266][ T6110] veth0_vlan: entered promiscuous mode [ 321.734896][ T6110] veth1_vlan: entered promiscuous mode [ 321.842413][ T6100] veth0_vlan: entered promiscuous mode [ 322.031602][ T6100] veth1_vlan: entered promiscuous mode [ 322.098213][ T6110] veth0_macvtap: entered promiscuous mode [ 322.251744][ T6110] veth1_macvtap: entered promiscuous mode [ 322.421274][ T6100] veth0_macvtap: entered promiscuous mode [ 322.498740][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.541027][ T6100] veth1_macvtap: entered promiscuous mode [ 322.596104][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.737412][ T6110] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.753238][ T6110] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.762662][ T6110] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.771818][ T6110] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.852058][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.943215][ T6100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.050563][ T6100] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.059811][ T6100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.068880][ T6100] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.078639][ T6100] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.293337][ T6323] netlink: 'syz.0.77': attribute type 11 has an invalid length. [ 324.932566][ T6327] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 324.997446][ T6163] veth0_vlan: entered promiscuous mode [ 325.184853][ T6163] veth1_vlan: entered promiscuous mode [ 325.641465][ T6163] veth0_macvtap: entered promiscuous mode [ 325.732485][ T6163] veth1_macvtap: entered promiscuous mode [ 326.005039][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.120824][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.390948][ T6163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.404359][ T6163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.415142][ T6163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.425124][ T6163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.337497][ T6387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 330.187300][ T6398] netlink: 'syz.0.86': attribute type 11 has an invalid length. [ 331.060375][ T4779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.068725][ T4779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.507145][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.518553][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.835194][ T3544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.843557][ T3544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.217996][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.226634][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.434260][ T6434] loop6: detected capacity change from 0 to 64 [ 334.268108][ T6446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 335.016747][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.025158][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.495090][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.503667][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.351552][ T6466] loop4: detected capacity change from 0 to 512 [ 336.850826][ T6466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.864143][ T6466] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 337.052964][ T6475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 337.147905][ T6466] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #15: comm syz.4.101: corrupted xattr block 19: overlapping e_value [ 337.191040][ T6475] EXT4-fs (loop4): Remounting filesystem read-only [ 337.703231][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.216621][ T6479] loop7: detected capacity change from 0 to 4096 [ 338.320007][ T6479] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 338.435305][ T6489] loop4: detected capacity change from 0 to 64 [ 338.700983][ T6492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.432076][ T6479] syz.7.48 (6479) used greatest stack depth: 4936 bytes left [ 340.006850][ T6502] netlink: 'syz.0.108': attribute type 11 has an invalid length. [ 341.276638][ T6514] loop7: detected capacity change from 0 to 512 [ 341.449905][ T6512] loop6: detected capacity change from 0 to 2048 [ 341.618583][ T6514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.631815][ T6514] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.728021][ T6512] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.246688][ T6525] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 342.282208][ T6514] EXT4-fs error (device loop7): ext4_xattr_block_list:762: inode #15: comm syz.7.114: corrupted xattr block 19: overlapping e_value [ 342.314172][ T6514] EXT4-fs (loop7): Remounting filesystem read-only [ 343.046725][ T6536] loop5: detected capacity change from 0 to 64 [ 343.333973][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.289993][ T6547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.329867][ T1993] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 344.424475][ T6549] netlink: 'syz.5.121': attribute type 11 has an invalid length. [ 344.580082][ T1993] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 344.591117][ T1993] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.604743][ T1993] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 344.614287][ T1993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.778819][ T1993] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.895470][ T1993] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 345.013859][ T1993] usb 7-1: USB disconnect, device number 2 [ 345.591089][ T6556] syzkaller1: entered promiscuous mode [ 345.597011][ T6556] syzkaller1: entered allmulticast mode [ 345.630404][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.005210][ T6574] loop5: detected capacity change from 0 to 512 [ 347.135863][ T6570] loop4: detected capacity change from 0 to 2048 [ 347.229952][ T6574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.245463][ T6574] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.291504][ T6578] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 347.360356][ T6578] EXT4-fs (loop5): Remounting filesystem read-only [ 347.456637][ T6570] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.651450][ T6584] loop7: detected capacity change from 0 to 64 [ 348.086032][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.961253][ T6598] netlink: 'syz.4.133': attribute type 11 has an invalid length. [ 349.089141][ T6597] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 350.396233][ T6619] syzkaller1: entered promiscuous mode [ 350.400783][ T1993] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 350.402293][ T6619] syzkaller1: entered allmulticast mode [ 350.876772][ T1993] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 350.887693][ T1993] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.901584][ T1993] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.911194][ T1993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.068053][ T1993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.708804][ T1993] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 351.868801][ T1993] usb 5-1: USB disconnect, device number 4 [ 351.924591][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.343747][ T6628] loop7: detected capacity change from 0 to 512 [ 352.422291][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.429061][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.793111][ T6628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.806467][ T6628] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.929062][ T6630] loop6: detected capacity change from 0 to 2048 [ 353.040227][ T6642] loop4: detected capacity change from 0 to 64 [ 353.145786][ T6628] EXT4-fs error (device loop7): ext4_xattr_block_list:762: inode #15: comm syz.7.144: corrupted xattr block 19: overlapping e_value [ 353.170416][ T6628] EXT4-fs (loop7): Remounting filesystem read-only [ 353.216460][ T6630] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 353.532985][ T6645] netlink: 'syz.0.147': attribute type 11 has an invalid length. [ 353.748645][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.874481][ T1993] kernel write not supported for file /35/coredump_filter (pid: 1993 comm: kworker/0:2) [ 355.773794][ T6668] loop0: detected capacity change from 0 to 256 [ 356.007800][ T6669] syzkaller1: entered promiscuous mode [ 356.013754][ T6669] syzkaller1: entered allmulticast mode [ 356.649891][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 356.868399][ T24] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 356.879207][ T24] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.892782][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.902281][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.037096][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 357.259141][ T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 357.367268][ T24] usb 7-1: USB disconnect, device number 3 [ 357.394101][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 357.460396][ T6684] loop5: detected capacity change from 0 to 512 [ 357.715434][ T6684] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.734298][ T6684] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.898642][ T6684] EXT4-fs error (device loop5): ext4_xattr_block_list:762: inode #15: comm syz.5.159: corrupted xattr block 19: overlapping e_value [ 358.014703][ T6684] EXT4-fs (loop5): Remounting filesystem read-only [ 358.225996][ T6695] loop7: detected capacity change from 0 to 64 [ 358.595882][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.038688][ T6699] loop6: detected capacity change from 0 to 2048 [ 359.319057][ T6699] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.763344][ T6708] loop0: detected capacity change from 0 to 164 [ 359.801424][ T6709] usb usb8: usbfs: process 6709 (syz.7.164) did not claim interface 0 before use [ 359.889110][ T6708] rock: directory entry would overflow storage [ 359.896996][ T6708] rock: sig=0x4543, size=28, remaining=18 [ 361.460858][ T6721] syzkaller1: entered promiscuous mode [ 361.466649][ T6721] syzkaller1: entered allmulticast mode [ 362.289803][ T1993] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 362.562573][ T1993] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 362.573507][ T1993] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.589719][ T1993] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 362.599101][ T1993] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.649367][ T6739] loop0: detected capacity change from 0 to 512 [ 362.843588][ T6739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.860913][ T6739] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.871741][ T1993] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.966024][ T1993] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 363.066130][ T6739] EXT4-fs error (device loop0): ext4_xattr_block_list:762: inode #15: comm syz.0.173: corrupted xattr block 19: overlapping e_value [ 363.088242][ T1993] usb 8-1: USB disconnect, device number 2 [ 363.157756][ T6739] EXT4-fs (loop0): Remounting filesystem read-only [ 363.536633][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.706370][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.933095][ T6757] loop0: detected capacity change from 0 to 2048 [ 365.130969][ T6757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.042526][ T6774] syzkaller1: entered promiscuous mode [ 366.048298][ T6774] syzkaller1: entered allmulticast mode [ 366.897593][ T6783] loop5: detected capacity change from 0 to 512 [ 367.233546][ T6783] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.248304][ T6783] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.390850][ T6783] EXT4-fs (loop5): shut down requested (1) [ 367.981055][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.666260][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 368.903962][ T24] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 368.914722][ T24] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 368.928278][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 368.937760][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.224357][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.422523][ T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 369.557441][ T24] usb 7-1: USB disconnect, device number 4 [ 369.743118][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.801003][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 369.808011][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 370.182496][ T6813] loop5: detected capacity change from 0 to 2048 [ 370.399580][ T6813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.063061][ T6827] syzkaller1: entered promiscuous mode [ 371.068847][ T6827] syzkaller1: entered allmulticast mode [ 372.438003][ T6839] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 373.904230][ T6858] loop4: detected capacity change from 0 to 128 [ 374.451086][ T1993] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 374.627676][ T6862] loop6: detected capacity change from 0 to 2048 [ 374.657873][ T1993] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 374.669059][ T1993] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.682912][ T1993] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 374.692446][ T1993] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.904340][ T6862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 375.012935][ T1993] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.348384][ T1993] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 375.470683][ T1993] usb 6-1: USB disconnect, device number 2 [ 375.681486][ T6868] loop7: detected capacity change from 0 to 512 [ 375.942385][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.022865][ T6868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.036269][ T6868] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.313139][ T6868] EXT4-fs (loop7): shut down requested (1) [ 376.397671][ T6872] syzkaller1: entered promiscuous mode [ 376.403658][ T6872] syzkaller1: entered allmulticast mode [ 376.676663][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.699402][ T6893] overlayfs: failed to resolve './file1': -2 [ 378.447866][ T6903] loop7: detected capacity change from 0 to 64 [ 378.713412][ T6907] loop6: detected capacity change from 0 to 64 [ 379.769684][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.7.225'. [ 379.888385][ T6912] loop5: detected capacity change from 0 to 2048 [ 379.997268][ T6912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.130368][ T1993] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 380.284215][ T6922] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 380.440155][ T1993] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 380.450924][ T1993] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 380.470957][ T1993] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 380.482284][ T1993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.783459][ T1993] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 381.128586][ T1993] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 381.231802][ T1993] usb 5-1: USB disconnect, device number 5 [ 381.346183][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.521480][ T6943] overlayfs: failed to resolve './file1': -2 [ 384.020011][ T6959] loop6: detected capacity change from 0 to 64 [ 384.397723][ T6964] loop4: detected capacity change from 0 to 256 [ 384.464248][ T6964] exfat: Deprecated parameter 'utf8' [ 384.470293][ T6964] exfat: Deprecated parameter 'utf8' [ 384.476546][ T6964] exfat: Deprecated parameter 'utf8' [ 384.741676][ T6964] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 384.976749][ T30] audit: type=1800 audit(1747950085.507:3): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.238" name="file1" dev="loop4" ino=1048614 res=0 errno=0 [ 385.382938][ T6968] loop7: detected capacity change from 0 to 2048 [ 385.428929][ T6975] 9pnet_fd: Insufficient options for proto=fd [ 385.486086][ T6968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 386.079234][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 386.176445][ T6981] netlink: 'syz.5.243': attribute type 11 has an invalid length. [ 386.380493][ T24] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 386.391604][ T24] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.408668][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 386.419288][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.611563][ T6985] syzkaller1: entered promiscuous mode [ 386.617477][ T6985] syzkaller1: entered allmulticast mode [ 386.757357][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 387.001383][ T6988] overlayfs: failed to resolve './file1': -2 [ 387.037053][ T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 387.177401][ T24] usb 7-1: USB disconnect, device number 5 [ 387.360866][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 387.445212][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.450866][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.5.247'. [ 389.085136][ T7004] loop4: detected capacity change from 0 to 64 [ 389.663668][ T5799] Bluetooth: hci1: link tx timeout [ 389.669176][ T5799] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 390.635117][ T7018] 9pnet_fd: Insufficient options for proto=fd [ 390.876128][ T7019] loop6: detected capacity change from 0 to 2048 [ 391.035791][ T7019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.720206][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 391.878981][ T7028] loop4: detected capacity change from 0 to 1024 [ 392.193487][ T7028] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.403332][ T7028] overlayfs: missing 'lowerdir' [ 392.472551][ T7028] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.259: Abort forced by user [ 392.529382][ T7028] EXT4-fs (loop4): Remounting filesystem read-only [ 392.540102][ T7028] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 392.962850][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.967327][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 393.264200][ T24] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 393.274844][ T24] usb 8-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.288482][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.297992][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.520035][ T1993] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 393.531994][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 393.753227][ T1993] usb 6-1: Using ep0 maxpacket: 32 [ 393.798883][ T24] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 393.818767][ T1993] usb 6-1: config 0 interface 0 has no altsetting 0 [ 393.925122][ T1993] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 393.934768][ T1993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.936179][ T24] usb 8-1: USB disconnect, device number 3 [ 393.944022][ T1993] usb 6-1: Product: syz [ 393.944137][ T1993] usb 6-1: Manufacturer: syz [ 393.944250][ T1993] usb 6-1: SerialNumber: syz [ 394.064277][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.303695][ T1993] usb 6-1: config 0 descriptor?? [ 394.761858][ T1993] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 394.769170][ T1993] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 395.700924][ T7060] loop7: detected capacity change from 0 to 64 [ 396.927949][ T24] usb 6-1: USB disconnect, device number 3 [ 397.832701][ T7072] loop0: detected capacity change from 0 to 2048 [ 398.109916][ T7072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.911664][ T7085] loop4: detected capacity change from 0 to 1024 [ 399.142187][ T7085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.340792][ T7085] overlayfs: missing 'lowerdir' [ 399.420054][ T7098] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.275: Abort forced by user [ 399.456073][ T7098] EXT4-fs (loop4): Remounting filesystem read-only [ 399.463231][ T7098] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 400.349926][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 400.477100][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.655149][ T24] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 400.666013][ T24] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 400.679785][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 400.689114][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.002766][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 401.098040][ T24] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 401.268897][ T1874] usb 1-1: USB disconnect, device number 4 [ 401.298479][ T7112] loop7: detected capacity change from 0 to 64 [ 401.423189][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 401.622335][ T7115] loop4: detected capacity change from 0 to 1024 [ 401.681335][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 401.722628][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 401.810097][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 401.819626][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.828045][ T24] usb 6-1: Product: syz [ 401.832633][ T24] usb 6-1: Manufacturer: syz [ 401.837503][ T24] usb 6-1: SerialNumber: syz [ 401.858105][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.133299][ T24] usb 6-1: config 0 descriptor?? [ 402.691344][ T24] gs_usb 6-1:0.0: Couldn't get device config: (err=-32) [ 402.698644][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -32 [ 402.850488][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 403.896551][ T7131] loop4: detected capacity change from 0 to 2048 [ 403.920614][ T7133] loop7: detected capacity change from 0 to 64 [ 404.086998][ T7133] Trying to free block not in datazone [ 404.125890][ T7131] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.634334][ T5858] usb 6-1: USB disconnect, device number 4 [ 405.129109][ T7140] loop0: detected capacity change from 0 to 1024 [ 405.379056][ T7140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.442184][ T7148] loop5: detected capacity change from 0 to 64 [ 405.775001][ T7153] loop4: detected capacity change from 0 to 256 [ 405.882345][ T7140] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 405.891959][ T7140] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 406.045497][ T7153] exfat: Deprecated parameter 'utf8' [ 406.051629][ T7153] exfat: Deprecated parameter 'utf8' [ 406.058347][ T7153] exfat: Deprecated parameter 'utf8' [ 406.233973][ T7154] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.292: Abort forced by user [ 406.317164][ T7153] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 406.330295][ T7154] EXT4-fs (loop0): Remounting filesystem read-only [ 406.337309][ T7154] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 406.553843][ T30] audit: type=1800 audit(1747950107.087:4): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.295" name="file1" dev="loop4" ino=1048615 res=0 errno=0 [ 406.790314][ T11] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 406.821645][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.020816][ T11] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 407.031836][ T11] usb 7-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 407.045461][ T11] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.055015][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.217985][ T7162] loop7: detected capacity change from 0 to 1024 [ 407.398931][ T11] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 407.824377][ T11] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 407.888198][ T7168] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 407.947165][ T11] usb 7-1: USB disconnect, device number 6 [ 407.972479][ T7169] overlayfs: failed to resolve './file0': -2 [ 408.145321][ T7163] udevd[7163]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.197174][ T4043] hfsplus: b-tree write err: -5, ino 4 [ 409.909965][ T11] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 409.910768][ T24] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 410.009109][ T7186] loop6: detected capacity change from 0 to 2048 [ 410.165276][ T7186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.174974][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 410.186284][ T24] usb 1-1: config 0 has no interfaces? [ 410.224361][ T11] usb 8-1: config 0 interface 0 has no altsetting 0 [ 410.280378][ T11] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 410.290000][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.298309][ T11] usb 8-1: Product: syz [ 410.303638][ T11] usb 8-1: Manufacturer: syz [ 410.308515][ T11] usb 8-1: SerialNumber: syz [ 410.326385][ T24] usb 1-1: string descriptor 0 read error: -22 [ 410.334045][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.343554][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.525291][ T24] usb 1-1: config 0 descriptor?? [ 410.534619][ T11] usb 8-1: config 0 descriptor?? [ 410.984956][ T11] gs_usb 8-1:0.0: Couldn't get device config: (err=-32) [ 410.992599][ T11] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 411.700410][ T7204] loop4: detected capacity change from 0 to 64 [ 411.727617][ T7202] loop6: detected capacity change from 0 to 1024 [ 411.870253][ T7202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.026271][ T7202] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 412.037102][ T7202] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 412.175228][ T7202] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.309: Abort forced by user [ 412.290145][ T7202] EXT4-fs (loop6): Remounting filesystem read-only [ 412.297439][ T7202] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 412.726170][ T24] usb 8-1: USB disconnect, device number 4 [ 412.863265][ T6110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.972320][ T11] usb 1-1: USB disconnect, device number 5 [ 413.365322][ T7212] loop4: detected capacity change from 0 to 1024 [ 413.379950][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 413.560038][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 413.596734][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 413.608698][ T24] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 413.620516][ T24] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 413.833525][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.840581][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.899718][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 413.909254][ T24] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 413.918567][ T24] usb 8-1: Product: syz [ 413.923122][ T24] usb 8-1: Manufacturer: syz [ 413.927973][ T24] usb 8-1: SerialNumber: syz [ 413.972068][ T7223] overlayfs: failed to resolve './file0': -2 [ 414.222601][ T24] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input5 [ 414.604010][ T4165] hfsplus: b-tree write err: -5, ino 4 [ 414.761963][ T24] usb 8-1: USB disconnect, device number 5 [ 414.914831][ T24] appletouch 8-1:1.0: input: appletouch disconnected [ 415.729685][ T7231] loop6: detected capacity change from 0 to 2048 [ 415.922317][ T7231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.977086][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 415.983945][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 416.924158][ T7246] loop6: detected capacity change from 0 to 64 [ 417.649734][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 417.870293][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 417.943553][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 418.021312][ T24] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 418.031245][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.043360][ T24] usb 1-1: Product: syz [ 418.047828][ T24] usb 1-1: Manufacturer: syz [ 418.054115][ T24] usb 1-1: SerialNumber: syz [ 418.154265][ T24] usb 1-1: config 0 descriptor?? [ 418.464498][ T7254] loop5: detected capacity change from 0 to 1024 [ 418.638801][ T24] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 418.646429][ T24] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 418.753395][ T7254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.853774][ T7254] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 418.867225][ T7254] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 418.990418][ C0] hrtimer: interrupt took 265890 ns [ 419.101061][ T7264] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.324: Abort forced by user [ 419.145527][ T7264] EXT4-fs (loop5): Remounting filesystem read-only [ 419.152912][ T7264] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 419.559319][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.978320][ T7270] loop4: detected capacity change from 0 to 256 [ 420.170700][ T7270] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.435028][ T7270] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 420.587328][ T24] usb 1-1: USB disconnect, device number 6 [ 421.246637][ T7276] loop6: detected capacity change from 0 to 4096 [ 421.519912][ T7284] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.582792][ T7281] loop0: detected capacity change from 0 to 2048 [ 421.698109][ T7276] syz.6.330: attempt to access beyond end of device [ 421.698109][ T7276] loop6: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 421.769699][ T7281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.791003][ T7276] syz.6.330: attempt to access beyond end of device [ 421.791003][ T7276] loop6: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 421.850099][ T30] audit: type=1800 audit(1747950122.357:5): pid=7276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.330" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 421.956580][ T7289] loop4: detected capacity change from 0 to 64 [ 422.320977][ T30] audit: type=1800 audit(1747950122.827:6): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.334" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 423.298496][ T7295] loop0: detected capacity change from 0 to 64 [ 423.693641][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.337'. [ 423.917057][ T7299] loop4: detected capacity change from 0 to 1024 [ 424.121623][ T7299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.447739][ T7299] overlayfs: missing 'workdir' [ 424.538519][ T7299] EXT4-fs error (device loop4): __ext4_remount:6738: comm syz.4.338: Abort forced by user [ 424.630411][ T7299] EXT4-fs (loop4): Remounting filesystem read-only [ 424.637428][ T7299] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 425.113702][ T11] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 425.328674][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 425.347694][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.395991][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.407479][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.422901][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 425.438421][ T11] usb 7-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 425.447955][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.689380][ T11] usb 7-1: config 0 descriptor?? [ 425.979942][ T5858] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 426.168985][ T11] usbhid 7-1:0.0: can't add hid device: -71 [ 426.176712][ T11] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 426.210350][ T5858] usb 8-1: Using ep0 maxpacket: 32 [ 426.283057][ T5858] usb 8-1: config 0 interface 0 has no altsetting 0 [ 426.310854][ T5858] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 426.320737][ T5858] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.329035][ T5858] usb 8-1: Product: syz [ 426.333870][ T5858] usb 8-1: Manufacturer: syz [ 426.338720][ T5858] usb 8-1: SerialNumber: syz [ 426.353860][ T11] usb 7-1: USB disconnect, device number 7 [ 426.456741][ T5858] usb 8-1: config 0 descriptor?? [ 426.914157][ T7329] loop5: detected capacity change from 0 to 2048 [ 426.930822][ T5858] gs_usb 8-1:0.0: Couldn't get device config: (err=-32) [ 426.938114][ T5858] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 427.110766][ T7329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 427.226270][ T7333] loop0: detected capacity change from 0 to 164 [ 427.276277][ T7335] loop4: detected capacity change from 0 to 64 [ 427.509941][ T30] audit: type=1800 audit(1747950128.047:7): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.348" name="bus" dev="loop4" ino=8 res=0 errno=0 [ 428.556514][ T7343] loop5: detected capacity change from 0 to 64 [ 429.258533][ T24] usb 8-1: USB disconnect, device number 6 [ 429.952856][ T7351] overlayfs: missing 'workdir' [ 430.223672][ T7353] loop6: detected capacity change from 0 to 1024 [ 430.522455][ T7353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.794687][ T7353] overlayfs: missing 'workdir' [ 430.918351][ T7353] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.354: Abort forced by user [ 430.967883][ T7353] EXT4-fs (loop6): Remounting filesystem read-only [ 430.976618][ T7353] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 431.543031][ T6110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.870874][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 432.047745][ T7376] loop0: detected capacity change from 0 to 2048 [ 432.080631][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 432.151104][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.162779][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.177335][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.192033][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 432.202131][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.370286][ T7376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.486061][ T24] usb 6-1: config 0 descriptor?? [ 432.597302][ T11] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 432.870996][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 432.906682][ T11] usb 8-1: config 0 interface 0 has no altsetting 0 [ 432.971402][ T11] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 432.981534][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.995745][ T11] usb 8-1: Product: syz [ 433.002010][ T11] usb 8-1: Manufacturer: syz [ 433.006884][ T11] usb 8-1: SerialNumber: syz [ 433.090171][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 433.102306][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 433.164206][ T11] usb 8-1: config 0 descriptor?? [ 433.189870][ T24] usb 6-1: USB disconnect, device number 5 [ 433.871801][ T11] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 433.879163][ T11] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 434.131387][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.365'. [ 434.725891][ T7394] syz.0.366 uses obsolete (PF_INET,SOCK_PACKET) [ 434.966158][ T7399] loop5: detected capacity change from 0 to 16 [ 435.719997][ T24] usb 8-1: USB disconnect, device number 7 [ 436.403345][ T7410] loop5: detected capacity change from 0 to 1024 [ 436.683113][ T7410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.852410][ T7410] overlayfs: missing 'workdir' [ 436.912857][ T7410] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.372: Abort forced by user [ 436.998210][ T7410] EXT4-fs (loop5): Remounting filesystem read-only [ 437.005473][ T7410] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 437.527240][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.7.377'. [ 437.546532][ T7423] loop6: detected capacity change from 0 to 2048 [ 437.563164][ T6100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.748468][ T7423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.180487][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 438.589234][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 438.773819][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.785192][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.795503][ T11] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.808856][ T11] usb 5-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 438.818368][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.890672][ T11] usb 5-1: config 0 descriptor?? [ 439.557611][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 439.564710][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 439.631755][ T11] usb 5-1: USB disconnect, device number 6 [ 440.240881][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 440.459957][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 440.520926][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 440.601742][ T24] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 440.611405][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.619952][ T24] usb 6-1: Product: syz [ 440.624363][ T24] usb 6-1: Manufacturer: syz [ 440.629220][ T24] usb 6-1: SerialNumber: syz [ 440.698073][ T24] usb 6-1: config 0 descriptor?? [ 441.203181][ T24] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 441.210747][ T24] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 441.567479][ T7457] loop7: detected capacity change from 0 to 256 [ 441.641519][ T7457] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 441.826952][ T7457] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 442.794526][ T7466] loop0: detected capacity change from 0 to 1024 [ 442.853030][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 443.013506][ T7466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.094826][ T11] usb 6-1: USB disconnect, device number 6 [ 443.667228][ T7476] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.390: Abort forced by user [ 443.692813][ T7476] EXT4-fs (loop0): Remounting filesystem read-only [ 443.699768][ T7476] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 443.840194][ T7466] overlayfs: failed to create directory ./file1/work (errno: 30); mounting read-only [ 443.858525][ T7466] overlayfs: failed to set uuid (/file0, err=-30); falling back to uuid=null. [ 444.087499][ T30] audit: type=1326 audit(1747950144.617:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.215949][ T30] audit: type=1326 audit(1747950144.697:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.238721][ T30] audit: type=1326 audit(1747950144.767:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.263590][ T30] audit: type=1326 audit(1747950144.767:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.527390][ T30] audit: type=1326 audit(1747950144.847:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.566362][ T30] audit: type=1326 audit(1747950144.977:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.600527][ T30] audit: type=1326 audit(1747950144.977:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.641352][ T7480] loop4: detected capacity change from 0 to 1024 [ 444.788157][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.930089][ T30] audit: type=1326 audit(1747950145.197:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.952381][ T30] audit: type=1326 audit(1747950145.267:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 444.978000][ T30] audit: type=1326 audit(1747950145.267:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7478 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 445.098733][ T7480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.112874][ T7480] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.805757][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.152696][ T7506] netlink: 4 bytes leftover after parsing attributes in process `syz.6.403'. [ 447.614998][ T7513] loop4: detected capacity change from 0 to 16 [ 447.639863][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 447.800251][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 447.849180][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 447.971469][ T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 447.981164][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.989636][ T24] usb 8-1: Product: syz [ 447.994062][ T24] usb 8-1: Manufacturer: syz [ 447.999022][ T24] usb 8-1: SerialNumber: syz [ 448.113222][ T24] usb 8-1: config 0 descriptor?? [ 448.684602][ T24] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 448.692923][ T24] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 450.759054][ T24] usb 8-1: USB disconnect, device number 8 [ 451.273012][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 452.017871][ T7555] loop6: detected capacity change from 0 to 16 [ 453.115610][ T7561] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 453.713164][ T7566] loop6: detected capacity change from 0 to 512 [ 453.947875][ T7570] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 453.957158][ T7570] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 454.048878][ T7566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.062490][ T7566] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.334559][ T7566] __quota_error: 7 callbacks suppressed [ 454.334649][ T7566] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 454.353630][ T7566] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 454.364176][ T7566] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.423: Failed to acquire dquot type 0 [ 455.021690][ T6110] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.775863][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 456.302960][ T7596] loop7: detected capacity change from 0 to 16 [ 458.521547][ T7617] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 458.530851][ T7617] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 459.393617][ T7626] loop7: detected capacity change from 0 to 512 [ 459.567404][ T7626] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.581481][ T7626] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.750520][ T7626] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 459.761699][ T7626] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 459.771747][ T7626] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.442: Failed to acquire dquot type 0 [ 459.784910][ T7634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.445'. [ 459.964530][ T7636] loop6: detected capacity change from 0 to 64 [ 460.151856][ T7636] Trying to free block not in datazone [ 460.442788][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.574268][ T7639] loop0: detected capacity change from 0 to 16 [ 463.681904][ T7661] loop4: detected capacity change from 0 to 2048 [ 463.713177][ T7667] loop7: detected capacity change from 0 to 512 [ 463.852905][ T7661] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 463.940589][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.5.459'. [ 463.976372][ T7667] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.990088][ T7667] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.210513][ T7667] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 464.222089][ T7667] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 464.239642][ T7667] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.458: Failed to acquire dquot type 0 [ 464.986180][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.033327][ T7682] loop6: detected capacity change from 0 to 64 [ 465.243375][ T7682] Trying to free block not in datazone [ 465.307183][ T7688] loop4: detected capacity change from 0 to 16 [ 465.513658][ T7687] loop5: detected capacity change from 0 to 764 [ 465.709761][ T7687] rock: directory entry would overflow storage [ 465.716464][ T7687] rock: sig=0x4654, size=5, remaining=4 [ 468.046568][ T7714] loop6: detected capacity change from 0 to 2048 [ 468.251622][ T7714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 468.551402][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 468.840057][ T7719] loop7: detected capacity change from 0 to 512 [ 469.099765][ T7719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.113201][ T7719] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.289961][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 469.318303][ T7719] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 469.329774][ T7719] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 469.340506][ T7719] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.474: Failed to acquire dquot type 0 [ 469.539829][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 469.620164][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.631632][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.642355][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.697572][ T7729] loop6: detected capacity change from 0 to 16 [ 469.869100][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 469.879060][ T24] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 469.888422][ T24] usb 5-1: Product: syz [ 469.893001][ T24] usb 5-1: Manufacturer: syz [ 469.897871][ T24] usb 5-1: SerialNumber: syz [ 469.946416][ T6163] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.128273][ T24] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6 [ 470.350445][ T24] usb 5-1: USB disconnect, device number 7 [ 470.463651][ T24] appletouch 5-1:1.0: input: appletouch disconnected [ 471.097591][ T7739] loop6: detected capacity change from 0 to 256 [ 471.156074][ T7739] exfat: Deprecated parameter 'utf8' [ 471.162168][ T7739] exfat: Deprecated parameter 'utf8' [ 471.168536][ T7739] exfat: Deprecated parameter 'utf8' [ 471.541286][ T7739] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 473.941167][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 474.064706][ T7767] loop4: detected capacity change from 0 to 512 [ 474.233952][ T7761] loop6: detected capacity change from 0 to 2048 [ 474.412327][ T7767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.425710][ T7767] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.530930][ T7761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 474.648139][ T7767] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 474.659287][ T7767] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 474.675327][ T7767] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.489: Failed to acquire dquot type 0 [ 475.217287][ T5808] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.302062][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.308794][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.320021][ T11] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 476.521184][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 476.566466][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.578281][ T11] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.588733][ T11] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 476.793872][ T11] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 476.803547][ T11] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 476.812461][ T11] usb 5-1: Product: syz [ 476.823303][ T11] usb 5-1: Manufacturer: syz [ 476.828182][ T11] usb 5-1: SerialNumber: syz [ 476.991604][ T11] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 477.282719][ T11] usb 5-1: USB disconnect, device number 8 [ 477.444971][ T11] appletouch 5-1:1.0: input: appletouch disconnected [ 478.815426][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.503'. [ 480.058874][ T7829] netlink: 48 bytes leftover after parsing attributes in process `syz.7.508'. [ 481.618156][ T11] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 481.842543][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 481.928751][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.944208][ T11] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.956148][ T11] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 482.202750][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.518'. [ 482.270572][ T11] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 482.280562][ T11] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 482.295676][ T11] usb 6-1: Product: syz [ 482.300479][ T11] usb 6-1: Manufacturer: syz [ 482.305345][ T11] usb 6-1: SerialNumber: syz [ 482.493733][ T11] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input8 [ 482.777484][ T5857] usb 6-1: USB disconnect, device number 7 [ 482.868331][ T5857] appletouch 6-1:1.0: input: appletouch disconnected [ 484.123673][ T7877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.524'. [ 485.580670][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.531'. [ 485.620969][ T7898] loop0: detected capacity change from 0 to 764 [ 485.759774][ T7898] rock: directory entry would overflow storage [ 485.766295][ T7898] rock: sig=0x4654, size=5, remaining=4 [ 487.950450][ T7924] netlink: 48 bytes leftover after parsing attributes in process `syz.6.539'. [ 489.495703][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.545'. [ 494.702670][ T7989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.557'. [ 496.110444][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.5.561'. [ 499.122507][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.571'. [ 500.492301][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 503.290308][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 503.318438][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 503.347494][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 503.387146][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 503.402466][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 504.437987][ T8079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 504.869084][ T8086] loop5: detected capacity change from 0 to 764 [ 505.142040][ T8086] rock: directory entry would overflow storage [ 505.148517][ T8086] rock: sig=0x4654, size=5, remaining=4 [ 505.486313][ T5799] Bluetooth: hci0: command tx timeout [ 505.722430][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.588'. [ 506.014484][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 507.562583][ T5799] Bluetooth: hci0: command tx timeout [ 508.558822][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.573701][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.581775][ T8070] bridge_slave_0: entered allmulticast mode [ 508.591775][ T8070] bridge_slave_0: entered promiscuous mode [ 508.779705][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.787383][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.795495][ T8070] bridge_slave_1: entered allmulticast mode [ 508.805913][ T8070] bridge_slave_1: entered promiscuous mode [ 509.062475][ T8126] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 509.470461][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.575564][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 509.650425][ T5799] Bluetooth: hci0: command tx timeout [ 509.693585][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.355265][ T8070] team0: Port device team_slave_0 added [ 510.470707][ T8070] team0: Port device team_slave_1 added [ 510.587341][ T8139] loop6: detected capacity change from 0 to 764 [ 510.757667][ T8139] rock: directory entry would overflow storage [ 510.765461][ T8139] rock: sig=0x4654, size=5, remaining=4 [ 510.985574][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 511.175010][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.183076][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.210204][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.508338][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.516107][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.548622][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.720411][ T5803] Bluetooth: hci0: command tx timeout [ 512.798681][ T8070] hsr_slave_0: entered promiscuous mode [ 512.809760][ T8070] hsr_slave_1: entered promiscuous mode [ 513.161912][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 513.772129][ T8164] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.869587][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.5.610'. [ 514.967601][ T8070] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 514.996654][ T8070] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 515.033166][ T8070] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 515.106522][ T8070] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.342545][ T8177] loop5: detected capacity change from 0 to 764 [ 515.457246][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 515.568969][ T8177] rock: directory entry would overflow storage [ 515.576025][ T8177] rock: sig=0x4654, size=5, remaining=4 [ 517.097838][ T8070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.469106][ T8070] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.711650][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.719299][ T4779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.936203][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.943969][ T4779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.941208][ T11] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 519.200803][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 519.218010][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.623'. [ 519.255712][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 519.346887][ T11] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 519.357083][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.366334][ T11] usb 7-1: Product: syz [ 519.370922][ T11] usb 7-1: Manufacturer: syz [ 519.375985][ T11] usb 7-1: SerialNumber: syz [ 519.508831][ T11] usb 7-1: config 0 descriptor?? [ 519.938282][ T8216] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 520.012384][ T11] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 520.222716][ T11] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 520.231784][ T11] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -32 [ 520.377826][ T11] usb 7-1: USB disconnect, device number 8 [ 520.741230][ T8222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.626'. [ 521.711347][ T8228] loop5: detected capacity change from 0 to 764 [ 521.804740][ T8070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.822591][ T8228] rock: directory entry would overflow storage [ 521.829018][ T8228] rock: sig=0x4654, size=5, remaining=4 [ 524.479064][ T8254] overlayfs: missing 'lowerdir' [ 525.038035][ T8259] loop4: detected capacity change from 0 to 256 [ 525.156389][ T8259] exfat: Deprecated parameter 'utf8' [ 525.162211][ T8259] exfat: Deprecated parameter 'utf8' [ 525.168613][ T8259] exfat: Deprecated parameter 'utf8' [ 525.583412][ T8259] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 525.742729][ T30] audit: type=1800 audit(1747950226.297:25): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.637" name="file1" dev="loop4" ino=1048617 res=0 errno=0 [ 526.514012][ T8268] loop5: detected capacity change from 0 to 1024 [ 526.943546][ T8268] ===================================================== [ 526.951056][ T8268] BUG: KMSAN: uninit-value in hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 526.959251][ T8268] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 526.965187][ T8268] hfs_find_rec_by_key+0xae/0x240 [ 526.970732][ T8268] __hfsplus_brec_find+0x271/0x840 [ 526.976132][ T8268] hfsplus_brec_find+0x4df/0x9f0 [ 526.981461][ T8268] hfsplus_attr_exists+0x3c4/0x4b0 [ 526.987002][ T8268] __hfsplus_setxattr+0x593/0x37c0 [ 526.992679][ T8268] hfsplus_setxattr+0x243/0x410 [ 527.006878][ T8268] hfsplus_security_setxattr+0x55/0x70 [ 527.012722][ T8268] __vfs_setxattr+0x742/0x850 [ 527.017644][ T8268] __vfs_setxattr_noperm+0x224/0xad0 [ 527.023400][ T8268] __vfs_setxattr_locked+0x448/0x490 [ 527.028958][ T8268] vfs_setxattr+0x27f/0x640 [ 527.033907][ T8268] filename_setxattr+0x3a4/0xcc0 [ 527.039099][ T8268] path_setxattrat+0x72b/0x820 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 527.044230][ T8268] __ia32_sys_setxattr+0xfd/0x1b0 [ 527.049785][ T8268] ia32_sys_call+0x3836/0x42c0 [ 527.054752][ T8268] __do_fast_syscall_32+0xb0/0x110 [ 527.060252][ T8268] do_fast_syscall_32+0x38/0x80 [ 527.065368][ T8268] do_SYSENTER_32+0x1f/0x30 [ 527.070338][ T8268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.076939][ T8268] [ 527.080684][ T8268] Uninit was created at: [ 527.085513][ T8268] __kmalloc_noprof+0x95f/0x1310 [ 527.090828][ T8268] hfsplus_find_init+0x90/0x1d0 [ 527.100548][ T8268] hfsplus_attr_exists+0xe0/0x4b0 [ 527.105853][ T8268] __hfsplus_setxattr+0x593/0x37c0 [ 527.113109][ T8268] hfsplus_setxattr+0x243/0x410 [ 527.118249][ T8268] hfsplus_security_setxattr+0x55/0x70 [ 527.124070][ T8268] __vfs_setxattr+0x742/0x850 [ 527.128992][ T8268] __vfs_setxattr_noperm+0x224/0xad0 [ 527.134664][ T8268] __vfs_setxattr_locked+0x448/0x490 [ 527.140424][ T8268] vfs_setxattr+0x27f/0x640 [ 527.145267][ T8268] filename_setxattr+0x3a4/0xcc0 [ 527.150611][ T8268] path_setxattrat+0x72b/0x820 [ 527.155584][ T8268] __ia32_sys_setxattr+0xfd/0x1b0 [ 527.161008][ T8268] ia32_sys_call+0x3836/0x42c0 [ 527.165987][ T8268] __do_fast_syscall_32+0xb0/0x110 [ 527.171520][ T8268] do_fast_syscall_32+0x38/0x80 [ 527.176627][ T8268] do_SYSENTER_32+0x1f/0x30 [ 527.183290][ T8268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.191770][ T8268] [ 527.194277][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.5.640 Not tainted 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(undef) [ 527.211797][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.223495][ T8268] ===================================================== [ 527.230836][ T8268] Disabling lock debugging due to kernel taint [ 527.237150][ T8268] Kernel panic - not syncing: kmsan.panic set ... [ 527.243759][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.5.640 Tainted: G B 6.15.0-rc7-syzkaller-00014-gd608703fcdd9 #0 PREEMPT(undef) [ 527.257853][ T8268] Tainted: [B]=BAD_PAGE [ 527.262168][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 527.272423][ T8268] Call Trace: [ 527.275867][ T8268] [ 527.278946][ T8268] __dump_stack+0x26/0x30 [ 527.283529][ T8268] dump_stack_lvl+0x53/0x270 [ 527.288359][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.294473][ T8268] dump_stack+0x1e/0x25 [ 527.298885][ T8268] panic+0x4bd/0xd50 [ 527.303092][ T8268] kmsan_report+0x29d/0x2a0 [ 527.307893][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.313401][ T8268] ? __msan_warning+0x96/0x120 [ 527.318420][ T8268] ? hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 527.324338][ T8268] ? hfs_find_rec_by_key+0xae/0x240 [ 527.329908][ T8268] ? __hfsplus_brec_find+0x271/0x840 [ 527.335459][ T8268] ? hfsplus_brec_find+0x4df/0x9f0 [ 527.340850][ T8268] ? hfsplus_attr_exists+0x3c4/0x4b0 [ 527.346414][ T8268] ? __hfsplus_setxattr+0x593/0x37c0 [ 527.351988][ T8268] ? hfsplus_setxattr+0x243/0x410 [ 527.357288][ T8268] ? hfsplus_security_setxattr+0x55/0x70 [ 527.363152][ T8268] ? __vfs_setxattr+0x742/0x850 [ 527.368254][ T8268] ? __vfs_setxattr_noperm+0x224/0xad0 [ 527.373984][ T8268] ? __vfs_setxattr_locked+0x448/0x490 [ 527.379705][ T8268] ? vfs_setxattr+0x27f/0x640 [ 527.384618][ T8268] ? filename_setxattr+0x3a4/0xcc0 [ 527.389981][ T8268] ? path_setxattrat+0x72b/0x820 [ 527.395130][ T8268] ? __ia32_sys_setxattr+0xfd/0x1b0 [ 527.400593][ T8268] ? ia32_sys_call+0x3836/0x42c0 [ 527.405737][ T8268] ? __do_fast_syscall_32+0xb0/0x110 [ 527.411308][ T8268] ? do_fast_syscall_32+0x38/0x80 [ 527.416631][ T8268] ? do_SYSENTER_32+0x1f/0x30 [ 527.421605][ T8268] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.428380][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.433873][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.439985][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.445486][ T8268] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 527.452040][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.457538][ T8268] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 527.464054][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.469563][ T8268] __msan_warning+0x96/0x120 [ 527.474415][ T8268] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 527.480170][ T8268] hfs_find_rec_by_key+0xae/0x240 [ 527.485652][ T8268] ? __pfx_hfsplus_attr_bin_cmp_key+0x10/0x10 [ 527.492014][ T8268] __hfsplus_brec_find+0x271/0x840 [ 527.497396][ T8268] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 527.503335][ T8268] hfsplus_brec_find+0x4df/0x9f0 [ 527.508547][ T8268] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 527.514498][ T8268] hfsplus_attr_exists+0x3c4/0x4b0 [ 527.519899][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.525403][ T8268] __hfsplus_setxattr+0x593/0x37c0 [ 527.530800][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.536284][ T8268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 527.542892][ T8268] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 527.549045][ T8268] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 527.555210][ T8268] ? kmsan_slab_alloc+0xde/0x160 [ 527.560422][ T8268] ? __kmalloc_cache_noprof+0x7f7/0xed0 [ 527.566223][ T8268] ? hfsplus_setxattr+0x73/0x410 [ 527.571438][ T8268] ? hfsplus_security_setxattr+0x55/0x70 [ 527.577299][ T8268] ? __vfs_setxattr+0x742/0x850 [ 527.582411][ T8268] ? __vfs_setxattr_noperm+0x224/0xad0 [ 527.588156][ T8268] ? __vfs_setxattr_locked+0x448/0x490 [ 527.593884][ T8268] ? vfs_setxattr+0x27f/0x640 [ 527.598819][ T8268] ? filename_setxattr+0x3a4/0xcc0 [ 527.604200][ T8268] ? path_setxattrat+0x72b/0x820 [ 527.609361][ T8268] ? __ia32_sys_setxattr+0xfd/0x1b0 [ 527.614846][ T8268] ? ia32_sys_call+0x3836/0x42c0 [ 527.620001][ T8268] ? __do_fast_syscall_32+0xb0/0x110 [ 527.625571][ T8268] ? do_fast_syscall_32+0x38/0x80 [ 527.630892][ T8268] ? do_SYSENTER_32+0x1f/0x30 [ 527.635839][ T8268] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.642606][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.648080][ T8268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 527.654709][ T8268] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 527.661040][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.666519][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.672627][ T8268] ? should_fail_ex+0x45/0x8a0 [ 527.677616][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.683090][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.688578][ T8268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 527.695195][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.700686][ T8268] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 527.707198][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.713314][ T8268] hfsplus_setxattr+0x243/0x410 [ 527.718484][ T8268] hfsplus_security_setxattr+0x55/0x70 [ 527.724174][ T8268] ? __pfx_hfsplus_security_setxattr+0x10/0x10 [ 527.730556][ T8268] __vfs_setxattr+0x742/0x850 [ 527.735549][ T8268] __vfs_setxattr_noperm+0x224/0xad0 [ 527.741141][ T8268] __vfs_setxattr_locked+0x448/0x490 [ 527.746704][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.752818][ T8268] vfs_setxattr+0x27f/0x640 [ 527.757596][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.763719][ T8268] filename_setxattr+0x3a4/0xcc0 [ 527.768965][ T8268] path_setxattrat+0x72b/0x820 [ 527.773973][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.779461][ T8268] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 527.785570][ T8268] ? kmsan_get_metadata+0x105/0x1b0 [ 527.791046][ T8268] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 527.797702][ T8268] __ia32_sys_setxattr+0xfd/0x1b0 [ 527.803038][ T8268] ia32_sys_call+0x3836/0x42c0 [ 527.808042][ T8268] __do_fast_syscall_32+0xb0/0x110 [ 527.813472][ T8268] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 527.819479][ T8268] do_fast_syscall_32+0x38/0x80 [ 527.824637][ T8268] do_SYSENTER_32+0x1f/0x30 [ 527.829422][ T8268] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 527.836030][ T8268] RIP: 0023:0xf70fe539 [ 527.840289][ T8268] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 527.860194][ T8268] RSP: 002b:00000000f50ee55c EFLAGS: 00000206 ORIG_RAX: 00000000000000e2 [ 527.868858][ T8268] RAX: ffffffffffffffda RBX: 0000000080000100 RCX: 0000000080000200 [ 527.877029][ T8268] RDX: 0000000080000080 RSI: 0000000000000700 RDI: 0000000000000000 [ 527.885209][ T8268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 527.893368][ T8268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.901541][ T8268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 527.909744][ T8268] [ 527.913244][ T8268] Kernel Offset: disabled [ 527.917672][ T8268] Rebooting in 86400 seconds..