last executing test programs: 1m5.496860279s ago: executing program 5 (id=1828): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1ae) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$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") socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 1m3.729621628s ago: executing program 5 (id=1829): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x802, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readlink(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 1m1.901826924s ago: executing program 5 (id=1831): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001300)={0x2c, 0x0, &(0x7f0000001200)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0ff51c318db6d425b1b3"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) 49.78010661s ago: executing program 3 (id=1845): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0x42, 0x4, 0x2e8, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 48.298607795s ago: executing program 3 (id=1846): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b612"}, 0x20) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) 43.47596226s ago: executing program 3 (id=1853): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_getattr(r1, &(0x7f0000000240)={0x38}, 0x88, 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg(r4, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000200), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 41.123858851s ago: executing program 3 (id=1857): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1ae) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$eJzs3d9rW28ZAPDnnDbf/erXZurFHLgNnXRDl7Sr24oXc4K4q4Fz3s/apqU0bUqTbmsZ0uG9gogKXnnljeAfIMj+BBEGei9TFNFNL7xQI0lO5lqTtrA0Z7afD5yd97xvkud5N3J+vOddTgDH1qWIuBMRIxFxNSLGs/o0W+622u93Xvf61dO51pJEs/ngL0kkWV3EyR2feSYitqNT+7W7Ed9M/jdufXNrebZaraxn2+XGylq5vrl1bWlldrGyWFmdnp66OXNr5sbM5ED6WYyI21/+ww+++9Ov3P7l5x7/7uGfrnyrldZY1t7px+B1ul7Y8Tc0GhHrhxEsByPZutCn/TsjQ0wGAIB9tc7xPxoRn2qf/4/HSPvsFAAAADhKml8ci38mEU0AAADgyErbc2CTtJTNBRiLNC2VOnN4Px6n02qt3vjsQm1jdb4zV7YYhXRhqVqZzOYKF6OQtLansjm23e3ru7anI+JsRHx//FR7uzRXq87nPfgBAAAAx8SZXdf/fx9vX/+fyDsvAAAAYMCKeScAAAAAHLq9rv8/MsQ8AAAAgMPj/j8AAAAcaV+9d6+1NLvPv55/tLmxXHt0bb5SXy6tbMyV5mrra6XFWm2x/Zt9K/t9XrVWW/t8rG48KTcq9Ua5vrn1cKW2sdp4uLTrIeEAAADA0Jy9+Py3SURsf+FUe2n54OBv//DwMgMOW7JPe/shIS+zjd8PISFgaEbyTgDIzWjeCQC5KeSdAJC7/cYB+k7e+dXgcwEAAA7HxCf63/83NgBHW9q3pTnUPACA4XH/H46vws4ZgDfyywTIy36P+XiX+/+dkYSmAQUAAMjZWHtJ0lJ2L3As0rRU6vzH/mIUkoWlamUyuz74zXjhRGt7qv3OZN85wwAAAAAAAAAAAAAAAAAAAAAAAABAR7OZRBMAAAA40iLSPybtX/OPmBi/PLZ7fOCD5B/j7XVEPP7xgx8+mW001qda9X99U9/4UVZ/PY8RDAAAAGC37nV69zoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp9aunc91lmHH//KWIKPaMf/Fke3UyChFx+m9JjL71viQiRgYQf/tZRJzrFT9ppRXF6GTRK/6pHOOnEXFmAPHhOHve2v/c6fX9S+NSe937+zeaLe+q//4vje7+b6TP/ufDA8Y4/+Ln5b7xn0WcH+29/+nGT/rE//QB43/j61tb/dqaP4mY6Hn8SXbEKjdW1sr1za1rSyuzi5XFyur09NTNmVszN2YmywtL1Ur2Z88Y3/vkL/69V/9P94lf3Kf/lw/Y/3+9ePLqY51iYXdbt6LX8fdcn/hpduz7TFZutU90y9ud8tsu/OzXF/bq/3yf/r/59+9xoG3FvHLA/l+9/+2XB3wpADAE9c2t5dlqtbL+/1hI471IQ2EghRPvRxp7FArxXqQxnELeeyYAAGDQ/nvSn3cmAAAAAAAAAAAAAAAAAAAAcHwN4+fEdsfczqerAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7+k8AAAD//y5x2R8=") socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r9 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netstat\x00') pread64(r9, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) fchmodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0) 34.836755091s ago: executing program 3 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0xffff}}}, 0x24}}, 0x0) 29.798226601s ago: executing program 3 (id=1876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 14.287686197s ago: executing program 0 (id=1905): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1430c2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) 12.086726567s ago: executing program 0 (id=1907): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x42, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) pipe2$9p(0x0, 0x0) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x298) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f", 0x1, r5) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000580)=ANY=[], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 11.816193248s ago: executing program 1 (id=1908): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc753463230e896cb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.212407115s ago: executing program 0 (id=1910): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) open(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000009c0)={[{@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x361274c1}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@errors_continue}]}, 0x5, 0x1518, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000f80)=""/4115, 0x26, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) preadv(r5, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r7, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010ac056c0200006fd80001090224000100000000090400000103000000090600000021225718cb29f72dda8b6f709bd0f4240700090581030000000000383f951f75a34de8de6d36245137acc5da96765b04b9a57d42316126199052e91b94630cec9c483058633c40cdd7e8365e1cc9e57c80c2bf544d41c4ddf0acd3217661dc17607f149a12366aa777737ba987f6e9493a569cec96e47a7b0657ae8e9b71d2af38d559fdb0c1e14741331959f66c1d664c37ffdb85c916abb661e074a13802f0cd4b553e4395f16980553882bf213455170308efeb"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 7.890366728s ago: executing program 2 (id=1913): mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5f0, &(0x7f0000000640)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f00005ac000/0x4000)=nil, 0x4000, 0x2) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) 6.963416073s ago: executing program 1 (id=1914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2a, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xf}, {0x0, 0xffff}}}, 0x24}}, 0x0) 6.457911146s ago: executing program 1 (id=1915): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.502836046s ago: executing program 2 (id=1916): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000200)={0x0, 'veth1_virt_wifi\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8954, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @empty}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x35}, {}, {0x7, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfd2}, {0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1e00}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x4000000) 5.352568523s ago: executing program 5 (id=1833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc753463230e896cb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x2, "8144"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000980)={0x1c, &(0x7f0000000540)={0x0, 0x16, 0x5, "d48dff6147"}, 0x0, 0x0}) 5.289298282s ago: executing program 4 (id=1917): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 5.011321153s ago: executing program 0 (id=1918): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 4.808207855s ago: executing program 2 (id=1919): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@init_itable}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000000c0)='./bus\x00') syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) 3.845027516s ago: executing program 0 (id=1920): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1a0cc10, &(0x7f0000006080)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b043ebd000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a73c3ffde033b57941ba92cbeb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f037f0b3c3b61f1f6d388072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a4995a430ca7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd7898eda864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4c191d0000000000140000000000c816bbeaa7c8efa7a7e5ee519013434e208fff9bac45b8fc653f68de8e581952e9f6f7284cd39925a9e2515c162d77f2ce25168bbad79ed034bba9226aeb33de4aa528e8f0f53bb9621147355a8ec1f0d67392f340f9f00364defbe60165252a82d1e94719a80a82306b3539a3a936463bac5ab9fdb75ef8b2747dd923fb9d703b02a9aa90490aab821449db6db447af297718481aae1e5a81a4ce5fe116dee0ee21fb6e21460dd11a351e50ae1dfe8190d221d94aa5dc7e9873863c57bc4aa81b993066770f4fd01fba00fd02dd28f9ea0d5857b29bc385700638f2722c0835945a49c2a1c696e0da61b2ecccd16011b842b0fbc49672dbfb53464fe22e78aa3ffad220909db66e951a7bbee66fc605dc5c7ff3481b870e61d88a3b6880e6cee7fbfe9fcd72f2e64d64060152460cea09e5c9b7b55fb87e397a1ea49be53bb1c8ac70192d311d2c08a09b8c9916eec7454f0948ff5dd11ad0c46ca603fd3e4aaf7eb636361ee32bd3058f6fdd5f735c743a0f21d770cbd0dd9f4ece37f78611d3fae73136d6f3555533d50b53e04d880c4f2a11b4406cf344e4c9c326288279584a7dcc3f560bfb3b07e5fd7ca24e8f9c4234a3d361165b746475990189e34415bde43d1f31c1552cd554d20a1d7ed4f5a14b81b427bb39aca2c2cee5b48daaddbdb49e7b26ff773335b8f88e88b919c6d445f5f3ef2926ab35bc9dfba18a51c36685d47066e8b454ae009562f1b4118ffcd517a2ff4e78e22224aff677dcf723ff8f3d92129209205a9e89ad6fc5933ed3384889847932cb29c85c761137ad16bca2743c09dfbc7983ea", @ANYBLOB="a93e1cbfeea088b9cb059ce91c144fd901b2d208e6ec16e9c0bdf78cda5604babe81021bae593d8bf404d46fe9ae1e8a141739e9717566c21648e8f46b4fc9d9ed89ada6f7a6e22947e95e9ce126eb0a646a28283f6f61bd31a6a5c909f53dcaf2e8a1914f6cbd8d230587eb6c11457973c0dd3e81487e464b9536ca11862216e1a7ea1aaca778c2b5eea4e08eeb7bbbfd55e1ba9fbcb378636cca2dcb46a029961a41e272c878b929b276ac2741c8f3b77e7850100e289c3b6edbf5d0377206c0bc212cf6a42ececcd4e98747c0423cc4b304569431e8b3020000000000000013de6e27d28126d9a4988919"], 0x1, 0x559f, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_remount}]}, 0xfe, 0x492, &(0x7f0000000f00)="$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") mkdir(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x2000000, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="eeffffff0a000200aaaaaaaaaa1b"], 0x28}}, 0x0) 3.260011565s ago: executing program 2 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b25b06bab7c64b45713d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4b35a9daa5b12d01438c9c4199"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r6}) 3.191241158s ago: executing program 4 (id=1922): ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) 2.541002559s ago: executing program 1 (id=1923): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f2e64000000000c00028008001a00ac14"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 2.208208893s ago: executing program 4 (id=1924): syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1ae) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 1.86225075s ago: executing program 4 (id=1925): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) 1.841755751s ago: executing program 2 (id=1926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3810744, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@errors_continue}, {@init_itable}, {@data_err_abort}, {@errors_remount}, {@noinit_itable}, {@mblk_io_submit}, {@i_version}, {@acl}]}, 0x0, 0x45e, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x4ba9}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000180)=@routing={0x0, 0x6, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @mcast2]}, 0x38) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040), 0x0) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000b80)={0x3, 0x0, [{0x0, 0x73, &(0x7f00000000c0)=""/115}, {0x1, 0x86, &(0x7f0000000a00)=""/134}, {0x5000, 0x9a, &(0x7f0000000ac0)=""/154}]}) 1.799353313s ago: executing program 5 (id=1927): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000002c0)="52e345fa394419a856287739216e84ff4ebbce6fb7333b4eaa8fde73d8652c933b9c3f584c358f46b5cc3331f864c90aa355ac0a883cfd8cc6db453ffd4403fc8c420ddfe73011343bddd02ef41d7dad419aa61dbd3f25f1cfebfdcc4113acd76ca08108281bbd0998e84a016b3aa0a404339f32ebc1e1a826de87", 0x7b}, {&(0x7f00000003c0)="e8f1fefcdd97b70ccb22b31d99ce6f7e4d8127a71275fa1ad6e0d71f2c5321af7a60157b850fc5a1dac38034934e6a22cefe5661e4e82a802dd21d22084e3b767edf6608c5e684bc49ae75c5a3c01e96ad4a0b524ca75c8c932482207a6ee20da93cd0501a5ee3765165fa0d3a739c2cb596079c0bb707d18fa590e62d50b5abb813506c97f579220ad674f10d1a5cd8fee818ec563289a5f80031f83f067bbb99251970e68ab9232cc8f6e5af21c0e00968f77112abfb797acc", 0xba}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x128}}], 0x1, 0x20000810) 1.513705808s ago: executing program 1 (id=1928): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x6000c3, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') mount$9p_xen(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x2000004, 0x0) 1.512413083s ago: executing program 5 (id=1929): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006208e620250580105f580102030109022400010000100009047100024fe43d0009050202ff030200000905820210"], 0x0) 1.308136749s ago: executing program 4 (id=1930): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$eJzs3E1rK1UYwPEnL02TXG4mC1EUpAfdqIuhja7lBmlBDFjaRmwFYdpONGRMSiZUImLryq34Ddy4KF12V1C/QDfudONGV90ILixSPJJ5aSftJNak6cvt/wdlTs9znuk5TBqeEzJz/P7XnzRqrlmzOpLMKkmIiJyIFCUpoURwTHrtjETtyquP/vz5xeXVtXfKlcr8klIL5ZXXS0qpwsz3n36eC4YdTstR8cPjP0q/HT179PzxPysf111Vd1Wz1VGWWm/92rHWHVtt1t2GqdSiY1uurepN12778ZYfrzmtra2uspqbj/Nbbdt1ldXsqobdVZ2W6rS7yvrIqjeVaZrqcV7iZGJ7H6rq3tKSVR4xeeOaJ4NR/a21HhLWibKVEpHcpUh1b6LzAgAAd9LF+j/ZK+lHqv+l4NX/vcHn9f/+Sz92Hr13UAjq/8NMXP3/xi/+ufrq/6yITKD+73e5Irr3dv7P4LHqf9wNM5f3tIm+39rtspUP/n89X36wP+s1qP8BAAAAAAAAAAAAAAAAAAAAALgPTrQ2tNZGeAx+Xjsf4fcNSN+9qXliMgZcf2NaRLK9q6+HXn/cc8ura5L1btxLF0Scr7ar21X/6Md/Dx8tMCuGnHqvh0CvHd55pHqK8oOzE+TvbFdTXqRck7o4YsucGFK8mK/1wtuV+Tnl68+fknw0vySGPBOfX4rNz8grL0fyTTHkpw1piSObvdf1qT7L/2JOqbferVzIz3njAAAAAAB4GpjqTOz+3TQHxf38s/11/+cDIpH9+Wzs/jxtvJC+3bUDAAAAAPBQuN3PGpbj2O34RkI7djsnQ8eM2UiPlj41bEwqssKrnjDjfd9FZHIrHdIIv0jRyERCWfk26B7lzOH6JzPnpIySNSN62p/VOH89/Nho0BhZnPT1Sg8IPffNd39Fep5c/cyJ4Km90dCbB9n/WOnEGlNXevPQqTHffQAAAADcpLDoz7lhz5PbnRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/QkMeApa/rcWK3vUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgrvg3AAD//3xXBXQ=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580), 0x208e24b) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0), 0x4) r1 = dup(r0) ftruncate(r1, 0x400f80) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305828, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x40bfff}) 1.0094006s ago: executing program 1 (id=1931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x8991, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x44, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 166.25998ms ago: executing program 2 (id=1932): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getegid() r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000b00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x81, 0x440, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100), 0x56cd) dup(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x9, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000540)=0x0) timer_create(0x7, &(0x7f0000000580)={0x0, 0x13, 0x2, @thr={&(0x7f0000000040)="bdc290797a7f7e79217bbfb9ec33053c5b1c565f08", &(0x7f00000006c0)="a4a4d242b037e3a427ee4aa28fc0aba0f361ff502677a1817d399f0ecad978ee0f3f2979cd7a3848e433134f352d914dc5327184ea41137e21126909dc2db2df5e8c937791ef9348898b6b588e61bf6c8b844c0bbc84e68b81aaaf7a51904f1f239b3e4fa36b8f642cbfe7eb42dc25779ffe2b67417f3dd322fc8799a842706e423f4464c38482832b4a1cf597e6717b2d64c59a4a6321ccc2aae44f7ad2f12fdb9f0daad3123b46f24f2cd4a1e435ddaae80b1a62e69fc43aa7b936c16ab6a8d1b4efabb5fa45fc8414614b9b3d0521582e4fafd1877996490a890ea6c5f57b180d8c5169900c1b8d8151f48cf1334a"}}, &(0x7f00000005c0)) timer_settime(r1, 0x1, &(0x7f00000007c0)={{}, {0x77359400}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000800)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000500)='sysfs\x00', 0x80, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) unshare(0x800) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4000, 0x0) timer_delete(0x0) pivot_root(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000ec0)={{0x9, 0x2}, 0x100, './file0\x00'}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_fd={0x18, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x7, 0x4d, &(0x7f0000000cc0)=""/77, 0x41100, 0xa, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000c40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0x1, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x0, @void, @value}, 0x90) 63.191518ms ago: executing program 0 (id=1933): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000540)=[{&(0x7f0000002d00)="c021", 0x2}], 0x1) 0s ago: executing program 4 (id=1934): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@private2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000400)='./file0\x00', 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r2, &(0x7f0000000200), 0xd) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [{0x2, 0x7, r1}, {0x2, 0x3, r1}], {}, [{0x8, 0x1}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x6}, {0x8, 0x0, r4}, {0x8, 0x2, r4}, {0x8, 0x2, r4}, {0x8, 0x3}], {0x10, 0x4}}, 0x74, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(r5, 0x5432, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0xb) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x2}, [@CTA_FILTER={0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) capget(&(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3b, 0x1f, 0xffffff3c, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, r6, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) poll(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1383.572233][T16031] FAT-fs (loop2): Filesystem has been set read-only [ 1383.771619][T14782] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1384.928350][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.771675][T16047] loop1: detected capacity change from 0 to 4096 [ 1385.900933][T16056] loop2: detected capacity change from 0 to 512 [ 1386.053620][T16056] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 1386.076749][T15511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1386.179459][T16047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1386.263397][T16061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 1386.931757][T15552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.502941][T16081] loop2: detected capacity change from 0 to 512 [ 1388.001380][T16081] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1388.212650][T16081] EXT4-fs error (device loop2): ext4_free_branches:1020: inode #13: comm syz.2.1658: invalid indirect mapped block 2683928664 (level 1) [ 1388.332711][T16081] EXT4-fs (loop2): Remounting filesystem read-only [ 1388.390646][T16081] EXT4-fs (loop2): 1 truncate cleaned up [ 1388.444345][T16081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1388.756284][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1388.816889][T16093] loop0: detected capacity change from 0 to 512 [ 1389.172428][T16093] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 1389.869474][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.559665][T16103] loop1: detected capacity change from 0 to 2048 [ 1390.765517][T16103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1390.827575][T16112] loop0: detected capacity change from 0 to 128 [ 1391.035061][T16112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1391.093590][T16112] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1391.849931][T16112] overlayfs: failed to resolve './file0': -2 [ 1392.149524][T15575] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1392.211375][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1392.238850][T16128] loop5: detected capacity change from 0 to 512 [ 1392.524306][T16135] loop0: detected capacity change from 0 to 512 [ 1393.815580][T16128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.828346][T16128] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.954305][T16152] loop4: detected capacity change from 0 to 256 [ 1393.962635][T16152] exfat: Deprecated parameter 'utf8' [ 1393.967989][T16152] exfat: Deprecated parameter 'namecase' [ 1393.993400][T16135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1394.070457][T16135] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1394.186833][T16152] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 1394.206088][T16152] exFAT-fs (loop4): failed to load alloc-bitmap [ 1394.219814][T16152] exFAT-fs (loop4): failed to recognize exfat type [ 1394.583314][T15552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.209136][T16159] loop1: detected capacity change from 0 to 512 [ 1395.366671][T16163] loop5: detected capacity change from 0 to 4096 [ 1395.824158][T16163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.839254][T16159] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1396.030227][T16159] EXT4-fs error (device loop1): ext4_free_branches:1020: inode #13: comm syz.1.1674: invalid indirect mapped block 2683928664 (level 1) [ 1396.711823][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1397.325244][T16159] EXT4-fs (loop1): Remounting filesystem read-only [ 1397.337067][T16159] EXT4-fs (loop1): 1 truncate cleaned up [ 1397.354625][T16159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1397.816451][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.874905][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1398.263939][T16184] loop3: detected capacity change from 0 to 512 [ 1398.299366][T15552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.383101][T16184] EXT4-fs: Ignoring removed i_version option [ 1398.389174][T16184] EXT4-fs: Ignoring removed nobh option [ 1398.460267][T16184] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1398.581183][ T9] usb 3-1: device descriptor read/all, error -71 [ 1398.656230][T16194] loop2: detected capacity change from 0 to 128 [ 1398.707645][T16184] EXT4-fs (loop3): 1 truncate cleaned up [ 1398.731792][T16184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1398.788876][T16194] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.956319][T16198] binder: 16188:16198 ioctl c0306201 0 returned -14 [ 1399.175571][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.461160][T16194] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1399.571839][T16202] loop5: detected capacity change from 0 to 256 [ 1399.634153][T16202] exfat: Deprecated parameter 'utf8' [ 1399.695394][T16202] exfat: Deprecated parameter 'utf8' [ 1399.733892][T16202] exfat: Deprecated parameter 'utf8' [ 1399.779661][T16202] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1399.806849][T16194] overlayfs: failed to resolve './file0': -2 [ 1400.153039][T15146] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1401.483256][T16204] loop4: detected capacity change from 0 to 40427 [ 1401.503924][T16220] loop2: detected capacity change from 0 to 512 [ 1401.522533][T16204] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 1401.530066][T16204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1401.612256][T16220] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 1401.642288][T16204] F2FS-fs (loop4): Unrecognized mount option "whint_mode=fs-based" or missing value [ 1401.677249][T16220] block device autoloading is deprecated and will be removed. [ 1401.702891][T16220] syz.2.1685: attempt to access beyond end of device [ 1401.702891][T16220] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1401.706728][T15259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1401.779938][T16220] EXT4-fs (loop2): couldn't read superblock of external journal [ 1401.850838][T16225] loop0: detected capacity change from 0 to 256 [ 1401.885194][T16225] vfat: Bad value for 'utf8' [ 1401.994558][T16225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'. [ 1402.385124][T16230] loop2: detected capacity change from 0 to 256 [ 1402.459413][T16230] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5b6045fb, utbl_chksum : 0xe619d30d) [ 1403.284339][T16237] loop1: detected capacity change from 0 to 512 [ 1403.325797][T16240] loop4: detected capacity change from 0 to 4096 [ 1403.368737][T16237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.393814][T16240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1403.427271][T16244] loop0: detected capacity change from 0 to 512 [ 1403.462299][T16237] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.474170][T16244] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 1404.606530][T16256] loop0: detected capacity change from 0 to 256 [ 1404.618223][T16256] vfat: Bad value for 'fmask' [ 1404.862220][ T5294] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1405.472951][ T5294] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1405.515671][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1405.549746][T15511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.650596][ T5294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.665758][ T5294] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1405.701253][ T5294] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 1405.748459][T16258] loop0: detected capacity change from 0 to 512 [ 1405.797860][ T5294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.863410][ T5294] usb 4-1: config 0 descriptor?? [ 1405.876335][T16258] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1405.956330][T16258] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #13: comm syz.0.1695: invalid indirect mapped block 2683928664 (level 1) [ 1406.111418][T16258] EXT4-fs (loop0): Remounting filesystem read-only [ 1406.175368][T16258] EXT4-fs (loop0): 1 truncate cleaned up [ 1406.177316][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.185204][T16258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.625949][ T5294] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 1406.698269][ T5294] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 1406.759245][ T5294] hid-rmi 0003:17EF:6085.0007: unknown main item tag 0x0 [ 1406.838838][ T5294] hid-rmi 0003:17EF:6085.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 1406.990099][ T5294] usb 4-1: USB disconnect, device number 15 [ 1407.458703][T16272] loop4: detected capacity change from 0 to 4096 [ 1407.536546][T16272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1409.446032][T16286] loop2: detected capacity change from 0 to 8192 [ 1409.722719][T16286] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1410.382459][T16286] FAT-fs (loop2): Filesystem has been set read-only [ 1410.678480][T16298] loop5: detected capacity change from 0 to 256 [ 1410.725349][T16298] exfat: Deprecated parameter 'utf8' [ 1410.772332][T16298] exfat: Deprecated parameter 'utf8' [ 1410.832348][T16298] exfat: Deprecated parameter 'utf8' [ 1411.327011][T16298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1413.090172][T16314] loop1: detected capacity change from 0 to 256 [ 1413.129657][T16314] exfat: Deprecated parameter 'utf8' [ 1413.181777][T15511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.185355][T16316] loop5: detected capacity change from 0 to 128 [ 1413.191007][T16314] exfat: Deprecated parameter 'utf8' [ 1413.242165][T16314] exfat: Deprecated parameter 'utf8' [ 1413.289545][T16314] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1414.719875][T16327] ptrace attach of "./syz-executor exec"[15552] was attempted by "./syz-executor exec"[16327] [ 1414.883712][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1416.442281][T15251] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1416.452183][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1416.592305][T15251] usb 6-1: device descriptor read/64, error -71 [ 1416.614279][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.625892][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.639889][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 1416.659385][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.685244][ T9] usb 4-1: config 0 descriptor?? [ 1416.832290][T15251] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1416.866156][T16347] loop2: detected capacity change from 0 to 4096 [ 1416.985610][T16347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.012355][T15251] usb 6-1: device descriptor read/64, error -71 [ 1417.122738][T15251] usb usb6-port1: attempt power cycle [ 1417.185498][ T9] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 1417.209130][ T9] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 1417.257871][ T9] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 1417.295219][ T9] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 1417.337214][ T9] wacom 0003:056A:5000.0008: unknown main item tag 0x0 [ 1417.773521][T16353] loop0: detected capacity change from 0 to 8192 [ 1418.167780][ T9] wacom 0003:056A:5000.0008: hidraw0: USB HID v0.00 Device [HID 056a:5000] on usb-dummy_hcd.3-1/input0 [ 1418.183019][ T9] usb 4-1: USB disconnect, device number 16 [ 1418.274746][T16361] loop4: detected capacity change from 0 to 1024 [ 1418.357310][T16353] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1418.378964][T16361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.427460][T16353] FAT-fs (loop0): Filesystem has been set read-only [ 1418.454197][T16365] loop5: detected capacity change from 0 to 4096 [ 1418.475218][T16365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.605978][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1419.836601][T16374] loop3: detected capacity change from 0 to 128 [ 1419.842634][T16372] loop2: detected capacity change from 0 to 512 [ 1419.884791][T16374] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1419.914431][T16372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1419.952304][T16372] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.039268][T16374] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1420.124282][T16379] loop0: detected capacity change from 0 to 512 [ 1420.150649][T16379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1420.262302][T16379] EXT4-fs (loop0): 1 truncate cleaned up [ 1420.269055][T16379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1421.018684][T16385] overlayfs: missing 'lowerdir' [ 1422.230498][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.251886][T15511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.289139][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1422.700569][T15988] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1422.872393][T15988] usb 2-1: Using ep0 maxpacket: 32 [ 1422.958040][T15988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1423.256221][T15552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.272412][T15988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1423.347200][T16374] overlayfs: failed to resolve './file0': -2 [ 1423.368079][T15988] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1423.438464][T15988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.525114][T15988] usb 2-1: config 0 descriptor?? [ 1423.531039][T16388] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1423.599686][T15988] hub 2-1:0.0: USB hub found [ 1423.806540][T15988] hub 2-1:0.0: 2 ports detected [ 1424.012297][ T5236] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1424.192189][ T5236] usb 1-1: Using ep0 maxpacket: 16 [ 1424.219539][ T5236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.259526][ T5236] usb 1-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1424.299993][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.324167][T15988] hub 2-1:0.0: set hub depth failed [ 1424.324612][T16409] xt_CT: No such helper "snmp_trap" [ 1424.362982][ T5236] usb 1-1: Product: syz [ 1424.367235][ T5236] usb 1-1: Manufacturer: syz [ 1424.371877][ T5236] usb 1-1: SerialNumber: syz [ 1424.402374][T15988] usb 2-1: USB disconnect, device number 20 [ 1424.427394][ T5236] usb 1-1: config 0 descriptor?? [ 1424.772250][ T5246] Bluetooth: hci5: command 0x0406 tx timeout [ 1424.899007][ T5236] usb 1-1: Found UVC 0.00 device syz (045e:0721) [ 1424.906984][ T5236] usb 1-1: No valid video chain found. [ 1424.920767][ T5236] usb 1-1: USB disconnect, device number 15 [ 1425.488135][T16419] loop2: detected capacity change from 0 to 512 [ 1425.620670][T16419] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 1425.656690][T16417] loop1: detected capacity change from 0 to 4096 [ 1425.683243][T16419] EXT4-fs (loop2): 1 truncate cleaned up [ 1425.697224][T16419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.921234][T16417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1427.039847][ T5236] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1427.204084][ T5236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1427.215686][ T5236] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1427.563785][T16427] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1427.840019][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.872444][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.995988][T15259] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1428.068509][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.411208][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.419438][ T5236] usb 5-1: Product: syz [ 1428.423921][ T5236] usb 5-1: Manufacturer: syz [ 1428.428609][ T5236] usb 5-1: SerialNumber: syz [ 1429.224889][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.475456][ T5236] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1429.481807][ T5236] r8152-cfgselector 5-1: config 0 descriptor?? [ 1429.489750][ T5236] r8152-cfgselector 5-1: can't set config #0, error -71 [ 1429.498378][ T5236] r8152-cfgselector 5-1: USB disconnect, device number 16 [ 1429.555702][T16444] loop2: detected capacity change from 0 to 512 [ 1429.580039][T16448] loop3: detected capacity change from 0 to 256 [ 1429.704999][T16444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1429.760257][T16448] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1429.772815][T16444] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1430.884612][T16458] loop1: detected capacity change from 0 to 512 [ 1430.903017][T16458] ext4: Unknown parameter 'context' [ 1432.272161][ T29] audit: type=1800 audit(2000000197.760:266): pid=16466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1744" name="file1" dev="loop3" ino=1048905 res=0 errno=0 [ 1432.611829][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1432.753786][T16472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1747'. [ 1434.080300][T16478] loop4: detected capacity change from 0 to 128 [ 1434.386341][T16482] loop5: detected capacity change from 0 to 256 [ 1436.082216][ T5236] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1436.261267][ T5236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.315814][T16502] loop3: detected capacity change from 0 to 8192 [ 1436.353386][ T5236] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.201369][ T5236] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1437.214589][ T5236] usb 6-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 1437.224515][ T5236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.232340][ T934] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1437.236583][ T5236] usb 6-1: config 0 descriptor?? [ 1437.246840][T16517] loop1: detected capacity change from 0 to 512 [ 1437.301930][T16519] loop2: detected capacity change from 0 to 512 [ 1437.309603][T16519] EXT4-fs: Ignoring removed mblk_io_submit option [ 1437.316162][T16519] EXT4-fs: Ignoring removed i_version option [ 1437.398262][T16517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.413238][T16519] EXT4-fs error (device loop2): __ext4_iget:4952: inode #11: block 1: comm syz.2.1768: invalid block [ 1437.433253][T16517] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1437.455039][ T934] usb 5-1: config 1 has an invalid descriptor of length 180, skipping remainder of the config [ 1437.472262][ T934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1437.482360][T16519] EXT4-fs (loop2): Remounting filesystem read-only [ 1437.493684][T16519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1437.503303][ T934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1437.902436][ T934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1437.910930][ T934] usb 5-1: SerialNumber: syz [ 1437.916641][T16516] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1437.928282][T16516] FAT-fs (loop3): Filesystem has been set read-only [ 1438.098563][ T5236] holtek_mouse 0003:04D9:A070.0009: item fetching failed at offset 1/5 [ 1438.107704][ T5236] holtek_mouse 0003:04D9:A070.0009: hid parse failed: -22 [ 1438.154400][ T934] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1438.200945][ T5236] holtek_mouse 0003:04D9:A070.0009: probe with driver holtek_mouse failed with error -22 [ 1438.327234][ T5236] usb 6-1: USB disconnect, device number 13 [ 1438.474045][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.913960][ T934] usb 5-1: USB disconnect, device number 17 [ 1440.090035][T16540] loop5: detected capacity change from 0 to 512 [ 1440.144625][T16540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1440.202575][T16542] overlayfs: failed to resolve './file0': -2 [ 1440.374662][T16540] EXT4-fs (loop5): 1 truncate cleaned up [ 1440.395209][T16540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1440.485087][T16550] loop0: detected capacity change from 0 to 16 [ 1441.510090][T16550] erofs: (device loop0): mounted with root inode @ nid 36. [ 1443.407426][T16564] loop0: detected capacity change from 0 to 2048 [ 1444.138628][T16564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1444.405549][T16571] loop3: detected capacity change from 0 to 256 [ 1444.515695][T16572] loop4: detected capacity change from 0 to 128 [ 1444.593301][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1444.640465][T16572] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1444.660469][T16572] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1444.861656][T16574] loop1: detected capacity change from 0 to 40427 [ 1445.042234][T16574] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1445.051429][T15146] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.060743][T16574] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1445.122378][T16574] F2FS-fs (loop1): Unrecognized mount option "lazytime" or missing value [ 1445.994331][T15552] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.232564][T16585] loop2: detected capacity change from 0 to 256 [ 1447.310927][T16585] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1447.474229][T16579] loop0: detected capacity change from 0 to 40427 [ 1447.552261][T16579] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1447.560782][T16579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1447.623971][T16579] F2FS-fs (loop0): invalid crc value [ 1447.639305][T16579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1447.716720][ T5395] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.049897][T16579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1448.081651][T16579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1448.125413][ T5395] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.296258][ T5395] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.476565][T16598] loop1: detected capacity change from 0 to 16 [ 1448.553517][T16598] erofs: (device loop1): mounted with root inode @ nid 36. [ 1448.597291][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1448.660980][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1448.732260][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3604 @ nid 36 [ 1448.773033][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1448.832280][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3603 @ nid 36 [ 1448.900197][T15511] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1448.912473][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1448.955974][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3602 @ nid 36 [ 1448.965436][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1448.975735][ T5395] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.977556][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3601 @ nid 36 [ 1448.997735][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1449.009397][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3600 @ nid 36 [ 1449.025107][T16598] erofs: (device loop1): z_erofs_fill_inode_lazy: unknown HEAD1 format 4 for nid 36, please upgrade kernel [ 1449.039138][T16598] erofs: (device loop1): z_erofs_readahead: readahead error at folio 3599 @ nid 36 [ 1449.465976][ T5395] bridge_slave_1: left allmulticast mode [ 1449.471710][ T5395] bridge_slave_1: left promiscuous mode [ 1449.509243][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.555645][T16607] loop1: detected capacity change from 0 to 2048 [ 1449.581476][T13895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1449.590926][T13895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1449.599776][T13895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1449.609060][T13895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1449.617477][T13895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1449.625453][T13895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1449.653219][T16607] EXT4-fs: Ignoring removed orlov option [ 1449.663224][ T5395] bridge_slave_0: left allmulticast mode [ 1449.668927][ T5395] bridge_slave_0: left promiscuous mode [ 1449.699342][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.751594][T16607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1450.422125][T13895] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.603766][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1450.662169][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1450.694636][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1450.712737][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1450.723568][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1450.730916][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.895506][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.642421][ T5246] Bluetooth: hci0: command tx timeout [ 1452.003313][T16640] loop3: detected capacity change from 0 to 512 [ 1452.135594][T16640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1452.194089][T16640] EXT4-fs (loop3): 1 truncate cleaned up [ 1452.200826][T16640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1452.872279][ T5246] Bluetooth: hci4: command tx timeout [ 1453.072829][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.277845][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.310987][ T5395] bond0 (unregistering): Released all slaves [ 1453.451892][T16652] loop0: detected capacity change from 0 to 128 [ 1453.735462][ T5246] Bluetooth: hci0: command tx timeout [ 1454.318481][T16652] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1454.354713][T16652] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.665482][T15259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.010438][T16660] overlayfs: failed to resolve './file0': -2 [ 1455.090727][ T5246] Bluetooth: hci4: command tx timeout [ 1456.062578][ T5246] Bluetooth: hci0: command tx timeout [ 1456.244364][T15575] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1456.726615][T16670] loop0: detected capacity change from 0 to 512 [ 1456.806282][T16670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.851179][T16670] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.873777][ T5395] hsr_slave_0: left promiscuous mode [ 1456.988514][ T5395] hsr_slave_1: left promiscuous mode [ 1457.093925][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1457.135638][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1457.165090][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1457.187546][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1457.188692][T15575] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1457.217656][T16684] loop1: detected capacity change from 0 to 512 [ 1457.261114][ T5395] veth1_macvtap: left promiscuous mode [ 1457.276981][ T5395] veth0_macvtap: left promiscuous mode [ 1457.292523][ T5395] veth1_vlan: left promiscuous mode [ 1457.308127][ T5395] veth0_vlan: left promiscuous mode [ 1457.318345][T16684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1457.389219][T16684] EXT4-fs (loop1): 1 truncate cleaned up [ 1457.433176][T16684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1457.460253][T16691] loop0: detected capacity change from 0 to 256 [ 1457.499947][T13895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1457.510484][T13895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1457.520217][T13895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1457.532835][T13895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1457.541233][T13895] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1457.549069][T13895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1457.724740][T13895] Bluetooth: hci4: command tx timeout [ 1458.123229][T13895] Bluetooth: hci0: command tx timeout [ 1458.890572][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 1459.012018][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 1459.295869][T16701] loop4: detected capacity change from 0 to 40427 [ 1459.311225][T16701] F2FS-fs (loop4): invalid crc value [ 1459.337843][T16701] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1459.481347][T16701] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1459.644976][ T5246] Bluetooth: hci5: command tx timeout [ 1459.802185][ T5246] Bluetooth: hci4: command tx timeout [ 1460.544893][ T5246] Bluetooth: hci3: command 0x0406 tx timeout [ 1460.646504][T15511] syz-executor: attempt to access beyond end of device [ 1460.646504][T15511] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1460.674446][T15511] syz-executor: attempt to access beyond end of device [ 1460.674446][T15511] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1460.864463][ T995] kworker/u8:6: attempt to access beyond end of device [ 1460.864463][ T995] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 1460.889499][ T995] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1460.897177][ T995] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1460.906192][ T995] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1461.014392][T16713] xt_hashlimit: size too large, truncated to 1048576 [ 1461.818259][T13895] Bluetooth: hci5: command tx timeout [ 1462.056938][T16608] chnl_net:caif_netlink_parms(): no params data found [ 1462.764660][T16608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.799974][T16608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.808614][T16608] bridge_slave_0: entered allmulticast mode [ 1462.819058][T16608] bridge_slave_0: entered promiscuous mode [ 1462.855338][T16608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.882314][T16608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.910311][T16608] bridge_slave_1: entered allmulticast mode [ 1462.940181][T16608] bridge_slave_1: entered promiscuous mode [ 1463.096326][T16608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.166086][T16620] chnl_net:caif_netlink_parms(): no params data found [ 1463.198098][T16608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.359209][T16608] team0: Port device team_slave_0 added [ 1463.552783][T16608] team0: Port device team_slave_1 added [ 1463.797067][ T5395] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.873416][T16608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1463.880441][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1463.913175][ T5246] Bluetooth: hci5: command tx timeout [ 1463.991859][T16608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.111614][ T5395] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.164910][T16608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.171920][T16608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.227513][T16608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.325873][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.353750][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.361043][T16620] bridge_slave_0: entered allmulticast mode [ 1464.395377][T16620] bridge_slave_0: entered promiscuous mode [ 1464.448906][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.459434][T14782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.502245][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.509544][T16620] bridge_slave_1: entered allmulticast mode [ 1464.553709][T16620] bridge_slave_1: entered promiscuous mode [ 1464.774073][ T5395] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.856531][T16693] chnl_net:caif_netlink_parms(): no params data found [ 1465.216791][ T5395] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.285019][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1465.332253][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1465.377655][T13895] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1465.387660][T13895] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1465.396873][T13895] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1465.405347][T13895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1465.415250][T13895] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1465.424225][T13895] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1465.470851][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1465.484570][T16608] hsr_slave_0: entered promiscuous mode [ 1465.492914][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1465.500705][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1465.508594][T16608] hsr_slave_1: entered promiscuous mode [ 1465.532306][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1465.541458][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1465.551153][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1465.794807][T16620] team0: Port device team_slave_0 added [ 1465.801130][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.820810][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.845036][T16693] bridge_slave_0: entered allmulticast mode [ 1465.874915][T16693] bridge_slave_0: entered promiscuous mode [ 1465.903061][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.920475][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.931575][T16693] bridge_slave_1: entered allmulticast mode [ 1465.949816][T16693] bridge_slave_1: entered promiscuous mode [ 1465.986921][T13895] Bluetooth: hci5: command tx timeout [ 1466.152858][T16620] team0: Port device team_slave_1 added [ 1467.351851][ T5395] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.485106][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1467.494543][T13895] Bluetooth: hci1: command tx timeout [ 1467.515284][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.595441][ T5395] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.620900][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.632297][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.663060][T13895] Bluetooth: hci2: command tx timeout [ 1467.686425][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.879265][ T5395] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1467.907940][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.915119][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.941933][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.967821][T16778] loop0: detected capacity change from 0 to 40427 [ 1467.981403][T16693] team0: Port device team_slave_0 added [ 1467.988796][T16778] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 1467.999703][T16693] team0: Port device team_slave_1 added [ 1468.005840][T16778] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1468.052177][T16778] F2FS-fs (loop0): invalid crc value [ 1468.070683][T16778] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1468.156903][T16778] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1468.164808][T16778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 1468.186755][ T5395] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.426156][T16620] hsr_slave_0: entered promiscuous mode [ 1468.443668][T16620] hsr_slave_1: entered promiscuous mode [ 1468.461171][T16620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1468.462261][T11835] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1468.469696][T16620] Cannot create hsr debugfs directory [ 1468.555524][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1468.570784][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.597713][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1468.616981][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1468.624379][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1468.651088][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.654067][T11835] usb 1-1: Using ep0 maxpacket: 32 [ 1468.677366][T11835] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1468.695301][T11835] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1468.711792][T11835] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1468.731272][T11835] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1468.743348][T11835] usb 1-1: Product: syz [ 1468.747581][T11835] usb 1-1: Manufacturer: syz [ 1468.767069][T11835] hub 1-1:4.0: USB hub found [ 1468.809394][T16753] chnl_net:caif_netlink_parms(): no params data found [ 1468.851675][T16750] chnl_net:caif_netlink_parms(): no params data found [ 1468.972490][T11835] hub 1-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1469.099606][ T5395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.185755][T16693] hsr_slave_0: entered promiscuous mode [ 1469.203221][T16693] hsr_slave_1: entered promiscuous mode [ 1469.209600][T16693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1469.228092][T16693] Cannot create hsr debugfs directory [ 1469.327931][ T5395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.392798][T15251] usb 1-1: USB disconnect, device number 16 [ 1469.458373][ T5395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.494279][T16753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.501492][T16753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.509681][T16753] bridge_slave_0: entered allmulticast mode [ 1469.520070][T16753] bridge_slave_0: entered promiscuous mode [ 1469.527760][T16608] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1469.562196][T13895] Bluetooth: hci1: command tx timeout [ 1469.593679][ T5395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.608196][T16753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.616026][T16753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.624104][T16753] bridge_slave_1: entered allmulticast mode [ 1469.631126][T16753] bridge_slave_1: entered promiscuous mode [ 1469.656141][T16608] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1469.670344][T16608] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1469.728984][T13895] Bluetooth: hci2: command tx timeout [ 1469.743664][T16608] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1469.762671][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.770492][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.779397][T16750] bridge_slave_0: entered allmulticast mode [ 1469.787243][T16750] bridge_slave_0: entered promiscuous mode [ 1469.808489][T16753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.837084][T16753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.845305][T15575] syz-executor: attempt to access beyond end of device [ 1469.845305][T15575] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 1469.866576][T15575] syz-executor: attempt to access beyond end of device [ 1469.866576][T15575] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1469.872259][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.890073][T16750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.898760][T16750] bridge_slave_1: entered allmulticast mode [ 1469.906436][T16750] bridge_slave_1: entered promiscuous mode [ 1470.010945][ T12] kworker/u8:1: attempt to access beyond end of device [ 1470.010945][ T12] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1470.030500][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1470.031399][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1470.069293][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1470.097082][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1470.106897][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1470.136219][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1470.166358][T16753] team0: Port device team_slave_0 added [ 1470.305255][T16753] team0: Port device team_slave_1 added [ 1470.352934][ T5395] bridge_slave_1: left allmulticast mode [ 1470.358662][ T5395] bridge_slave_1: left promiscuous mode [ 1470.366013][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.375737][ T5395] bridge_slave_0: left allmulticast mode [ 1470.381401][ T5395] bridge_slave_0: left promiscuous mode [ 1470.390526][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.409905][ T5395] bridge_slave_1: left allmulticast mode [ 1470.416483][ T5395] bridge_slave_1: left promiscuous mode [ 1470.422992][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.445543][ T5395] bridge_slave_0: left allmulticast mode [ 1470.451242][ T5395] bridge_slave_0: left promiscuous mode [ 1470.472519][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.494007][ T5395] bridge_slave_1: left allmulticast mode [ 1470.500815][ T5395] bridge_slave_1: left promiscuous mode [ 1470.520397][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.543709][ T5395] bridge_slave_0: left allmulticast mode [ 1470.549413][ T5395] bridge_slave_0: left promiscuous mode [ 1470.569583][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.986362][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1470.996685][ T5246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1471.008591][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1471.032636][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1471.043618][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1471.052958][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1471.645465][ T5246] Bluetooth: hci1: command tx timeout [ 1471.666359][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.678907][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.696953][ T5395] bond0 (unregistering): Released all slaves [ 1471.800952][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.809717][ T5246] Bluetooth: hci2: command tx timeout [ 1471.819419][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.832426][ T5395] bond0 (unregistering): Released all slaves [ 1471.938828][ T5395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.950357][ T5395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.965538][ T5395] bond0 (unregistering): Released all slaves [ 1471.991567][T16750] team0: Port device team_slave_0 added [ 1472.005622][T16750] team0: Port device team_slave_1 added [ 1472.022723][T16753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.029703][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.060226][T16753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.222452][T16753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.229468][T16753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.257253][T16753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.334700][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1472.343637][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.379169][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1472.392245][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1472.399227][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1472.427829][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1472.649417][T16753] hsr_slave_0: entered promiscuous mode [ 1472.658621][T16753] hsr_slave_1: entered promiscuous mode [ 1472.667048][T16753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.674864][T16753] Cannot create hsr debugfs directory [ 1472.705332][T16750] hsr_slave_0: entered promiscuous mode [ 1472.711903][T16750] hsr_slave_1: entered promiscuous mode [ 1472.719968][T16750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.727981][T16750] Cannot create hsr debugfs directory [ 1472.791764][T16608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.092655][ T5246] Bluetooth: hci3: command tx timeout [ 1473.290618][T16608] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.320805][T16810] chnl_net:caif_netlink_parms(): no params data found [ 1473.352816][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.360011][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.397614][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.404837][T11541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.636716][ T5395] hsr_slave_0: left promiscuous mode [ 1473.653183][ T5395] hsr_slave_1: left promiscuous mode [ 1473.664229][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.682271][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.693860][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.701310][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.732189][ T5246] Bluetooth: hci1: command tx timeout [ 1473.738225][ T5395] hsr_slave_0: left promiscuous mode [ 1473.749917][ T5395] hsr_slave_1: left promiscuous mode [ 1473.762370][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.769850][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.792719][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.800328][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1473.833472][ T5395] hsr_slave_0: left promiscuous mode [ 1473.853591][ T5395] hsr_slave_1: left promiscuous mode [ 1473.859832][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1473.882333][ T5246] Bluetooth: hci2: command tx timeout [ 1473.887843][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1473.896681][ T5395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1473.912922][ T5395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.015549][ T5395] veth1_macvtap: left promiscuous mode [ 1474.021190][ T5395] veth0_macvtap: left promiscuous mode [ 1474.039995][ T5395] veth1_vlan: left promiscuous mode [ 1474.050800][ T5395] veth0_vlan: left promiscuous mode [ 1474.064336][ T5395] dummy0: left promiscuous mode [ 1474.069325][ T5395] veth1_macvtap: left promiscuous mode [ 1474.075868][ T5395] veth0_macvtap: left promiscuous mode [ 1474.081967][ T5395] veth1_vlan: left promiscuous mode [ 1474.101825][ T5395] veth0_vlan: left promiscuous mode [ 1474.122585][ T5395] veth1_macvtap: left promiscuous mode [ 1474.128177][ T5395] veth0_macvtap: left promiscuous mode [ 1474.137984][ T5395] veth1_vlan: left promiscuous mode [ 1474.144585][ T5395] veth0_vlan: left promiscuous mode [ 1474.850097][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 1474.898035][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 1475.162393][ T5246] Bluetooth: hci3: command tx timeout [ 1475.694788][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 1475.743684][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 1476.496261][ T5395] team0 (unregistering): Port device team_slave_1 removed [ 1476.551405][ T5395] team0 (unregistering): Port device team_slave_0 removed [ 1477.056493][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.083695][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.091038][T16810] bridge_slave_0: entered allmulticast mode [ 1477.114298][T16810] bridge_slave_0: entered promiscuous mode [ 1477.143693][T16810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.151763][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1477.170956][T16810] bridge_slave_1: entered allmulticast mode [ 1477.178425][T16810] bridge_slave_1: entered promiscuous mode [ 1477.230191][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.241371][T16620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1477.248322][ T5246] Bluetooth: hci3: command tx timeout [ 1477.260417][T16620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1477.279024][T16620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1477.322798][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.357241][T16620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1477.480906][T16810] team0: Port device team_slave_0 added [ 1477.510347][T16810] team0: Port device team_slave_1 added [ 1477.680710][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.701604][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.742396][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.780408][T16693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1477.814107][T16693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1477.835058][T16693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1477.848012][T16693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1477.866006][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.880800][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1477.909562][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.974743][T16750] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.108303][T16750] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.182014][T16608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1478.218944][T16810] hsr_slave_0: entered promiscuous mode [ 1478.240965][T16810] hsr_slave_1: entered promiscuous mode [ 1478.265028][T16810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1478.278802][T16810] Cannot create hsr debugfs directory [ 1478.328389][T16750] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.404849][T16750] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.764285][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.869218][T16750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1478.901815][T16750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1478.984716][T16750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1479.050309][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.084336][T16750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1479.123610][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.130805][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.323406][ T5246] Bluetooth: hci3: command tx timeout [ 1479.329264][T16693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1479.354953][T16608] veth0_vlan: entered promiscuous mode [ 1479.375406][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.382562][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.448284][T16608] veth1_vlan: entered promiscuous mode [ 1479.527280][T16810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.559241][T16693] 8021q: adding VLAN 0 to HW filter on device team0 [ 1479.620527][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1479.627770][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.668397][T16810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.706793][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.713987][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.771803][T16620] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1479.784183][T16620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1479.821009][T16810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.960645][T16810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.992783][T16608] veth0_macvtap: entered promiscuous mode [ 1480.044565][T16608] veth1_macvtap: entered promiscuous mode [ 1480.181767][T16750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.234099][ T5374] bridge_slave_1: left allmulticast mode [ 1480.239811][ T5374] bridge_slave_1: left promiscuous mode [ 1480.263841][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.283993][ T5374] bridge_slave_0: left allmulticast mode [ 1480.289712][ T5374] bridge_slave_0: left promiscuous mode [ 1480.302601][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.315815][ T5374] bridge_slave_1: left allmulticast mode [ 1480.321521][ T5374] bridge_slave_1: left promiscuous mode [ 1480.341539][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.363603][ T5374] bridge_slave_0: left allmulticast mode [ 1480.369311][ T5374] bridge_slave_0: left promiscuous mode [ 1480.387790][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.139753][ T5374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.157209][ T5374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.169394][ T5374] bond0 (unregistering): Released all slaves [ 1481.269198][ T5374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1481.282001][ T5374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.293631][ T5374] bond0 (unregistering): Released all slaves [ 1481.316727][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.342332][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.372085][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.392097][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.410447][T16608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.468233][T16750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.552668][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.575508][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.588780][T16608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.602081][T16608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.623289][T16608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.767050][T16810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1481.790503][T16810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1481.813835][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.821058][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.830511][T16608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.839578][T16608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.848450][T16608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.859487][T16608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.948073][T16810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1481.974408][T16810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1481.996040][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.003203][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.031109][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.060421][T16693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.416261][ T5374] hsr_slave_0: left promiscuous mode [ 1482.453320][ T5374] hsr_slave_1: left promiscuous mode [ 1482.459745][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.469572][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.488122][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.496232][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.520511][ T5374] hsr_slave_0: left promiscuous mode [ 1482.528077][ T5374] hsr_slave_1: left promiscuous mode [ 1482.535219][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.542756][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.550725][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.558691][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.592223][ T5374] veth1_macvtap: left promiscuous mode [ 1482.597853][ T5374] veth0_macvtap: left promiscuous mode [ 1482.607836][ T5374] veth1_vlan: left promiscuous mode [ 1482.614174][ T5374] veth0_vlan: left promiscuous mode [ 1482.620577][ T5374] dummy0: left promiscuous mode [ 1482.626741][ T5374] veth1_macvtap: left promiscuous mode [ 1482.632658][ T5374] veth0_macvtap: left promiscuous mode [ 1482.642615][ T5374] veth1_vlan: left promiscuous mode [ 1482.647958][ T5374] veth0_vlan: left promiscuous mode [ 1483.674384][ T5374] team0 (unregistering): Port device team_slave_1 removed [ 1483.717358][ T5374] team0 (unregistering): Port device team_slave_0 removed [ 1484.400992][ T5374] team0 (unregistering): Port device team_slave_1 removed [ 1484.439962][ T5374] team0 (unregistering): Port device team_slave_0 removed [ 1484.915504][T16753] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1484.961440][T16753] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1485.027601][T16753] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1485.062425][T16753] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1485.088816][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.098814][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.108167][T16620] veth0_vlan: entered promiscuous mode [ 1485.115786][T16693] veth0_vlan: entered promiscuous mode [ 1485.212642][T16620] veth1_vlan: entered promiscuous mode [ 1485.233188][T16693] veth1_vlan: entered promiscuous mode [ 1485.293148][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.301047][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.382802][T16810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1485.430660][T16693] veth0_macvtap: entered promiscuous mode [ 1485.484741][T16620] veth0_macvtap: entered promiscuous mode [ 1485.518182][T16810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1485.555519][T16693] veth1_macvtap: entered promiscuous mode [ 1485.569480][T16967] loop5: detected capacity change from 0 to 1024 [ 1485.586022][T16967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1485.616208][T16620] veth1_macvtap: entered promiscuous mode [ 1485.678487][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.685717][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.796254][T16750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.819198][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.826462][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.856733][T16620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.879584][T16620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.915323][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1485.926045][T16693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.940953][T16693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.951133][T16693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.961872][T16693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.974527][T16693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.719537][T16608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1486.759917][T16620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.783115][T16620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.795408][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.806800][T16693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.829813][T16693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.841028][T16693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1486.851680][T16693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.873409][T16693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.106420][T16620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.127046][T16620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.135982][T16620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.145304][T16620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.488057][T16750] veth0_vlan: entered promiscuous mode [ 1487.649036][T16693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.730720][T16693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.762305][T16693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.781328][T16693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.018520][T16750] veth1_vlan: entered promiscuous mode [ 1488.162364][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.170290][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.287696][T11541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.335103][T11541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.381757][T11541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.420120][T16753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1488.437302][T11541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.473814][T16994] loop5: detected capacity change from 0 to 512 [ 1488.492740][T16994] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1488.528030][T16994] EXT4-fs (loop5): 1 truncate cleaned up [ 1488.543774][T16994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1488.558251][T16750] veth0_macvtap: entered promiscuous mode [ 1488.671371][T16750] veth1_macvtap: entered promiscuous mode [ 1488.706649][T16753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1488.748993][ T5374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.756190][ T5374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1488.798745][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.807729][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.837946][ T5374] bridge0: port 2(bridge_slave_1) entered blocking state [ 1488.845222][ T5374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.954407][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.021544][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.060144][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.108392][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.118426][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1489.129612][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1489.142486][T16750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1489.153810][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1489.173763][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.186154][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.879416][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1489.946090][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.013288][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.023850][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.033801][T16750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1490.044429][T16750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1490.056914][T16750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1490.079578][T17011] loop3: detected capacity change from 0 to 2048 [ 1490.128346][T16750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.152502][T16750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.172457][T16750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.193786][T16750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.214875][T17011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.325453][T16810] veth0_vlan: entered promiscuous mode [ 1490.417002][T16753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1491.528270][T17021] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1491.570840][ T29] audit: type=1800 audit(2000000257.090:267): pid=17020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1805" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1491.609075][T16810] veth1_vlan: entered promiscuous mode [ 1491.677783][T16608] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.813895][T16693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.017592][ T5374] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.281170][T17042] loop3: detected capacity change from 0 to 1024 [ 1493.400435][ T5374] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.438147][T17042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1493.647399][ T5374] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.725986][T13895] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1493.735939][T16810] veth0_macvtap: entered promiscuous mode [ 1493.744156][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1493.755543][T13895] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1493.765658][T13895] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1493.778539][T13895] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1493.787358][T13895] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1493.795050][T13895] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1493.882194][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.890176][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.933690][ T5374] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.197620][ T29] audit: type=1800 audit(2000000259.670:268): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1830" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 1494.802526][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1494.811731][T16810] veth1_macvtap: entered promiscuous mode [ 1494.813341][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1494.829411][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1494.843452][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1494.849911][T16753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.852557][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.872729][T16693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1494.889573][ T9] usb 3-1: config 0 descriptor?? [ 1494.918544][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1494.951466][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1494.959560][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.086694][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.097742][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.108138][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.118677][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.128755][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.139305][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.149306][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1495.159883][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.171570][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.302235][T15988] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1495.303624][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.320965][T17048] loop2: detected capacity change from 0 to 512 [ 1495.328701][T17048] EXT4-fs: Ignoring removed bh option [ 1495.335456][T17048] EXT4-fs: inline encryption not supported [ 1495.343864][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.356450][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.368763][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.380137][T17048] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.1834: corrupted in-inode xattr: invalid ea_ino [ 1495.404779][T17048] EXT4-fs error (device loop2): ext4_orphan_get:1391: comm syz.2.1834: couldn't read orphan inode 12 (err -117) [ 1495.416906][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.437916][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.449525][T17048] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.462641][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1495.486779][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1495.499606][T15988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1495.532224][T15988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1495.542899][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.578310][T15988] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1495.612334][T15988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.633594][T15988] usb 4-1: config 0 descriptor?? [ 1495.704357][T16810] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.749463][T16810] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.791938][T16810] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.801352][T16810] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.858582][ T5374] bridge_slave_1: left allmulticast mode [ 1495.885217][T13895] Bluetooth: hci0: command tx timeout [ 1495.896232][ T5374] bridge_slave_1: left promiscuous mode [ 1495.912276][ T5374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.984593][ T5374] bridge_slave_0: left allmulticast mode [ 1496.004564][ T5374] bridge_slave_0: left promiscuous mode [ 1496.010423][ T5374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.084508][T15988] hid-multitouch 0003:0EEF:72D0.000A: item fetching failed at offset 3/5 [ 1496.112800][T15988] hid-multitouch 0003:0EEF:72D0.000A: probe with driver hid-multitouch failed with error -22 [ 1496.340388][T15988] usb 4-1: USB disconnect, device number 17 [ 1496.903959][ T5374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1496.945811][ T5374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1496.964067][T17082] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1837'. [ 1496.985339][ T5374] bond0 (unregistering): Released all slaves [ 1497.471436][T17090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1497.982196][T13895] Bluetooth: hci0: command tx timeout [ 1498.016873][T16753] veth0_vlan: entered promiscuous mode [ 1498.631139][T16753] veth1_vlan: entered promiscuous mode [ 1498.659294][T17052] chnl_net:caif_netlink_parms(): no params data found [ 1500.899473][ T5246] Bluetooth: hci0: command tx timeout [ 1501.032188][T11541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.040072][T11541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.196058][T17108] loop3: detected capacity change from 0 to 512 [ 1501.220936][ T5374] hsr_slave_0: left promiscuous mode [ 1501.241083][ T5374] hsr_slave_1: left promiscuous mode [ 1501.305536][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1501.322482][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.356648][ T5374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1501.370649][ T5374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1501.382616][T17108] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.403458][T12310] usb 3-1: USB disconnect, device number 13 [ 1501.422280][T17108] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.498151][T16620] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1501.506086][ T5374] veth1_macvtap: left promiscuous mode [ 1501.512871][ T5374] veth0_macvtap: left promiscuous mode [ 1501.518550][ T5374] veth1_vlan: left promiscuous mode [ 1501.531164][ T5374] veth0_vlan: left promiscuous mode [ 1501.657707][T17116] loop2: detected capacity change from 0 to 512 [ 1501.683264][T17116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1501.777478][T17116] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.1842: bg 0: block 248: padding at end of block bitmap is not set [ 1501.837399][T17116] Quota error (device loop2): write_blk: dquota write failed [ 1501.846263][T17116] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1501.878890][T17116] EXT4-fs error (device loop2): ext4_acquire_dquot:6877: comm syz.2.1842: Failed to acquire dquot type 1 [ 1501.926347][T17116] EXT4-fs (loop2): 1 truncate cleaned up [ 1501.941285][T17116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.964020][T17116] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1502.196025][T16693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.066199][T13895] Bluetooth: hci0: command tx timeout [ 1504.034596][ T5374] team0 (unregistering): Port device team_slave_1 removed [ 1504.106853][ T5374] team0 (unregistering): Port device team_slave_0 removed [ 1505.596573][T17140] loop3: detected capacity change from 0 to 512 [ 1505.614080][T17140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1505.649211][T17140] EXT4-fs (loop3): 1 truncate cleaned up [ 1505.659511][T17140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.756512][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 1505.765663][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'. [ 1505.901710][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1505.923840][ T5395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1505.932438][ T5395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1506.062920][ T5236] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1506.103055][T16753] veth0_macvtap: entered promiscuous mode [ 1506.253832][ T5236] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 1507.091658][T16753] veth1_macvtap: entered promiscuous mode [ 1507.128793][ T5236] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1507.149173][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.160612][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.173033][ T5236] usb 4-1: Product: syz [ 1507.177247][ T5236] usb 4-1: Manufacturer: syz [ 1507.182779][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.193258][ T5236] usb 4-1: SerialNumber: syz [ 1507.201072][ T5236] usb 4-1: config 0 descriptor?? [ 1507.206803][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.237115][T17140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1507.250920][ T5236] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1507.289557][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.340424][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.392602][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.413648][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.441430][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.505215][T16753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.570468][T17052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.612776][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.620795][T17052] bridge_slave_0: entered allmulticast mode [ 1507.625473][ T5236] usb 4-1: USB disconnect, device number 18 [ 1507.728066][T17052] bridge_slave_0: entered promiscuous mode [ 1507.796333][T17165] udevd[17165]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1507.830985][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.884033][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.933921][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.982529][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1508.012133][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1508.495334][T17180] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1508.504216][T17180] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1509.802379][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.017097][T16753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1510.084177][T16753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1510.173891][T16753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.261066][T16693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.274159][T16753] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.318961][T17186] loop1: detected capacity change from 0 to 512 [ 1510.344449][T16753] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.390907][T16753] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.430482][T17186] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1510.467387][T16753] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.487532][T17052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.537770][T17186] EXT4-fs (loop1): 1 truncate cleaned up [ 1510.558222][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.587906][T17186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1510.628180][T17052] bridge_slave_1: entered allmulticast mode [ 1510.675813][T17052] bridge_slave_1: entered promiscuous mode [ 1510.711885][T17193] loop3: detected capacity change from 0 to 128 [ 1510.925904][T17193] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1510.991443][T17193] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.090611][T17052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1511.221448][T17052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1511.583142][T17199] loop0: detected capacity change from 0 to 512 [ 1511.632290][T17199] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 1512.562846][T17204] loop0: detected capacity change from 0 to 256 [ 1512.569941][T17204] vfat: Bad value for 'fmask' [ 1512.659787][T17052] team0: Port device team_slave_0 added [ 1512.753225][T16693] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1512.801039][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.809038][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.834050][T17052] team0: Port device team_slave_1 added [ 1514.149236][T17217] loop3: detected capacity change from 0 to 512 [ 1514.191377][T17217] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1514.275773][T17052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.286947][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1514.343306][T16750] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.378618][T17052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1514.455673][T17217] EXT4-fs (loop3): 1 truncate cleaned up [ 1514.481258][T17217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.484038][T15988] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1514.908427][T15988] usb 1-1: Using ep0 maxpacket: 16 [ 1515.285585][T17052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.311531][T15988] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1515.328641][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.372137][T15988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.380244][T15988] usb 1-1: Product: syz [ 1515.427187][T15988] usb 1-1: Manufacturer: syz [ 1515.472366][T15988] usb 1-1: SerialNumber: syz [ 1515.499332][T17052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.667045][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1515.695539][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1515.773413][T17052] hsr_slave_0: entered promiscuous mode [ 1515.809710][T15988] usb 1-1: config 0 descriptor?? [ 1515.817572][T15988] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1515.827093][T15988] usb 1-1: Detected FT232H [ 1515.842554][T17052] hsr_slave_1: entered promiscuous mode [ 1517.754888][T15988] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1517.763734][T15988] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1517.771311][T15988] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1517.815908][T17247] loop0: detected capacity change from 0 to 512 [ 1518.172980][T15988] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1518.185301][T15988] usb 1-1: USB disconnect, device number 17 [ 1518.206678][T15988] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1518.222864][T15988] ftdi_sio 1-1:0.0: device disconnected [ 1518.585714][T17247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.704855][T17247] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.765298][T17256] loop2: detected capacity change from 0 to 512 [ 1518.849311][T17256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1518.900761][T16693] EXT4-fs error (device loop3): htree_dirblock_to_tree:1109: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1519.216224][T17256] EXT4-fs (loop2): 1 truncate cleaned up [ 1519.260900][T17256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.460787][T17260] loop1: detected capacity change from 0 to 512 [ 1519.542214][T17260] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1519.683637][T17260] EXT4-fs (loop1): 1 truncate cleaned up [ 1519.728426][T17260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.859848][T17260] overlayfs: failed to resolve './file2': -2 [ 1519.935817][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.996009][T17265] loop4: detected capacity change from 0 to 128 [ 1520.151946][T16750] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.169163][T16810] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.223729][T17265] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1520.335747][T17265] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1521.294116][T17288] overlayfs: failed to resolve './file0': -2 [ 1523.741587][T16753] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1523.793785][T16693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.893904][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.402639][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1524.471929][T17312] loop0: detected capacity change from 0 to 256 [ 1524.536878][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.628212][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1524.652467][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1524.672570][T17314] loop2: detected capacity change from 0 to 512 [ 1524.695743][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1524.726129][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.766221][ T9] usb 5-1: config 0 descriptor?? [ 1524.791870][T17314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.867920][T17314] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.035477][ T5246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1525.046420][ T5246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1525.054727][ T5246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1525.063182][ T5246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1525.071609][ T5246] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1525.111263][ T5246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1525.227934][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.236789][ T9] hid (null): bogus close delimiter [ 1526.112601][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1526.246176][T17052] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1526.424774][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1526.502970][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.527568][ T9] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71 [ 1526.538016][ T9] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 1526.546225][ T9] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71 [ 1526.554462][ T9] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 1526.562076][ T9] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 1526.573827][ T9] usb 5-1: USB disconnect, device number 18 [ 1526.675676][T17052] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1526.686083][T17052] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1526.739532][T17052] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1527.086511][ T52] bridge_slave_1: left allmulticast mode [ 1527.093069][ T52] bridge_slave_1: left promiscuous mode [ 1527.099646][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.110960][ T52] bridge_slave_0: left allmulticast mode [ 1527.117142][ T52] bridge_slave_0: left promiscuous mode [ 1527.122240][ T1843] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1527.125833][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.162679][ T5246] Bluetooth: hci5: command tx timeout [ 1527.346504][ T1843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1527.357702][ T1843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1527.374096][T17334] loop4: detected capacity change from 0 to 16 [ 1527.382658][T17334] erofs: (device loop4): mounted with root inode @ nid 36. [ 1527.417480][ T1843] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1527.437195][ T1843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.451767][ T1843] usb 3-1: config 0 descriptor?? [ 1528.588090][ T1843] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 1528.603561][ T1843] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1528.682152][ T1843] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 1528.695648][ T1843] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 1528.733660][ T1843] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 1528.768660][ T1843] usb 3-1: USB disconnect, device number 14 [ 1528.817506][ T1843] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 1529.157173][T17339] syz.4.1885: attempt to access beyond end of device [ 1529.157173][T17339] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 1529.172974][T17339] syz.4.1885: attempt to access beyond end of device [ 1529.172974][T17339] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 1529.187042][T17339] erofs: (device loop4): z_erofs_read_folio: read error -5 @ 124 of nid 36 [ 1529.233013][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1529.260060][ T5246] Bluetooth: hci5: command tx timeout [ 1529.352719][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1529.394604][ T52] bond0 (unregistering): Released all slaves [ 1530.413288][T17350] loop2: detected capacity change from 0 to 256 [ 1530.444326][T17350] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 1530.959066][T17317] chnl_net:caif_netlink_parms(): no params data found [ 1531.054261][ T52] hsr_slave_0: left promiscuous mode [ 1531.060657][ T52] hsr_slave_1: left promiscuous mode [ 1531.129592][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.147459][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.209064][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.242371][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.282334][T15988] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1531.325249][ T5246] Bluetooth: hci5: command tx timeout [ 1531.342183][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1531.360153][ T52] veth1_macvtap: left promiscuous mode [ 1531.366107][ T52] veth0_macvtap: left promiscuous mode [ 1531.371737][ T52] veth1_vlan: left promiscuous mode [ 1531.377134][ T52] veth0_vlan: left promiscuous mode [ 1531.493011][T15988] usb 3-1: Using ep0 maxpacket: 16 [ 1531.532523][T15988] usb 3-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 1531.556403][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1531.574807][ T9] usb 1-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1531.575836][T15988] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1531.586326][ T9] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1531.665722][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.723962][T15988] usb 3-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 1531.724387][ T9] hub 1-1:32.0: bad descriptor, ignoring hub [ 1531.752213][T15988] usb 3-1: New USB device strings: Mfr=111, Product=216, SerialNumber=0 [ 1531.760618][T15988] usb 3-1: Product: syz [ 1531.762079][ T9] hub 1-1:32.0: probe with driver hub failed with error -5 [ 1531.796604][T15988] usb 3-1: Manufacturer: syz [ 1531.838410][T15988] usb 3-1: config 0 descriptor?? [ 1531.876167][T15988] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1532.142902][ T9] usb 1-1: USB disconnect, device number 18 [ 1533.415089][ T5246] Bluetooth: hci5: command tx timeout [ 1533.461218][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1533.592660][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1533.982694][T17377] loop4: detected capacity change from 0 to 40427 [ 1534.645273][T17377] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1534.691596][T17377] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1534.798704][T17377] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1534.848694][T15988] usb 3-1: USB disconnect, device number 15 [ 1535.138497][T17377] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1535.175863][T17377] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1537.547750][T17052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.565482][T17052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.601343][T17052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1537.611828][T17052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1537.863008][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.870165][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.952059][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.959223][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.022464][T17399] vlan0: entered promiscuous mode [ 1538.381148][T17456] loop2: detected capacity change from 0 to 128 [ 1538.392621][T17317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.431921][T17317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.476415][T17456] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1538.490491][T17317] bridge_slave_0: entered allmulticast mode [ 1538.521073][T17317] bridge_slave_0: entered promiscuous mode [ 1538.545241][T17456] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.566710][T17052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.743812][T17317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.770535][T17317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.800988][T17317] bridge_slave_1: entered allmulticast mode [ 1538.837742][T17317] bridge_slave_1: entered promiscuous mode [ 1538.851039][T17468] loop4: detected capacity change from 0 to 1024 [ 1538.940147][T17468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1539.019306][T17475] overlayfs: failed to resolve './file0': -2 [ 1539.282837][T17317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.365294][T17317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.374871][T16753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1540.409291][T17317] team0: Port device team_slave_0 added [ 1540.437608][T17317] team0: Port device team_slave_1 added [ 1540.783862][T17492] loop4: detected capacity change from 0 to 512 [ 1540.845542][T17492] EXT4-fs: Ignoring removed i_version option [ 1541.118940][T17492] EXT4-fs: Ignoring removed nobh option [ 1541.345657][T17492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1541.383516][T17317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.390694][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.487972][T17492] EXT4-fs (loop4): 1 truncate cleaned up [ 1541.526350][T17492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1541.622159][T17317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.790346][T17317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.825834][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.944351][T17317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.058309][T17052] veth0_vlan: entered promiscuous mode [ 1542.852217][T17508] 9pnet_fd: Insufficient options for proto=fd [ 1543.271050][T16753] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.317274][T17052] veth1_vlan: entered promiscuous mode [ 1543.332478][T12310] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1543.381968][T17317] hsr_slave_0: entered promiscuous mode [ 1543.389585][T17317] hsr_slave_1: entered promiscuous mode [ 1543.418998][T17317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.457897][T17317] Cannot create hsr debugfs directory [ 1543.504821][T12310] usb 2-1: Using ep0 maxpacket: 16 [ 1543.574162][T12310] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1543.612283][T12310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.620481][T12310] usb 2-1: Product: syz [ 1543.651069][T12310] usb 2-1: Manufacturer: syz [ 1543.688911][T17052] veth0_macvtap: entered promiscuous mode [ 1543.699990][T12310] usb 2-1: SerialNumber: syz [ 1543.717701][T12310] usb 2-1: config 0 descriptor?? [ 1543.728072][T17514] loop0: detected capacity change from 0 to 256 [ 1543.823729][T17514] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d) [ 1543.938046][T17052] veth1_macvtap: entered promiscuous mode [ 1544.030507][T12310] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1544.043716][T12310] usb 2-1: Detected FT232H [ 1544.732777][T12310] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1544.769779][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.835379][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.892223][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.928498][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.938452][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.949664][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.959582][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1544.970154][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1544.981765][T17052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1545.109805][T12310] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 1545.126448][T12310] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1545.176535][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.227795][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.245464][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.258600][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.269027][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.280001][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.290551][T17052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1545.328967][T11835] usb 2-1: USB disconnect, device number 21 [ 1545.343218][T11835] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1545.362957][T11835] ftdi_sio 2-1:0.0: device disconnected [ 1545.370983][T17052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1545.381078][T15988] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1545.409829][T17052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1545.423670][T16620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1545.516173][T17052] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.532153][T15988] usb 5-1: Using ep0 maxpacket: 16 [ 1545.539556][T15988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.552071][T17052] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.552814][T15988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.598551][T17052] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.601778][T15988] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1545.621247][T17052] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1545.638698][T15988] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1545.651457][T15988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.672675][T15988] usb 5-1: config 0 descriptor?? [ 1546.677293][T17535] loop2: detected capacity change from 0 to 1024 [ 1546.715275][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.722973][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.730326][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.737705][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.745013][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.752461][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.759712][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.767902][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.775808][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.783428][T15988] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0 [ 1546.825573][T15988] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000E/input/input20 [ 1546.876476][T17535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.904421][T15988] microsoft 0003:045E:07DA.000E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1546.952501][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1546.965565][T15988] usb 5-1: USB disconnect, device number 19 [ 1547.314323][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1547.323017][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1547.797538][ T29] audit: type=1800 audit(2000000313.070:269): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1913" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1547.923233][T11541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.214494][T11541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.342184][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.566129][T17317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1548.618740][T17317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1548.664606][T17317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1548.721703][T17317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1548.882707][T12310] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1549.041984][T17556] loop4: detected capacity change from 0 to 8192 [ 1549.056850][T17317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.072500][T12310] usb 6-1: Using ep0 maxpacket: 16 [ 1549.086258][T17565] loop2: detected capacity change from 0 to 1024 [ 1549.113239][T17565] EXT4-fs: Ignoring removed orlov option [ 1549.131651][T12310] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1549.153393][T17317] 8021q: adding VLAN 0 to HW filter on device team0 [ 1549.160486][T12310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.165721][T17565] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1549.197857][T12310] usb 6-1: Product: syz [ 1549.208143][T12310] usb 6-1: Manufacturer: syz [ 1549.224453][ T969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1549.226507][T12310] usb 6-1: SerialNumber: syz [ 1549.231577][ T969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1549.262979][T17556] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1549.291879][T12310] usb 6-1: config 0 descriptor?? [ 1549.299109][ T969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.306320][ T969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.321375][T17556] FAT-fs (loop4): Filesystem has been set read-only [ 1549.326398][T17565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1549.359487][T17317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1549.370337][T17317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1549.645344][T12310] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1549.654477][T12310] usb 6-1: Detected FT232H [ 1549.877012][T17565] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1550.035531][T17565] overlayfs: upper fs does not support tmpfile. [ 1550.163307][T17565] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1550.292690][T12310] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1550.597641][T12310] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1550.614074][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.620782][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.641377][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.684943][T17317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.785891][T17317] veth0_vlan: entered promiscuous mode [ 1550.843854][T17317] veth1_vlan: entered promiscuous mode [ 1550.925598][T17597] Bluetooth: MGMT ver 1.23 [ 1551.024366][ T9] usb 6-1: USB disconnect, device number 14 [ 1551.047864][T17317] veth0_macvtap: entered promiscuous mode [ 1551.091958][T17317] veth1_macvtap: entered promiscuous mode [ 1551.136905][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1551.159888][ T9] ftdi_sio 6-1:0.0: device disconnected [ 1551.222869][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.266824][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.298184][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.333911][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.371444][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.483797][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.557170][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.570297][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.580227][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.590770][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.604097][T17317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.614717][T17602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1923'. [ 1551.664514][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.692448][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.715396][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.741782][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.792101][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.862095][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.971361][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.024431][T17613] loop2: detected capacity change from 0 to 512 [ 1552.031607][T17613] EXT4-fs: Ignoring removed mblk_io_submit option [ 1552.043712][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.062940][T17613] EXT4-fs: Ignoring removed i_version option [ 1552.121776][T17613] EXT4-fs error (device loop2): __ext4_iget:4952: inode #11: block 1: comm syz.2.1926: invalid block [ 1552.124830][T17317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1552.134256][T17613] EXT4-fs (loop2): Remounting filesystem read-only [ 1552.162914][T17317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1552.174753][T17317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1552.191105][T17613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1552.269847][T17317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.312268][T17317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.340894][T17317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.349770][T17317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.678636][T17589] loop0: detected capacity change from 0 to 40427 [ 1552.691738][T17589] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1552.707683][T17589] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1552.719643][T17589] F2FS-fs (loop0): invalid crc value [ 1553.225226][T17629] loop4: detected capacity change from 0 to 128 [ 1553.312795][T17629] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1553.323850][T17589] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-4) [ 1553.388652][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.449853][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.605701][T16620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1553.622190][ T5351] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1553.659132][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.684725][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.692583][T12990] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1553.711204][T17636] loop1: detected capacity change from 0 to 2048 [ 1553.800209][T17638] ------------[ cut here ]------------ [ 1553.805888][T17638] Please remove unsupported % in format string [ 1553.814123][T17638] WARNING: CPU: 0 PID: 17638 at lib/vsprintf.c:2659 format_decode+0xa07/0xba0 [ 1553.823289][T17638] Modules linked in: [ 1553.827228][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.2.1932 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 1553.837745][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1553.847890][T17638] RIP: 0010:format_decode+0xa07/0xba0 [ 1553.853435][T17638] Code: f6 41 c6 44 24 05 08 e9 c4 fa ff ff e8 72 a1 7c f6 c6 05 88 36 37 05 01 90 48 c7 c7 40 a8 cc 8c 40 0f b6 f5 e8 6a 8c 3d f6 90 <0f> 0b 90 90 e9 17 fc ff ff 48 8b 3c 24 e8 37 3c dd f6 e9 0f f7 ff [ 1553.873197][T17638] RSP: 0018:ffffc90002eff6e0 EFLAGS: 00010282 [ 1553.879345][T17638] RAX: 0000000000000000 RBX: ffffc90002eff954 RCX: ffffc90015992000 [ 1553.887434][T17638] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 1553.895508][T17638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1553.903580][T17638] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002eff7e0 [ 1553.911609][T17638] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffd0 [ 1553.919877][T17638] FS: 00007fc96b1e46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1553.928996][T17638] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1553.935714][T17638] CR2: 000000110c3c52ba CR3: 000000005f86e000 CR4: 0000000000350ef0 [ 1553.943786][T17638] Call Trace: [ 1553.947111][T17638] [ 1553.950087][T17638] ? __warn+0xea/0x3d0 [ 1553.954309][T17638] ? format_decode+0xa07/0xba0 [ 1553.959145][T17638] ? report_bug+0x3c0/0x580 [ 1553.963772][T17638] ? handle_bug+0x54/0xa0 [ 1553.968182][T17638] ? exc_invalid_op+0x17/0x50 [ 1553.972992][T17638] ? asm_exc_invalid_op+0x1a/0x20 [ 1553.978098][T17638] ? __warn_printk+0x1a6/0x350 [ 1553.982987][T17638] ? format_decode+0xa07/0xba0 [ 1553.987821][T17638] ? __pfx_format_decode+0x10/0x10 [ 1553.993031][T17638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1553.998982][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.004756][T17638] ? bpf_bprintf_prepare+0x5ea/0x1490 [ 1554.010242][T17638] bstr_printf+0x137/0x1090 [ 1554.014907][T17638] ? __pfx_bstr_printf+0x10/0x10 [ 1554.019917][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.025685][T17638] ? ktime_get+0xd9/0x1a0 [ 1554.030620][T17638] ? __pfx_lock_release+0x10/0x10 [ 1554.035761][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.041488][T17638] bpf_trace_printk+0x10b/0x190 [ 1554.046466][T17638] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1554.051915][T17638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.057254][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.063014][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.068733][T17638] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1554.074618][T17638] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 1554.080132][T17638] bpf_test_run+0x5e3/0xa90 [ 1554.084771][T17638] ? __pfx_bpf_test_run+0x10/0x10 [ 1554.089953][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.095723][T17638] ? __asan_memset+0x23/0x50 [ 1554.100396][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.106167][T17638] bpf_prog_test_run_skb+0xb6e/0x20f0 [ 1554.111723][T17638] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1554.117850][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.123651][T17638] ? fput+0x30/0x390 [ 1554.127611][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.133377][T17638] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1554.139260][T17638] __sys_bpf+0xfc9/0x49a0 [ 1554.143704][T17638] ? __pfx___sys_bpf+0x10/0x10 [ 1554.148531][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.154306][T17638] ? reacquire_held_locks+0x20b/0x4c0 [ 1554.159748][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.165510][T17638] ? do_futex+0x123/0x350 [ 1554.169928][T17638] ? __pfx_do_futex+0x10/0x10 [ 1554.174894][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.180638][T17638] ? xfd_validate_state+0x5d/0x180 [ 1554.185861][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.191581][T17638] ? rcu_is_watching+0x12/0xc0 [ 1554.196475][T17638] __x64_sys_bpf+0x78/0xc0 [ 1554.200954][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.206721][T17638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.211995][T17638] do_syscall_64+0xcd/0x250 [ 1554.216626][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.222709][T17638] RIP: 0033:0x7fc96a37dff9 [ 1554.227180][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.247012][T17638] RSP: 002b:00007fc96b1e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1554.255538][T17638] RAX: ffffffffffffffda RBX: 00007fc96a535f80 RCX: 00007fc96a37dff9 [ 1554.263655][T17638] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1554.271772][T17638] RBP: 00007fc96a3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1554.279858][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.287914][T17638] R13: 0000000000000000 R14: 00007fc96a535f80 R15: 00007ffe5a3a6f38 [ 1554.296029][T17638] [ 1554.299096][T17638] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1554.306407][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.2.1932 Not tainted 6.11.0-syzkaller-11993-g3efc57369a0c #0 [ 1554.316867][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1554.326983][T17638] Call Trace: [ 1554.330282][T17638] [ 1554.333238][T17638] dump_stack_lvl+0x3d/0x1f0 [ 1554.337896][T17638] panic+0x71d/0x800 [ 1554.341849][T17638] ? __pfx_panic+0x10/0x10 [ 1554.346328][T17638] ? show_trace_log_lvl+0x29d/0x3d0 [ 1554.351581][T17638] ? format_decode+0xa07/0xba0 [ 1554.356395][T17638] check_panic_on_warn+0xab/0xb0 [ 1554.361402][T17638] __warn+0xf6/0x3d0 [ 1554.365370][T17638] ? format_decode+0xa07/0xba0 [ 1554.370183][T17638] report_bug+0x3c0/0x580 [ 1554.374574][T17638] handle_bug+0x54/0xa0 [ 1554.378784][T17638] exc_invalid_op+0x17/0x50 [ 1554.383349][T17638] asm_exc_invalid_op+0x1a/0x20 [ 1554.388247][T17638] RIP: 0010:format_decode+0xa07/0xba0 [ 1554.393663][T17638] Code: f6 41 c6 44 24 05 08 e9 c4 fa ff ff e8 72 a1 7c f6 c6 05 88 36 37 05 01 90 48 c7 c7 40 a8 cc 8c 40 0f b6 f5 e8 6a 8c 3d f6 90 <0f> 0b 90 90 e9 17 fc ff ff 48 8b 3c 24 e8 37 3c dd f6 e9 0f f7 ff [ 1554.413307][T17638] RSP: 0018:ffffc90002eff6e0 EFLAGS: 00010282 [ 1554.419411][T17638] RAX: 0000000000000000 RBX: ffffc90002eff954 RCX: ffffc90015992000 [ 1554.427411][T17638] RDX: 0000000000040000 RSI: ffffffff814e7336 RDI: 0000000000000001 [ 1554.435416][T17638] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1554.443764][T17638] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90002eff7e0 [ 1554.451796][T17638] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000ffffffd0 [ 1554.459946][T17638] ? __warn_printk+0x1a6/0x350 [ 1554.464792][T17638] ? __pfx_format_decode+0x10/0x10 [ 1554.469947][T17638] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1554.475885][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.481584][T17638] ? bpf_bprintf_prepare+0x5ea/0x1490 [ 1554.487033][T17638] bstr_printf+0x137/0x1090 [ 1554.491610][T17638] ? __pfx_bstr_printf+0x10/0x10 [ 1554.496605][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.502304][T17638] ? ktime_get+0xd9/0x1a0 [ 1554.506694][T17638] ? __pfx_lock_release+0x10/0x10 [ 1554.511775][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.517470][T17638] bpf_trace_printk+0x10b/0x190 [ 1554.522378][T17638] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1554.527808][T17638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.533059][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.538768][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.544458][T17638] ? timekeeping_debug_get_ns+0x334/0x5b0 [ 1554.550248][T17638] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 1554.555746][T17638] bpf_test_run+0x5e3/0xa90 [ 1554.560314][T17638] ? __pfx_bpf_test_run+0x10/0x10 [ 1554.565423][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.571179][T17638] ? __asan_memset+0x23/0x50 [ 1554.575936][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.581662][T17638] bpf_prog_test_run_skb+0xb6e/0x20f0 [ 1554.587139][T17638] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1554.593029][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.598720][T17638] ? fput+0x30/0x390 [ 1554.602651][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.608360][T17638] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1554.614318][T17638] __sys_bpf+0xfc9/0x49a0 [ 1554.618688][T17638] ? __pfx___sys_bpf+0x10/0x10 [ 1554.623491][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.629206][T17638] ? reacquire_held_locks+0x20b/0x4c0 [ 1554.634621][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.640309][T17638] ? do_futex+0x123/0x350 [ 1554.644692][T17638] ? __pfx_do_futex+0x10/0x10 [ 1554.649436][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.655130][T17638] ? xfd_validate_state+0x5d/0x180 [ 1554.660370][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.666086][T17638] ? rcu_is_watching+0x12/0xc0 [ 1554.671284][T17638] __x64_sys_bpf+0x78/0xc0 [ 1554.675772][T17638] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1554.681489][T17638] ? lockdep_hardirqs_on+0x7c/0x110 [ 1554.686767][T17638] do_syscall_64+0xcd/0x250 [ 1554.691333][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.697286][T17638] RIP: 0033:0x7fc96a37dff9 [ 1554.701757][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.721402][T17638] RSP: 002b:00007fc96b1e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1554.729855][T17638] RAX: ffffffffffffffda RBX: 00007fc96a535f80 RCX: 00007fc96a37dff9 [ 1554.737859][T17638] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 1554.745857][T17638] RBP: 00007fc96a3f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1554.753944][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1554.761941][T17638] R13: 0000000000000000 R14: 00007fc96a535f80 R15: 00007ffe5a3a6f38 [ 1554.769961][T17638] [ 1554.773215][T17638] Kernel Offset: disabled [ 1554.777578][T17638] Rebooting in 86400 seconds..