last executing test programs: 4m14.703111582s ago: executing program 32 (id=216): ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff00"], &(0x7f00000001c0)='GPL\x00'}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000180)=[{0x3, &(0x7f0000000040)=0x3, 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 3m47.159294761s ago: executing program 33 (id=527): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) mbind(&(0x7f0000195000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000400)=0xfb, 0x8, 0x3) 3m45.575206134s ago: executing program 34 (id=537): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x8001, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m38.161732091s ago: executing program 35 (id=952): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xac141442, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) 2m23.184766766s ago: executing program 3 (id=1042): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10020, 0x0, {0x3}}) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2m21.91619356s ago: executing program 3 (id=1055): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2m21.631194705s ago: executing program 3 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) readahead(r0, 0x2, 0x0) 2m21.361070262s ago: executing program 3 (id=1060): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m20.351447567s ago: executing program 3 (id=1070): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x143902, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) 2m17.917121935s ago: executing program 3 (id=1088): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="1feb4934c3a9dd7b4a6487a396e4a71fdc2e89eb3d55388a6578aefbddb891034a52a3b66f79499db172def10fc8db93f99bc0c966b43520d9dfb463a66e0d4394322d7b12a2c4a2021e73c6f08cd14bfdf4565bf2ae6509a78fcdd601fdbda3c358450b3c4faa4225bfb17eb25fdedd57edba4b5ef399040800000000000041f15918f38e9e493a4de9cb11e6b72be41828a7c71db41bb2cdcf3540a199921fd7051bdfd032b8811f4daf9c700ee72a0d06344b02c83e62f803f53034531633b0f2658a5dc66d605efa17b1f17c194a8f342f9309100140f9a6a0f017198972bb694656587bdb5191b7b9deb064473a7977c6698edfa194b50a9527d8dd081b8659d8e5df1ae80e765452", 0x10b}, {&(0x7f0000000280)="51e4b68f19536342b73677cd5193777110de0eae1de8642c503cfd94f0929123460e2fe755b2ef981f6cb4794a5c33e2b006c993cfebcfdd2813b72755830fc1bcfbbd7a1ff49f6ec717c6e10cfe71375323712d4f2882b87c870932ce4a5ad25b467da6530db47373882b", 0x6b}, {&(0x7f0000000800)="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", 0x16a}, {&(0x7f00000001c0)="af930f839896cd6a27c09f1e7cdc9c7d3f9a35c4552ebd13765217f835", 0x1d}], 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xf) 2m17.459797846s ago: executing program 36 (id=1088): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="1feb4934c3a9dd7b4a6487a396e4a71fdc2e89eb3d55388a6578aefbddb891034a52a3b66f79499db172def10fc8db93f99bc0c966b43520d9dfb463a66e0d4394322d7b12a2c4a2021e73c6f08cd14bfdf4565bf2ae6509a78fcdd601fdbda3c358450b3c4faa4225bfb17eb25fdedd57edba4b5ef399040800000000000041f15918f38e9e493a4de9cb11e6b72be41828a7c71db41bb2cdcf3540a199921fd7051bdfd032b8811f4daf9c700ee72a0d06344b02c83e62f803f53034531633b0f2658a5dc66d605efa17b1f17c194a8f342f9309100140f9a6a0f017198972bb694656587bdb5191b7b9deb064473a7977c6698edfa194b50a9527d8dd081b8659d8e5df1ae80e765452", 0x10b}, {&(0x7f0000000280)="51e4b68f19536342b73677cd5193777110de0eae1de8642c503cfd94f0929123460e2fe755b2ef981f6cb4794a5c33e2b006c993cfebcfdd2813b72755830fc1bcfbbd7a1ff49f6ec717c6e10cfe71375323712d4f2882b87c870932ce4a5ad25b467da6530db47373882b", 0x6b}, {&(0x7f0000000800)="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", 0x16a}, {&(0x7f00000001c0)="af930f839896cd6a27c09f1e7cdc9c7d3f9a35c4552ebd13765217f835", 0x1d}], 0x4) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xf) 2m13.451664148s ago: executing program 7 (id=1115): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x3, 0x9, {{0x5, 0x4, 0x0, 0xf, 0x14, 0x66, 0xfffe, 0x3, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @remote}}}}) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="a4", 0x1) syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x9, 0x0, 0x6}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 2m11.418156494s ago: executing program 7 (id=1126): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x4c}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) syz_usb_connect(0x1, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4f, &(0x7f00000002c0)=ANY=[@ANYBLOB="4f03"]}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m9.666384474s ago: executing program 7 (id=1137): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[], 0x1, 0xc51, &(0x7f0000002640)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000002500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x200010, 0x0, 0xff, 0x0, &(0x7f00000007c0)) creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2m8.794920866s ago: executing program 7 (id=1142): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") chown(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m7.434018701s ago: executing program 7 (id=1152): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 2m5.707364207s ago: executing program 7 (id=1158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) 2m4.990019978s ago: executing program 37 (id=1158): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x20000000009) 1m47.582855692s ago: executing program 9 (id=1255): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m46.984991786s ago: executing program 9 (id=1257): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13141, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440), 0x10, 0xfffffffd}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000440)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9}}}, 0x7) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1m45.674465832s ago: executing program 9 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010102}]}}}]}, 0x40}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1m45.382344565s ago: executing program 9 (id=1266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f0000000680)={[{@dioread_nolock}, {@grpjquota}, {@data_err_abort}, {@bh}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpjquota}, {@dioread_nolock}, {@nobarrier}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x400}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m44.847351302s ago: executing program 9 (id=1271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={r1, @in={{0x2, 0x4e22, @empty}}, 0x0, 0x3}, 0x90) 1m44.293161435s ago: executing program 9 (id=1272): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m43.670599833s ago: executing program 38 (id=1272): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m14.537185854s ago: executing program 1 (id=1446): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000d00)=[{r1, 0x4200}, {r1, 0xd044}], 0x2, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m13.489249901s ago: executing program 1 (id=1458): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 1m13.169146998s ago: executing program 1 (id=1462): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m12.887947754s ago: executing program 1 (id=1465): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 1m12.647846367s ago: executing program 1 (id=1466): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000004a00)='./file0\x00', 0x4000, &(0x7f0000004a80)=ANY=[@ANYBLOB="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"], 0xff, 0x5e5c, &(0x7f0000005d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') sendfile(r0, r1, 0x0, 0x20fffe82) ftruncate(r0, 0x4) 1m12.188701568s ago: executing program 1 (id=1469): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xab) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r4, 0x0) 1m11.547637554s ago: executing program 39 (id=1469): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, r0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0xab) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r3, r0, r4, 0x0) 1m1.851164593s ago: executing program 5 (id=1512): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1m1.101889119s ago: executing program 5 (id=1516): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r1, 0x1, 0x1) getdents(r1, &(0x7f00000005c0)=""/156, 0x9c) 1m0.842978848s ago: executing program 5 (id=1519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x27, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x180, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.613556184s ago: executing program 5 (id=1521): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1081a, &(0x7f0000000a00)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,allow_utime=00000000000000000000011,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESDEC, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16, @ANYRESOCT, @ANYRES32], 0x21, 0x14fd, &(0x7f0000003f40)="$eJzs3Au0jtXWOPA511oPm6Q3yX3NNR/etLFIklyS5JIkyZEkt4QkSZKkcr8lIQm5J7mH5BaS+/2We5Ik7SQJyS1Z/6HT+XRO5/v3ne873zDGt+dvjGfsNd/nneuZ65177Od53j3e97sOg6rUq1qxDjPD/wj+9UdXAEgBgL4AcA0ARABQMlvJbJf2Z9LY9X92EPHv9eDUK12BuJKk/+mb9D99k/6nb9L/9E36n75J/9M36X/6Jv0XIj3bOi33tbKl303e/0/P5Pz/f0ha0dFfrS96fcd/IUX6n75J/9M36X/6Jv1P36T/6Zv0P32T/qdv0n8h0rP//nvH8r+D/wvblf79E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxkA+Nv4StclhBBCCCGEEEKIf5+Q8UpXIIQQQgghhBBCiP99CAo0GIggA2SEFMgEmeEqyAJXQ1a4BhJwLWSD6yA7XA85ICfkgtyQB/JCPrBA4IAhhvxQAJJwAxSEGyEVCkFhKAIeikIxuAmKw81QAm6BknArlILboDSUgbJQDm6H8nAHVIA7oSLcBZWgMlSBqnA3VIN7oDrcCzXgPqgJ90MteABqw1+gDjwIdeEhqAcPQ314BBpAQ2gEjaHJfyv/RXgJXobO0AW6QjfoDj2gJ/SC3tAH+sIr0A9SfnttBsIgeB0GwxswBN6EoTAMhsNbMAJGwigYDWNgLIyDt2E8vAMT4F2YCJNgMkyBqTANpsN7MANmwix4H2bDBzAH5sI8mA8L4ENYCItgMXwES+BjWArLYDmsgJWwClbDGlgL62A9bICNsAk2wxbYCp/ANtgOO2An7ILdsAc+hb3wGeyDz2E/fPEv5p/5h/yOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwBw35sJcmAfzYD7Mh4SEjIz5MT8mMYkFsSCmYioWxsLo0WMxLIbF8WYsgSWwJJbEUlgKS2MZLIPlsByWx/JYAStgRayIlbASVsEqeDfejfdgdayONbAG1sSaWAtrYVre2lgH62BdrIv1sB7Wx/rYABtgI2yETbAJNsWm2AybYQtsgS2xJbbCVtgaW2MbbINtsS22w3bYHttjB+yAHfEFfAFfxBfxZXwZu2Al1Q27Y3fsiT2xN/bBPvgK9sNX8VV8DQfgQByEr+Pr+AYOwdM4FIfhcByO5dVIHIWjkdVYHIfjcDyOxwk4ASfiJJyEU3AqTsPpOB1n4Eycie/jbPwAP8C5OBfn4wJcgAtxES7GxbgEz+BSXIbLcQWuxFW4EtfgWlyD63EDrsdNuAm34Bb8BD/B7bgdd+JO3I0GAD/Fz/AzHID7cT8ewAN4EA/iITyEaZiGh/EwHsEjeBSP4jE8hsfxBJ7EE3gKT+FpPINn8Syex/N4AZ/L803d3YXWDQB1iVFGZVAZVIpKUZlVZpVFZVFZVVaVUAmVTWVT2VV2lUPlULlULpVH5VH51DlFihSrWOVX+VVSJVVBVVClqlRVWBVWXnlVTBVTxVVxVUKVUCXVraqUuk2VVmVUc19OlVPlVQtfQd2pKqqKqpKqrKqoqqqqqqaqqeqquqqhaqiaqqaqpR5QtVU37I0PqkudqacGYn01CBuohqqRaqzewEdVUzUEm6nmqoV6XA3DodhKNfWt1VOqjRqFbdUzajQ+q9qrsdhBPa86qhdUJ/Wiekk1851VFzURu6nuagr2VL1Ub9VHzcDK6lLHqqjX1AA1UA1Sr6v5+IYaot5UQ9UwNVy9pUaokWqUGq3GqLFqnHpbjVfvqAnqXTVRTVKT1RQ1VU1T09V7aoaaqWap99Vs9YGao+aqeWq+WqA+VAvVIrVYfaSWqI/VUrVMLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fb1idqmtqsdaqfapXarPepTtVd9pvapz9V+9YU6oL5UB9VX6pD6WqWpb9Rh9a06or5TR9X36pj6QR1XJ9RJ9aM6pX5Sp9UZdVadU+fVz+qC+kVdVEGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36lRdSBfWRbTXRXUxfZMurm/WJfQtuqS+VZfSt+nSuowuq8vp23V5fYeuoO/UFfVdupKurKvoqvpuXU3fo6vre3UNfZ+uqe/XtfQDurb+i66jH9R19UO6nn5Y19eP6Aa6oW6kG+sm+lHdVD+mm+nmuoV+XLfUT+hW+kndWj+l2+indVv9jG6nn9Xt9XO6g35ed9Qv6E76F31RB91Zd9FddTfdXffQPXUv3Vv30X31K7qfflX316/pAXqgHqRf14P1G3qIflMP1cP0cP2WHqFH6lF6tB6jx+px+m09Xr+jJ+h39UQ9SU/WU/RUPU33/m2mWf+F/Hf+SX7/X4++RW/Vn+hterveoXfqXXq33qP36L16r96n9+n9er8+oA/og/qgPqQP6TSdpg/rw/qIPqKP6qP6mD6mj+sT+pz+UZ/SP+nT+ow+o8/p8/q8vvDbawAGjTLaGBOZDCajSTGZTGZzlclirjZZzTUmYa412cx1Jru53uQwOU0uk9vkMXlNPmMNGWfYxCa/KWCS5gb87aRpCpsixpuippi56V/JNwXNjSbVFPq7/D+rr4lpYpqapqaZaWZamBampWlpWplWprVpbdqYNqataWvamXamvWlvOpgOpqPpaDqZTuYl85LpbDqbrqar6W56mJ6ml+lt+pi+5hXTz/Qz/U1/M8AMMIPMIDPYDDZDzBAz1Aw1w81wM8KMMKPMKDPGjDHjzDgz3ow3E8wEM9FMNJPNZDPVTDXTzXQzw8wws8wsM9vMNnPMHDPPzDMLzAKz0Cw0i81is8QsMUvNMrPMrDArzCqzyqwxa8w6s85sMBvMJrPJLM241Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDJpJs0cNofNEXPEHDVHzTFzzBw3x81Jc9KcMqfMaXPanDVnzXlz3lwwF8xFc/HSZV+kIhWZyEQZogxRSpQSZY4yR1miLFHWKGuUiBJRtihblD26PsoR5YxyRbmjPFHeKF9kI4pcxFEc5Y8KRMnohqhgdGOUGhWKCkdFIh8VjYpFN0XFo5ujEtEtUcno1qhUdFtUOioTlY3KRbdH5aM7ogrRnVHF6K6oUlQ5qhJVje6OqkX3RNWje6Ma0X1Rzej+qFb0QFQ7+ktUJ3owqhs9FNWLHo7qR49EDaKGUaOocdTk3zp/CKdzPuY72y62q+1mu9setqftZXvbPravfcX2s6/a/vY1O8AOtIPs63awfcMOsW/aoXaYHW7fsiPsSDvKjrZj7Fg7zr5tx9t37AT7rp1oJ9nJdoqdaqfZ6fY9O8POtLPs+3a2/cDOsXPtPDvfLrAf2oV2kV1sP7JL7Md2qV1ml9sVdqVdZVfbNXatXWfX2w12o91kN9stdqv9xG6z2+0Ou9PusrvtHvup3Ws/s/vs53a//cIesF/ag/Yre8h+bdPsN/aw/dYesd/Zo/Z7e8z+YI/bE/ak/dGesj/Z0/aMPWvP2fP2Z3vB/mIv2nDp4v7S6Z0MGcpAGSiFUigzZaYslIWyUlZKUIKyUTbKTtkpB+WgXJSL8lAeykf56BImpvyUn5KUpIJUkFIplQpTYfLkqRgVo+JUnEpQCSpJJakUlaLSVJrKUlm6nW6nO+gOupPupLvoLqpMlakqVaVqVI2qU3WqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpADagRNaIm1ISaUlNqRs2oBbWgltSSWlErak2tqQ21obbUltpRO2pP7akDdaCO1JE6USd6iV6iztSZulJX6k7dqSf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtNbNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFtJiWkxLaAktpaW0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSNttEO2kG7aBftoT20l/bSPtpH+2k/HaADdJAO0iE6RGmURofpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaef6QL9QhcpUIrL5DK7q1wWd7XL6q5x/xjncrldHpfX5XPW5XA5/y4m51yqK+QKuyLOu6KumLvJpV66pfpdXNqVcWVdOXe7K+/ucBX+EFdz97jq7l5Xw93nqrq7/y6u6e53tdzDrrZ7xNVxDV1d19jVcw+7+u4R18A1dI1cY9fSPeFauSdda/eUa+Oe/kO80C1ya906t95tcHvdZ+6sO+eOuO/cefez6+y6uL7uFdfPver6u9fcADfwD/Fw95Yb4Ua6UW60G+PG/iGe7Ka4qW6am+7eczPczD/EC9yHbrZb7Oa4uW6em/9rfKmmxe4jt8R97Ja6ZW65W+FWulVutVvzH7WucJvcZrfF7XGfum1uu9vhdrpdbvev8aV17HOfu/3uC3fYfesOuq/cIXfUpblvfo0vre+o+94dcz+44+6EO+l+dKfcT+60O/Pr+i+t/Uf3i7voggNGVqzZcMQZOCOncCbOzFdxFr6as/I1nOBrORtfx9n5es7BOTkX5+Y8nJfzsWVix8wx5+cCnOQbuCDfyKlciAtzEfZclIvxTVycb+YSfAuX5Fu5FN/GpbkMl+VyfDuX5zu4At/JFfkursSVuQpX5bu5Gt/D1flersH3cU2+n2vxA1yb/8J1+EGuyw9xPX6Y6/Mj3IAbciNuzE34UW7Kj3Ezbs4t+HFuyU9wK36SW/NT3Iaf5rb8DLfjZ7k9P8cd+HnuyC9wJ36RX+KXuTN34a7cjbtzD+7Jvbg39+G+/Ar341e5P7/GA3ggD+LXeTC/wUP4TR7Kw3g4v8UjeCSP4tE8hsfyOH6bx/M7PIHf5Yk8iSfzFJ7K03g6v8czeCbP4vd5Nn/Ac3guz+P5vIA/5IW8iBfzR7yEP+alvIyX8wpeyat4Na/htbyO1/MG3sibeDNv4a38CW/j7byDd/Iu3s17+FPey5/xPv6c9/MXfIC/5IP8FR/irzmNv+HD/C0f4e/4KH/Px/gHPs4n+CT/yKf4Jz7NZ/gsn+Pz/DNf4F/4IgeGGGMV69jEUZwhzhinxJnizPFVcZb46jhrfE2ciK+Ns8XXxdnj6+Mccc44V5w7zhPnjfPFNqbYxRzHcf64QJyMb4gLxjfGqXGhuHBcJPZx0bhYfFNcPL45LhHfEpeMb41LxbfFpeMy8cP3lYtvj8vHd8QV4jvjivFdcaW4clwlrhrfHVeL74mrx/fGNeL74hLx/XGt+IEYfvu8St34obhe/HBcP34kbhA3jBvFjeMm8aNx0/ixuFncPG4RPx63jJ+IW8VPxq3jp+I28dN/ur9r3C3uHveIe8Qh3KvnJecnFyQ/TC5MLkouTn6UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGULVjODRK6+98ZHP4DP6FJ/JZ/ZX+Sz+ap/VX+MT/lqfzV/ns/vrfQ6f0+fyuX0en9fn89aTd5597PP7Aj7pb/AF/Y0+1RfyhX0R731RX8w39k18E9/UP+ab+ea+hX/cP+6f8E/4J/2T/infxj/t2/pnfDv/rG/vn/PP+ed9R/+C7+Rf9C/5l31n38V39V19d9/d9/Q9fW/f2/f1fX0/38/39/39AD/AD/KD/GA/2A/xQ/xQP9QP98P9CD/Cj/Kj/Bg/xo/z4/x4P95P8BP8RD/RT/aT/VQ/1U/30/0MP8PP8rP87NTZfo6f4+f5eX6BX+AX+oV+sV/sl/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/2qf5b/xh/60/4r/zR/33/pj/wR/3J/xJ/6M/5X/yp/0Zf9af8+f9z/6C/8Vf9MGPS7ydGJ94JzEh8W5iYmJSYnJiSmJqYlpieuK9xIzEzMSsxPuJ2YkPEnMScxPzEvMTCxIfJhYmFiUWJz5KLEl8nFiaWJZYnliRWJlYlQgh77Y45A8FQjLcEAqGG0NqKBQKhyLBh6KhWLgpFA83hxLhllAy3BpKhdtC6VAmlA2PhAahYWgUGocm4dHQNDwWmoXmoUV4PLQMT4RW4cnQOjwV2oSnQ9vwTGgXng3tw3OhQ3g+dPzbHVd4OXQOXULX0C10Dz1Cz9Ar9A59Qt/wSugXXg39w2thQBgYBoXXw+DwRhgS3gxDw7AwPLwVRoSRYVQYHcaEsWFceDuMD++ECeHdMDFMCpPDlDA1TAvTw3thRpgZZoX3w+zwQZgT5oZ5YX5YED4MC8OisDh8FJaEj8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBJ2Ba2hx1hZ9gVdoc94dOwN3wW9oXPw/7wRTgQvgwHw1fhUPg6pIVvwuHwbTgSvgtHw/fhWPghHA8nwsnwYzgVfgqnw5lwNpwL58PP4UL4JVyUz6wJIYQQQvyX9PiT/d3+yWMGANRv4+4AcPX23Gm/368BYGOOv457qTwtEwDwVJcOD/5tq1Spa9euvz13qYaowFwASPzDAX6Ll0ELeAJaQ3Mo/k/r66VeOM9/Mn/yVoDMv8tJgcvx5fm//E/mf/Tx4QtLxWez/X/mnwuQWuByTia4HC+DFpdWA82hxH8yf86mf1J/pq/GATT7XU4WuBxfrr8YPAZPQ+u/e6YQQgghhBBCCPFXvVTZdn92/3zp/jyPuZyTES7Hf3Z/LoQQQgghhBBCiCvv2Rc6Pflo69bN28lABjKQwX8MrvRfJiGEEEIIIcS/2+WL/suPZbqSBQkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEOnQ7770KxMA/K98ndiVXqMQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxpf2/AAAA//+7dzOa") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) open(&(0x7f00000001c0)='./file1\x00', 0x6acc6bf18792a39a, 0x15f) 59.695746496s ago: executing program 5 (id=1528): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 58.967396334s ago: executing program 5 (id=1533): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') close_range(r1, 0xffffffffffffffff, 0x0) 58.591094482s ago: executing program 40 (id=1533): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) chdir(&(0x7f0000000540)='./cgroup\x00') close_range(r1, 0xffffffffffffffff, 0x0) 5.396542746s ago: executing program 4 (id=1873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 4.250717404s ago: executing program 0 (id=1880): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x2e, &(0x7f0000000540)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x4, 0x100, @void}}}}}}}, 0x0) 3.297710249s ago: executing program 6 (id=1887): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 3.169105794s ago: executing program 0 (id=1889): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x24}, @hci_rp_read_local_oob_data={{0x9}, {0x9, "dd83831deda627db87583382b39be58d", "8402b2267e7be4a294985f372420002a"}}}}, 0x27) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x1000, "144ec6", 0x8, 0x7}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x4010000, &(0x7f00000002c0)={0x11, 0x19, 0x0, 0x1, 0x10, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 3.037407278s ago: executing program 6 (id=1890): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4000810) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) 2.934912768s ago: executing program 2 (id=1891): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x35) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) write$evdev(r0, &(0x7f00000001c0)=[{{}, 0x11, 0x5, 0x400}], 0x18) 2.838138899s ago: executing program 4 (id=1893): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x3, 0xfe, 0x4, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x67}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000814}, 0x20004090) 2.705305914s ago: executing program 2 (id=1894): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fanotify_init(0x40, 0x80000) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) 2.484871921s ago: executing program 0 (id=1897): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000f80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x50, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6575632d6a702c6e6f626172726965722c63726561746f723dbd3c66f52c756d61736b3d30303137373737372c666f7263652c6e6f626172726965722c00"/81, @ANYBLOB="7e470ec52ef30900c72e7be44e1072e77aee1fff5388f306186de2b71167f738c95488f2dfab0487b84972924808fdcdaea36d445ecd3928f6ca291cb81d39aed37e6e3254b0b86c0ae79d7308d4e1dde03b8beb1a4452d898b97ca891ca36a15ab3f712153e4bb342d1be670f992a30d90a23e13aff5ce6794f9b2a37cc003462eb47e5979ec3acc9fd1842606adb0c4e86bbe75227a0b1fd8bba3bdf0a360057d44aa04f235f853d9e454a37bd0c458dfdbebcd592", @ANYRES64, @ANYRESOCT], 0x13, 0x6b2, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_mount_image$hfsplus(&(0x7f0000001380), &(0x7f0000000a40)='./file2\x00', 0x800094, &(0x7f00000063c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRESDEC=0x0], 0x5, 0x686, &(0x7f00000001c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x1800, 0x4, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.439117062s ago: executing program 4 (id=1898): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x0, 0x0, 0x1fd}, 0xb2a1}) 2.201700196s ago: executing program 4 (id=1900): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) 2.104632477s ago: executing program 8 (id=1901): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./file1\x00', 0x101042, 0x194) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, r0, 0x10001, 0x800, 0x0, 0x1e}) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x20) 2.06173203s ago: executing program 0 (id=1902): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f00000006c0)=""/246, 0x2}, 0x1}], 0x1, 0x10000, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.956674649s ago: executing program 6 (id=1903): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.709098681s ago: executing program 8 (id=1904): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x101c552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x122e, &(0x7f00000024c0)="$eJzs3E2LW1UYB/BnxnmJqfOi1moL4kE3ugmdWbjRzSBTkAYqbUdoBeHWuWPDXJNhbhiIiG1Xbv0cIojgThBxo5vZ+A0Ed7Nx2YV4JYmZjiXFDthJKb/fJg85559zbnITuOGce/D2l59sb5WNrawb01NTMb0Tke6mSDEdI7fjjbd+/uXlK9euX1xrNtcvp3Rh7erKmymlxVd++OCzr1/9sXvq/e8Wv5+P/eUPD/5Y/X3/zP7Zg7+u3myVqVWmdqebsnSj0+lmN4o8bbbK7UZK7xV5Vuap1S7z3W7K5gYj9du3is7OTi9l7c2F+s5uXpYpa/fSdt5L3U7q7vZS9nHWaqdGo5EW6sHxzRxWG1/draoqoqpmYy6qqqqejnqcimdiIRZjKZbj2Xguno/Td16IM/FivBTf/vZNr58AAAAAAAAAAAAAAAAAAAAA/j8Puf8/Rvv/zw56TXrWAAAAAAAAAAAAAAAAAAAA8GS5cu36xbVmc/1ySrWI4ou9jb2N4eOwfW0rWlFEHudjKf6Mwe7/oWF94d3m+vla6luOO8Wtf/K3fpq/L78yuJ3A2PxKGjqa39uYj/rR/Gosxenx+dWx+Vq8/tqRfCOW4tePohNFbEY/ey//+UpK71xq3pc/N+gHAAAAT4JGOrT87+vfp4btjQe1D/MP9f/AmOvzfvbcTH2ix05E2ft0OyuKfPfEitmIOF5q9oRn+LgWcyc/aO3wmZszo1NmbOdL9cm/P4+gqI2KB39T5o+cz1MRt481xFRETOgAp/+jz2R/lzgZ9z70Sc8EAAAAAAAAAACA43hUCwxHr29lGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7MDBwIAAAAAgvytN5igAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATgEAAP///kzCmA==") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}]) 1.569494623s ago: executing program 6 (id=1905): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="38010000fe0000", @ANYRESDEC], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.299613051s ago: executing program 6 (id=1906): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0xd24}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 1.174258557s ago: executing program 2 (id=1907): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x6b) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.052316473s ago: executing program 4 (id=1908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x71, 0x40000009, r3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.051563003s ago: executing program 0 (id=1909): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = eventfd2(0x0, 0x80000) read(r2, &(0x7f0000002500)=""/126, 0x7e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) 1.028976479s ago: executing program 8 (id=1910): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x7fffffff}}, 0x18) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 893.179283ms ago: executing program 6 (id=1911): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000006e40), 0x2000, 0x0) sendfile(r1, r2, 0x0, 0x20fffe82) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 879.70789ms ago: executing program 4 (id=1912): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x2000000, 0x0, 0x60, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) process_vm_readv(r0, &(0x7f0000000080)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, &(0x7f0000004980)=[{&(0x7f0000004b40)=""/4106, 0x100a}], 0x1, 0x0) 619.273859ms ago: executing program 8 (id=1913): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x9}, 0x94) r0 = memfd_create(&(0x7f0000000280)='-B\xd5N4:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc8<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGUOMX\x164\xec\x06i\x85\x93\x87YB.e\xea2|A\x95\x05\xc3\x11\xde\xa0\x14*4\x83J\xa1\xddc\xde\x91 sO\xfb\xcc\r\xa8\x05\xa3\xab\xe6\xb5\xe4\x8b\x128\xa8\x05\xf9\f\xb4\x97\x1c\x82\xfd\x80O\x00\x00\x00\x00\x00\x00\x00', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000300040000003e03000038000000d600000097700000fe03200001000700080007000000000003"], 0x58) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x40001025, r1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 569.3016ms ago: executing program 2 (id=1914): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 384.596964ms ago: executing program 2 (id=1915): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 378.669703ms ago: executing program 8 (id=1916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xb7, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 169.885022ms ago: executing program 2 (id=1917): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r0, 0x0, r2, 0x0, 0x1800, 0x8) 102.141159ms ago: executing program 8 (id=1918): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000017c0)="1f", 0x1}], 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x100000558282d6) 0s ago: executing program 0 (id=1919): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a40)=ANY=[@ANYBLOB="040e07011020"], 0x7) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) kernel console output (not intermixed with test programs): ice team_slave_0 removed [ 235.179443][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.254896][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.685519][ T4317] gspca_sonixj: i2c_w8 err -71 [ 235.743713][ T46] bond0 (unregistering): Released all slaves [ 235.745712][ T4317] sonixj: probe of 6-1:0.0 failed with error -71 [ 235.772925][ T4317] usb 6-1: USB disconnect, device number 6 [ 235.812069][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 235.900014][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.907777][ T7782] netlink: 'syz.0.1002': attribute type 6 has an invalid length. [ 235.920431][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 235.930442][ T7782] bond0: option use_carrier: invalid value (172) [ 236.032558][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.060401][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.083204][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.205900][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 236.238585][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 236.267787][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.274988][ T7034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.342391][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 236.425484][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 236.459906][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 236.501697][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.508895][ T7034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.564370][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 236.593828][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 236.639561][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 236.680653][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 236.764901][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 236.803898][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 236.837717][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 236.874256][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 236.884707][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 236.902806][ T7639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.943099][ T7639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.966392][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 236.983509][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.995886][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 237.885201][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 237.961587][ T7851] loop5: detected capacity change from 0 to 4096 [ 237.983579][ T7853] device hsr_slave_0 left promiscuous mode [ 238.030548][ T7853] device hsr_slave_1 left promiscuous mode [ 238.138264][ T7851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 238.170237][ T7851] EXT4-fs (loop5): shut down requested (1) [ 238.186767][ T7851] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 238.336950][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.344582][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.406833][ T5343] EXT4-fs (loop5): unmounting filesystem. [ 238.422550][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.848424][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.879269][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.978459][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.006364][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.061214][ T7639] device veth0_vlan entered promiscuous mode [ 240.083063][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.116368][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 240.143257][ T7639] device veth1_vlan entered promiscuous mode [ 240.211364][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 240.254042][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 240.271289][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 240.286391][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 240.305952][ T6482] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 240.317443][ T7639] device veth0_macvtap entered promiscuous mode [ 240.329644][ T7639] device veth1_macvtap entered promiscuous mode [ 240.400373][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.435376][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.465594][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.486125][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.508832][ T6482] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.521205][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.555437][ T6482] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 240.573465][ T6482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.588912][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.606302][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.622016][ T6482] usb 6-1: config 0 descriptor?? [ 240.626863][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 240.647862][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 240.703167][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.724623][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.765139][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.802488][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.844614][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.883690][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.902913][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.934253][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 240.948340][ T6482] usbhid 6-1:0.0: can't add hid device: -71 [ 240.954901][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 240.966344][ T6482] usbhid: probe of 6-1:0.0 failed with error -71 [ 240.993679][ T6482] usb 6-1: USB disconnect, device number 7 [ 241.022816][ T7639] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.043278][ T7639] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.054998][ T7639] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.064143][ T7639] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.241994][ T7007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.268520][ T7903] loop3: detected capacity change from 0 to 32768 [ 241.278404][ T7007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.289397][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 241.338573][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.346572][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.363449][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 241.382790][ T7903] XFS (loop3): Mounting V5 Filesystem [ 241.467936][ T7903] XFS (loop3): Ending clean mount [ 241.497191][ T7903] XFS (loop3): Quotacheck needed: Please wait. [ 241.555605][ T6482] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 241.579045][ T7903] XFS (loop3): Quotacheck: Done. [ 241.739794][ T4268] XFS (loop3): Unmounting Filesystem [ 241.755697][ T6482] usb 6-1: Using ep0 maxpacket: 32 [ 241.763669][ T6482] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.795370][ T6482] usb 6-1: config 0 interface 0 has no altsetting 0 [ 241.802163][ T6482] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 241.817628][ T6482] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.844447][ T6482] usb 6-1: config 0 descriptor?? [ 241.884352][ T6482] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 241.938343][ T6482] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 242.330598][ T7906] ldusb 6-1:0.0: Read buffer overflow, 270 bytes dropped [ 242.386066][ T4315] usb 6-1: USB disconnect, device number 8 [ 242.420705][ T4315] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 242.842946][ T7973] netlink: 'syz.7.1051': attribute type 11 has an invalid length. [ 242.860344][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1051'. [ 242.890159][ T7973] netlink: 'syz.7.1051': attribute type 11 has an invalid length. [ 242.937481][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1051'. [ 243.002323][ T7973] netlink: 'syz.7.1051': attribute type 11 has an invalid length. [ 243.068119][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1051'. [ 243.807842][ T8003] loop3: detected capacity change from 0 to 512 [ 243.852200][ T8003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.914146][ T8003] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.981231][ T8003] EXT4-fs (loop3): 1 truncate cleaned up [ 244.007374][ T8003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 244.485090][ T8003] overlayfs: invalid origin (0000) [ 244.647710][ T4268] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /197/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.740779][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 244.773226][ T4268] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 244.848761][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 244.866428][ T4268] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /197/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 244.967999][ T8039] overlayfs: failed to clone upperpath [ 244.972484][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.001092][ T4268] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 245.077628][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.110902][ T4268] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /197/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 245.206661][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.214631][ T4268] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 245.329272][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.359971][ T4268] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /197/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 245.392667][ T8054] loop5: detected capacity change from 0 to 256 [ 245.463563][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.496128][ T4268] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 245.570820][ T8054] FAT-fs (loop5): Directory bread(block 64) failed [ 245.579220][ T8054] FAT-fs (loop5): Directory bread(block 65) failed [ 245.586396][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.593788][ T4268] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /197/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 245.595960][ T8054] FAT-fs (loop5): Directory bread(block 66) failed [ 245.681588][ T4268] EXT4-fs (loop3): Remounting filesystem read-only [ 245.705012][ T8056] loop7: detected capacity change from 0 to 8192 [ 245.711859][ T8054] FAT-fs (loop5): Directory bread(block 67) failed [ 245.718752][ T8054] FAT-fs (loop5): Directory bread(block 68) failed [ 245.719703][ T4268] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 245.739702][ T8054] FAT-fs (loop5): Directory bread(block 69) failed [ 245.808427][ T26] audit: type=1800 audit(1772739801.432:21): pid=8056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1078" name="file2" dev="loop7" ino=1048679 res=0 errno=0 [ 245.826052][ T8054] FAT-fs (loop5): Directory bread(block 70) failed [ 245.848476][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 245.881810][ T8054] FAT-fs (loop5): Directory bread(block 71) failed [ 245.915651][ T8056] FAT-fs (loop7): Filesystem has been set read-only [ 245.923188][ T8054] FAT-fs (loop5): Directory bread(block 72) failed [ 245.945569][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 245.953811][ T8054] FAT-fs (loop5): Directory bread(block 73) failed [ 245.988604][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.011334][ T8056] syz.7.1078: attempt to access beyond end of device [ 246.011334][ T8056] loop7: rw=0, sector=33114, nr_sectors = 1 limit=8192 [ 246.027156][ T8056] buffer_io_error: 39 callbacks suppressed [ 246.027178][ T8056] Buffer I/O error on dev loop7, logical block 33114, async page read [ 246.094339][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.136422][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.189723][ T8054] syz.5.1079: attempt to access beyond end of device [ 246.189723][ T8054] loop5: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 246.205911][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.233680][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.249607][ T8054] Buffer I/O error on dev loop5, logical block 306, lost async page write [ 246.339044][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.378659][ T8056] FAT-fs (loop7): error, invalid access to FAT (entry 0x00008114) [ 246.418883][ T8056] syz.7.1078: attempt to access beyond end of device [ 246.418883][ T8056] loop7: rw=0, sector=33114, nr_sectors = 1 limit=8192 [ 246.535687][ T8056] Buffer I/O error on dev loop7, logical block 33114, async page read [ 247.349387][ T7037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.405515][ T7037] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.616391][ T7037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.648238][ T8097] loop5: detected capacity change from 0 to 8 [ 247.660799][ T7037] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.824931][ T8097] SQUASHFS error: Failed to read block 0x63a: -5 [ 247.849963][ T7037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.863264][ T8097] SQUASHFS error: Unable to read metadata cache entry [638] [ 247.915979][ T8097] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 247.925694][ T7037] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.789493][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.801925][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.810612][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.820040][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.837610][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.845052][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.382305][ T4315] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 249.394662][ T8136] loop8: detected capacity change from 0 to 2048 [ 249.576312][ T4315] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.596178][ T4315] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.625847][ T4315] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.646163][ T4315] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.658117][ T8128] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 249.892384][ T4684] usb 8-1: USB disconnect, device number 5 [ 250.113132][ T8155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1107'. [ 250.271042][ T8121] chnl_net:caif_netlink_parms(): no params data found [ 250.355482][ T4317] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 250.470379][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.478756][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.487686][ T8121] device bridge_slave_0 entered promiscuous mode [ 250.545936][ T4317] usb 9-1: Using ep0 maxpacket: 8 [ 250.574091][ T4317] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 250.592323][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.602481][ T4317] usb 9-1: Product: syz [ 250.615383][ T4317] usb 9-1: Manufacturer: syz [ 250.631426][ T4317] usb 9-1: SerialNumber: syz [ 250.668646][ T4317] usb 9-1: config 0 descriptor?? [ 250.754323][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.763274][ T8121] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.810384][ T8121] device bridge_slave_1 entered promiscuous mode [ 250.902282][ T4317] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 250.925576][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 250.986166][ T6481] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 251.169502][ T8121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.197792][ T6481] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 251.216146][ T6481] usb 6-1: config 0 has no interface number 0 [ 251.228330][ T8121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.241235][ T6481] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 251.275237][ T6481] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 251.300144][ T6481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.315583][ T6481] usb 6-1: Product: syz [ 251.321894][ T6481] usb 6-1: Manufacturer: syz [ 251.334434][ T6481] usb 6-1: SerialNumber: syz [ 251.356373][ T6481] usb 6-1: config 0 descriptor?? [ 251.406400][ T6481] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 251.451454][ T7037] device hsr_slave_0 left promiscuous mode [ 251.469382][ T7037] device hsr_slave_1 left promiscuous mode [ 251.556468][ T7037] device veth1_macvtap left promiscuous mode [ 251.562628][ T7037] device veth0_macvtap left promiscuous mode [ 251.588041][ T7037] device veth1_vlan left promiscuous mode [ 251.594115][ T7037] device veth0_vlan left promiscuous mode [ 251.673418][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 251.723248][ T6481] usb 6-1: USB disconnect, device number 9 [ 251.751526][ T6481] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 251.895798][ T22] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 252.124635][ T22] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 3 [ 252.141562][ T4317] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 252.160932][ T22] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.171036][ T4317] usb 9-1: USB disconnect, device number 2 [ 252.222277][ T22] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 252.245402][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 252.265502][ T22] usb 8-1: Product: syz [ 252.269926][ T22] usb 8-1: Manufacturer: syz [ 252.284432][ T22] usb 8-1: SerialNumber: syz [ 252.313891][ T8195] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 252.558222][ T22] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 252.836462][ C0] usblp0: nonzero write bulk status received: -71 [ 252.870325][ T8205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.908684][ T8205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.955606][ T4317] usb 8-1: USB disconnect, device number 6 [ 253.015827][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 253.032532][ T4317] usblp0: removed [ 254.387019][ T7037] bond0 (unregistering): Released all slaves [ 254.519341][ T8121] team0: Port device team_slave_0 added [ 254.630150][ T8121] team0: Port device team_slave_1 added [ 254.753309][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.798249][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.885551][ T8121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.927824][ T8121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.934832][ T8121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.005711][ T8121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.085687][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 255.125898][ T8240] loop5: detected capacity change from 0 to 8192 [ 255.176936][ T8121] device hsr_slave_0 entered promiscuous mode [ 255.203551][ T8121] device hsr_slave_1 entered promiscuous mode [ 255.230632][ T26] audit: type=1800 audit(1772739810.852:22): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1133" name="file2" dev="loop5" ino=1048682 res=0 errno=0 [ 255.279098][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.345755][ T8240] FAT-fs (loop5): Filesystem has been set read-only [ 255.369083][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.431329][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.484064][ T8240] syz.5.1133: attempt to access beyond end of device [ 255.484064][ T8240] loop5: rw=0, sector=33114, nr_sectors = 1 limit=8192 [ 255.521803][ T8247] loop7: detected capacity change from 0 to 2048 [ 255.535485][ T8240] Buffer I/O error on dev loop5, logical block 33114, async page read [ 255.578579][ T8247] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 255.615575][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.662105][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.704226][ T8240] FAT-fs (loop5): error, invalid access to FAT (entry 0x00008114) [ 255.738081][ T8247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.809482][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817980][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.919176][ T8121] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 255.969890][ T8121] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 256.017159][ T8121] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 256.064496][ T8121] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 256.323070][ T8264] loop7: detected capacity change from 0 to 512 [ 256.390837][ T8264] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 256.475100][ T8264] EXT4-fs (loop7): 1 truncate cleaned up [ 256.512858][ T8121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.545591][ T8264] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 256.615781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 256.649867][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 256.699281][ T8121] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.784423][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 256.827315][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 256.872752][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.880124][ T4934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.956848][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 256.982011][ T8278] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 257.033357][ T8264] overlayfs: invalid origin (0000) [ 257.056653][ T8278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.165507][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 257.233958][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.256756][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.286257][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.293617][ T4934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.321587][ T6053] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /114/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.359916][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.392202][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.409104][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.419386][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 257.427521][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.450850][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.466060][ T6053] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /114/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.542418][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.562466][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.581241][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.606992][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 257.621238][ T8294] loop5: detected capacity change from 0 to 512 [ 257.628641][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.645046][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 257.687287][ T6053] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /114/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.698632][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.735787][ T8294] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.780147][ T8294] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1153: bad orphan inode 11 [ 257.795832][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.810181][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 257.833451][ T8294] ext4_test_bit(bit=10, block=4) = 1 [ 257.839374][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 257.846324][ T8294] is_bad_inode(inode)=0 [ 257.851490][ T8294] NEXT_ORPHAN(inode)=2080374784 [ 257.851683][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 257.858646][ T8294] max_ino=32 [ 257.866850][ T8294] i_nlink=0 [ 257.870271][ T8294] EXT4-fs (loop5): 1 truncate cleaned up [ 257.876300][ T8294] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 257.885444][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 257.895136][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.903581][ T6053] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /114/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.948896][ T26] audit: type=1800 audit(1772739813.572:23): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1153" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 257.962359][ T8294] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1153: bg 0: block 393: padding at end of block bitmap is not set [ 258.005849][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 258.012959][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 258.039801][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.063791][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.086608][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 258.140081][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 258.182293][ T6053] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /114/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 258.244839][ T8298] loop8: detected capacity change from 0 to 8192 [ 258.264841][ T5343] EXT4-fs (loop5): unmounting filesystem. [ 258.274668][ T6053] EXT4-fs (loop7): Remounting filesystem read-only [ 258.308645][ T26] audit: type=1800 audit(1772739813.932:24): pid=8298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1151" name="file2" dev="loop8" ino=1048684 res=0 errno=0 [ 258.343438][ T6053] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 258.378576][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.405461][ T8298] FAT-fs (loop8): Filesystem has been set read-only [ 258.412256][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.449270][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.459001][ T8298] syz.8.1151: attempt to access beyond end of device [ 258.459001][ T8298] loop8: rw=0, sector=33114, nr_sectors = 1 limit=8192 [ 258.473785][ T8298] Buffer I/O error on dev loop8, logical block 33114, async page read [ 258.497001][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.506920][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.522474][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.531464][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.550827][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.575055][ T8298] FAT-fs (loop8): error, invalid access to FAT (entry 0x00008114) [ 258.585588][ T8298] syz.8.1151: attempt to access beyond end of device [ 258.585588][ T8298] loop8: rw=0, sector=33114, nr_sectors = 1 limit=8192 [ 258.672983][ T8298] Buffer I/O error on dev loop8, logical block 33114, async page read [ 259.505871][ T7007] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.610844][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 259.657228][ T7034] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 259.701695][ T8121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.821463][ T7007] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.017877][ T7007] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.284233][ T7007] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.847765][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.866376][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.876485][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.888460][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.909885][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.918171][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.957654][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1167'. [ 261.391163][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.428740][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.559037][ T8121] device veth0_vlan entered promiscuous mode [ 261.572324][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.581630][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.599354][ T8121] device veth1_vlan entered promiscuous mode [ 261.620009][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.632033][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.646799][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.804488][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 261.826298][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.846065][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 261.874074][ T8358] loop8: detected capacity change from 0 to 32768 [ 261.900763][ T8358] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 scanned by syz.8.1168 (8358) [ 261.911123][ T8121] device veth0_macvtap entered promiscuous mode [ 261.927099][ T8358] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 261.937517][ T8358] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 261.948235][ T8358] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 261.958324][ T8358] BTRFS info (device loop8): use zstd compression, level 3 [ 261.966641][ T8358] BTRFS info (device loop8): using free space tree [ 262.062364][ T8121] device veth1_macvtap entered promiscuous mode [ 262.089398][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.119011][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.129281][ T8358] BTRFS info (device loop8): enabling ssd optimizations [ 262.314773][ T26] audit: type=1800 audit(1772739817.932:25): pid=8358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1168" name="bus" dev="loop8" ino=263 res=0 errno=0 [ 262.339663][ T8350] chnl_net:caif_netlink_parms(): no params data found [ 262.361256][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.405393][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.463516][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.521920][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.575158][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.611707][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.663139][ T8121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.691919][ T7639] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 262.755775][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.798831][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.012913][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 263.420412][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.439062][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.472539][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.513561][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.545403][ T8121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.556541][ T8121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.579009][ T8121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.633202][ T8425] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~  [ 263.662514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.676545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.723054][ T8121] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.732985][ T8121] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.744158][ T8121] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.753353][ T8121] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.240244][ T7007] device hsr_slave_0 left promiscuous mode [ 264.279903][ T7007] device hsr_slave_1 left promiscuous mode [ 264.330599][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.355451][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.381971][ T7007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.399973][ T7007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.515674][ T7007] device veth1_macvtap left promiscuous mode [ 264.521978][ T7007] device veth0_macvtap left promiscuous mode [ 264.558941][ T7007] device veth1_vlan left promiscuous mode [ 264.581939][ T7007] device veth0_vlan left promiscuous mode [ 265.095350][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 265.261674][ T7007] bond1 (unregistering): Released all slaves [ 266.246296][ T7007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.306963][ T7007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.717495][ T7007] bond0 (unregistering): Released all slaves [ 266.770222][ T8350] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.777656][ T8350] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.786119][ T8350] device bridge_slave_0 entered promiscuous mode [ 266.794914][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.802610][ T8350] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.811009][ T8350] device bridge_slave_1 entered promiscuous mode [ 266.997399][ T8350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.055781][ T8350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.173072][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 267.220989][ T8350] team0: Port device team_slave_0 added [ 267.228753][ T7027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.255657][ T7027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.318262][ T8350] team0: Port device team_slave_1 added [ 267.443260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 267.495486][ T7027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.525611][ T7027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.541268][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.559314][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.616664][ T8350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.629817][ T7027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 267.643730][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 267.685868][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 267.724218][ T8350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.742196][ T8350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.812902][ T8350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.863232][ T8487] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 267.889261][ T8487] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 268.059265][ T8493] loop9: detected capacity change from 0 to 128 [ 268.149319][ T8493] FAT-fs (loop9): bogus number of FAT structure [ 268.163412][ T8493] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 268.175088][ T8498] overlayfs: failed to clone upperpath [ 268.199062][ T8350] device hsr_slave_0 entered promiscuous mode [ 268.233639][ T8493] FAT-fs (loop9): Can't find a valid FAT filesystem [ 268.246332][ T8350] device hsr_slave_1 entered promiscuous mode [ 268.270528][ T8350] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.289821][ T8350] Cannot create hsr debugfs directory [ 268.344976][ T8500] loop8: detected capacity change from 0 to 128 [ 268.560987][ T8503] loop5: detected capacity change from 0 to 1024 [ 268.632728][ T8503] EXT4-fs: Ignoring removed orlov option [ 268.786344][ T8503] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 269.254346][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 269.301200][ T5343] EXT4-fs (loop5): unmounting filesystem. [ 269.521900][ T8529] netlink: 'syz.8.1205': attribute type 1 has an invalid length. [ 269.531199][ T8529] netlink: 'syz.8.1205': attribute type 4 has an invalid length. [ 269.543775][ T8529] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1205'. [ 270.462045][ T8562] loop9: detected capacity change from 0 to 1764 [ 270.755846][ T8567] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1217'. [ 270.918334][ T8570] netlink: 'syz.0.1217': attribute type 4 has an invalid length. [ 270.995012][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1218'. [ 271.171946][ T8350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 271.232465][ T8350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 271.268872][ T8350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 271.310227][ T8350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 271.625529][ T8350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.675210][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.705136][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.757284][ T8350] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.798961][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 271.846291][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.855141][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.862357][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.983448][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.023152][ T8595] loop5: detected capacity change from 0 to 7 [ 272.053223][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.120743][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.137555][ T8595] Dev loop5: unable to read RDB block 7 [ 272.151705][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.159024][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.182049][ T8595] loop5: unable to read partition table [ 272.212500][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.218639][ T8595] loop5: partition table beyond EOD, truncated [ 272.272083][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.284297][ T8595] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 272.312878][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 272.373509][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 272.405375][ T4317] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 272.464895][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 272.493935][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 272.556157][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 272.576584][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 272.607194][ T4317] usb 9-1: config 0 has no interfaces? [ 272.613474][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.623736][ T4317] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 272.656325][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 272.664485][ T4317] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.695810][ T4317] usb 9-1: Product: syz [ 272.700141][ T4317] usb 9-1: Manufacturer: syz [ 272.706250][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.735375][ T4317] usb 9-1: SerialNumber: syz [ 272.751418][ T4317] usb 9-1: config 0 descriptor?? [ 273.033760][ T4317] usb 9-1: USB disconnect, device number 3 [ 273.693595][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 273.701900][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 273.733675][ T8350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.855470][ T4365] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 274.055492][ T4365] usb 10-1: Using ep0 maxpacket: 32 [ 274.065080][ T4365] usb 10-1: config index 0 descriptor too short (expected 3659, got 75) [ 274.088761][ T8651] loop8: detected capacity change from 0 to 1024 [ 274.104613][ T4365] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.133606][ T8651] EXT4-fs: Ignoring removed nobh option [ 274.162721][ T4365] usb 10-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 274.177613][ T8651] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.213519][ T4365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.243927][ T4365] usb 10-1: Product: syz [ 274.275474][ T4365] usb 10-1: Manufacturer: syz [ 274.277692][ T8651] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 274.280225][ T4365] usb 10-1: SerialNumber: syz [ 274.347993][ T4365] usb 10-1: config 0 descriptor?? [ 274.358751][ T8651] netlink: 'syz.8.1241': attribute type 3 has an invalid length. [ 274.379138][ T4365] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 274.581600][ T7639] EXT4-fs (loop8): unmounting filesystem. [ 275.054546][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 275.084201][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 275.111386][ T8673] ceph: No mds server is up or the cluster is laggy [ 275.364774][ T8655] loop5: detected capacity change from 0 to 40427 [ 275.391930][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.403099][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.419971][ T129] libceph: connect (1)[c::]:6789 error -101 [ 275.426909][ T8655] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 275.435729][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 275.488751][ T8655] F2FS-fs (loop5): invalid crc value [ 275.524436][ T8655] F2FS-fs (loop5): Found nat_bits in checkpoint [ 275.536873][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.546054][ T4319] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 275.566181][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.577467][ T8350] device veth0_vlan entered promiscuous mode [ 275.594016][ T8350] device veth1_vlan entered promiscuous mode [ 275.639667][ T4319] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.666693][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.688613][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.726339][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 275.777394][ T4365] gspca_sunplus: reg_w_1 err -71 [ 275.788288][ T4365] sunplus: probe of 10-1:0.0 failed with error -71 [ 275.816085][ T8655] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 275.838659][ T4365] usb 10-1: USB disconnect, device number 2 [ 275.884914][ T8350] device veth0_macvtap entered promiscuous mode [ 275.922836][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 275.954578][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.997959][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 276.030274][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 276.086752][ T8350] device veth1_macvtap entered promiscuous mode [ 276.126890][ T8655] F2FS-fs (loop5) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910 [ 276.140644][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.184281][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.226275][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.265561][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.295449][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.335427][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.368001][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.424594][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.463653][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.503726][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.530860][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.548271][ T8350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.585398][ T8350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.607616][ T8350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.615258][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 276.626038][ T5343] syz-executor: attempt to access beyond end of device [ 276.626038][ T5343] loop5: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 276.646268][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 276.746611][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.756805][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.825935][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.873344][ T8350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.895401][ T8350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.924665][ T8350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.954193][ T8350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.261441][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.280477][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.326369][ T7027] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 277.399707][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.420101][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.454046][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 277.583309][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1255'. [ 277.640873][ T8716] netlink: 'syz.9.1255': attribute type 18 has an invalid length. [ 277.663192][ T8719] loop4: detected capacity change from 0 to 128 [ 277.690121][ T8716] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.699081][ T8716] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.708945][ T8716] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.718059][ T8716] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.749814][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1255'. [ 277.759131][ T8716] netlink: 'syz.9.1255': attribute type 18 has an invalid length. [ 278.436201][ T8735] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1259'. [ 278.483359][ T8735] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1259'. [ 279.010283][ T129] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 279.216336][ T129] usb 6-1: config 0 has no interfaces? [ 279.224196][ T129] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 279.285728][ T129] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.324866][ T129] usb 6-1: Product: syz [ 279.333419][ T129] usb 6-1: Manufacturer: syz [ 279.345482][ T129] usb 6-1: SerialNumber: syz [ 279.373442][ T129] usb 6-1: config 0 descriptor?? [ 279.701708][ T8757] loop9: detected capacity change from 0 to 1024 [ 279.765700][ T8757] EXT4-fs: Ignoring removed bh option [ 279.793214][ T8757] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 279.820692][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1267'. [ 279.891064][ T8757] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 280.497817][ T4365] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 280.550290][ T8121] EXT4-fs (loop9): unmounting filesystem. [ 280.686742][ T4365] usb 5-1: not running at top speed; connect to a high speed hub [ 280.701175][ T7037] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.710020][ T4365] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 280.725130][ T7037] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.754400][ T4365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.790398][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.801293][ T4365] usb 5-1: Product: syz [ 280.809459][ T4365] usb 5-1: Manufacturer: syz [ 280.814221][ T4365] usb 5-1: SerialNumber: syz [ 280.947965][ T7037] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 280.998759][ T7037] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.051367][ T4365] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 281.098608][ T4365] usb 5-1: USB disconnect, device number 4 [ 281.247997][ T7037] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.282871][ T7037] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.414638][ T7037] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.435441][ T7037] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.793632][ T4683] usb 6-1: USB disconnect, device number 10 [ 282.005998][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 282.013090][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 282.153483][ T8790] ceph: No mds server is up or the cluster is laggy [ 282.328195][ T4365] libceph: connect (1)[c::]:6789 error -101 [ 282.334267][ T4365] libceph: mon0 (1)[c::]:6789 connect error [ 282.342089][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.353489][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.362763][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.372532][ T4276] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.382252][ T4276] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 282.389991][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 282.942756][ T8819] loop4: detected capacity change from 0 to 128 [ 283.099621][ T8819] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 283.185649][ T8819] hpfs: filesystem error: improperly stopped [ 283.191817][ T8819] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 283.250752][ T8819] hpfs: You really don't want any checks? You are crazy... [ 283.273543][ T8819] hpfs: Code page index out of array [ 283.290594][ T8819] hpfs: code page support is disabled [ 283.365434][ T8819] hpfs: hpfs_map_4sectors(): unaligned read [ 283.376843][ T8819] hpfs: hpfs_map_4sectors(): unaligned read [ 283.405598][ T8819] hpfs: filesystem error: unable to find root dir [ 283.931631][ T8846] loop4: detected capacity change from 0 to 128 [ 283.953556][ T8803] chnl_net:caif_netlink_parms(): no params data found [ 284.084002][ T8846] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.101767][ T8846] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 284.445587][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 285.054277][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.102269][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.121095][ T8803] device bridge_slave_0 entered promiscuous mode [ 285.136795][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.155118][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.176678][ T8803] device bridge_slave_1 entered promiscuous mode [ 285.269589][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.323890][ T7037] device hsr_slave_0 left promiscuous mode [ 285.345398][ T7037] device hsr_slave_1 left promiscuous mode [ 285.362418][ T7037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.377718][ T7037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.418665][ T7037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.457063][ T7037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.470243][ T7037] device bridge_slave_1 left promiscuous mode [ 285.484097][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.540453][ T7037] device bridge_slave_0 left promiscuous mode [ 285.576113][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.763352][ T8350] EXT4-fs (loop4): unmounting filesystem. [ 285.799168][ T7037] device veth1_macvtap left promiscuous mode [ 285.821556][ T7037] device veth0_macvtap left promiscuous mode [ 285.879432][ T7037] device veth1_vlan left promiscuous mode [ 285.886024][ T7037] device veth0_vlan left promiscuous mode [ 286.528019][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 288.605619][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 288.636908][ T7037] team0 (unregistering): Port device team_slave_1 removed [ 288.842378][ T7037] team0 (unregistering): Port device team_slave_0 removed [ 288.878020][ T26] audit: type=1326 audit(1772739844.492:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.8.1309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x0 [ 289.009582][ T7037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.137560][ T7037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.911396][ T7037] bond0 (unregistering): Released all slaves [ 290.026642][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.055049][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 290.075475][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 290.145059][ T8803] team0: Port device team_slave_0 added [ 290.194084][ T8953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 290.211034][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 290.282757][ T8955] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1320'. [ 290.300862][ T8803] team0: Port device team_slave_1 added [ 290.418115][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.425124][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.492691][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.524156][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.532572][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.562562][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.685443][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 290.724666][ T8803] device hsr_slave_0 entered promiscuous mode [ 290.756042][ T8803] device hsr_slave_1 entered promiscuous mode [ 291.356623][ T8803] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.510465][ T8803] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.611896][ T8803] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.762443][ T8803] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.292924][ T8803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.336655][ T8803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.356928][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 292.377319][ T8803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.426282][ T8803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.464038][ T8996] loop8: detected capacity change from 0 to 1024 [ 292.574576][ T8996] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 292.584314][ T8996] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.755581][ T8999] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 292.788516][ T9000] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1338: bg 0: block 112: padding at end of block bitmap is not set [ 292.869025][ T9004] loop2: detected capacity change from 0 to 7 [ 292.915866][ T4810] Dev loop2: unable to read RDB block 7 [ 292.921949][ T4810] loop2: unable to read partition table [ 292.960368][ T9000] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 872 with error 117 [ 292.976545][ T46] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 292.996017][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.011179][ T4810] loop2: partition table beyond EOD, truncated [ 293.018486][ T9000] EXT4-fs (loop8): This should not happen!! Data will be lost [ 293.018486][ T9000] [ 293.049842][ T7027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.072390][ T9004] Dev loop2: unable to read RDB block 7 [ 293.089853][ T7027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.091996][ T9004] loop2: unable to read partition table [ 293.105086][ T46] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 293.141729][ T46] EXT4-fs (loop8): This should not happen!! Data will be lost [ 293.141729][ T46] [ 293.152009][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.163045][ T46] EXT4-fs error (device loop8): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 293.167552][ T9004] loop2: partition table beyond EOD, [ 293.201689][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.217030][ T9004] truncated [ 293.220400][ T9004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 293.248264][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.301518][ T46] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 293.315953][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.323100][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.334401][ T46] EXT4-fs (loop8): This should not happen!! Data will be lost [ 293.334401][ T46] [ 293.344726][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.356070][ T46] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 293.385804][ T46] EXT4-fs (loop8): This should not happen!! Data will be lost [ 293.385804][ T46] [ 293.409846][ T46] EXT4-fs (loop8): Total free blocks count 0 [ 293.418488][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 293.433667][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.466226][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.473414][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.569765][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.596150][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.662616][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.700545][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.776937][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.793067][ T9013] overlayfs: upper fs does not support file handles, falling back to index=off. [ 293.814598][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.834146][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.862774][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.927259][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.976931][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.007574][ T8803] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.059187][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.425612][ T129] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 294.617210][ T129] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 294.655596][ T129] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.697101][ T129] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 294.725458][ T129] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 294.761186][ T129] usb 5-1: SerialNumber: syz [ 294.985211][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.002348][ T129] usb 5-1: 0:2 : does not exist [ 295.003532][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.024636][ T129] usb 5-1: unit 5 not found! [ 295.057123][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.096636][ T129] usb 5-1: USB disconnect, device number 5 [ 295.203938][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1352'. [ 295.239899][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.260188][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.298792][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.340798][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.362882][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.382770][ T4479] udevd[4479]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 295.406280][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.434400][ T8803] device veth0_vlan entered promiscuous mode [ 295.500031][ T8803] device veth1_vlan entered promiscuous mode [ 295.605831][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.627285][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.647300][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.678754][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.708542][ T8803] device veth0_macvtap entered promiscuous mode [ 295.716328][ T9058] overlayfs: failed to clone upperpath [ 295.724880][ T9058] overlayfs: failed to clone upperpath [ 295.761599][ T8803] device veth1_macvtap entered promiscuous mode [ 295.845748][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.885704][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.914746][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.946758][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.988279][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.047052][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.104662][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.135400][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 296.145856][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 296.174756][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.193869][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.229260][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.285524][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.332848][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.356893][ T9077] overlayfs: failed to clone upperpath [ 296.370931][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.389662][ T8803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.441086][ T8803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.475237][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.489006][ T8803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.499638][ T8803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.508561][ T8803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.531451][ T8803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.547542][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.573231][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.792352][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 296.804202][ T9087] bond0: option arp_interval: invalid value (18446744071951403948) [ 296.839624][ T9087] bond0: option arp_interval: allowed values 0 - 2147483647 [ 296.885609][ T4319] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 296.887053][ T4934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.920662][ T4934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.941544][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.952701][ T7037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.972521][ T7037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.004033][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 297.090163][ T4319] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 297.106462][ T4319] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.114664][ T4319] usb 9-1: Product: syz [ 297.164009][ T4319] usb 9-1: Manufacturer: syz [ 297.176380][ T4319] usb 9-1: SerialNumber: syz [ 297.203469][ T4319] usb 9-1: config 0 descriptor?? [ 297.452716][ T4319] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 297.652493][ T9106] overlayfs: failed to clone upperpath [ 297.693591][ T9108] device syzkaller0 entered promiscuous mode [ 298.129465][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 299.402938][ T4319] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -71 [ 299.414658][ T4319] usb 9-1: USB disconnect, device number 4 [ 300.911116][ T9177] loop5: detected capacity change from 0 to 512 [ 300.964713][ T9177] EXT4-fs: Ignoring removed orlov option [ 301.006666][ T9177] EXT4-fs: old and new quota format mixing [ 303.795435][ T6481] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 303.858423][ T9235] overlayfs: upper fs does not support file handles, falling back to index=off. [ 304.008558][ T6481] usb 6-1: config 0 has no interfaces? [ 304.017000][ T6481] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 304.062989][ T6481] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.090540][ T6481] usb 6-1: Product: syz [ 304.104949][ T6481] usb 6-1: Manufacturer: syz [ 304.120246][ T6481] usb 6-1: SerialNumber: syz [ 304.151940][ T6481] usb 6-1: config 0 descriptor?? [ 304.383111][ T9245] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 305.360984][ T9212] device veth0_vlan left promiscuous mode [ 305.396802][ T9212] device veth0_vlan entered promiscuous mode [ 305.630322][ T4319] usb 6-1: USB disconnect, device number 11 [ 307.133556][ T9298] loop1: detected capacity change from 0 to 128 [ 307.262144][ T26] audit: type=1804 audit(1772739862.882:27): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1428" name="/newroot/15/file0/bus" dev="loop1" ino=1048696 res=1 errno=0 [ 309.972102][ T9331] fuse: Bad value for 'fd' [ 310.788232][ T9328] loop5: detected capacity change from 0 to 32768 [ 310.835825][ T9328] XFS: attr2 mount option is deprecated. [ 310.920024][ T9328] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 310.936335][ T9328] XFS (loop5): Mounting V5 Filesystem [ 311.027335][ T9328] XFS (loop5): Ending clean mount [ 311.048293][ T9328] XFS (loop5): Quotacheck needed: Please wait. [ 311.200707][ T9328] XFS (loop5): Quotacheck: Done. [ 311.436636][ T5343] XFS (loop5): Unmounting Filesystem [ 312.142244][ T9400] loop7: detected capacity change from 0 to 16384 [ 312.451486][ T9403] loop7: detected capacity change from 16384 to 0 [ 312.977378][ T7031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.061242][ T9412] loop5: detected capacity change from 0 to 8192 [ 313.289314][ T7031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.592641][ T7031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.814731][ T7031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.838318][ T9419] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 313.851736][ T9419] FAT-fs (loop5): Filesystem has been set read-only [ 314.606618][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.618501][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.627173][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.635054][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.650652][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 314.675983][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.091293][ T9441] loop4: detected capacity change from 0 to 32768 [ 315.122510][ T9441] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1477 (9441) [ 315.173699][ T9467] fuse: Bad value for 'fd' [ 315.229615][ T9441] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 315.293711][ T9441] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 315.311993][ T9441] BTRFS info (device loop4): setting nodatacow, compression disabled [ 315.321783][ T9441] BTRFS info (device loop4): setting datasum, datacow enabled [ 315.380894][ T9441] BTRFS info (device loop4): force clearing of disk cache [ 315.390237][ T9441] BTRFS info (device loop4): enabling ssd optimizations [ 315.427606][ T9441] BTRFS info (device loop4): using spread ssd allocation scheme [ 315.486644][ T9441] BTRFS info (device loop4): turning on sync discard [ 315.525218][ T9441] BTRFS info (device loop4): turning off barriers [ 315.562008][ T9441] BTRFS info (device loop4): enabling auto defrag [ 315.600507][ T9441] BTRFS info (device loop4): not using ssd optimizations [ 315.621823][ T9441] BTRFS info (device loop4): not using spread ssd allocation scheme [ 315.671403][ T9441] BTRFS info (device loop4): using free space tree [ 316.121769][ T9441] BTRFS info (device loop4): rebuilding free space tree [ 316.296941][ T9453] chnl_net:caif_netlink_parms(): no params data found [ 316.765557][ T4276] Bluetooth: hci0: command 0x0409 tx timeout [ 316.881208][ T8350] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 317.051736][ T9522] xt_hashlimit: size too large, truncated to 1048576 [ 317.260044][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.266473][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.845481][ T4276] Bluetooth: hci0: command 0x041b tx timeout [ 318.925613][ T6481] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 319.115481][ T6481] usb 6-1: Using ep0 maxpacket: 32 [ 319.122762][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.142902][ T6481] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.153976][ T6481] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 319.175662][ T6481] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.196125][ T6481] usb 6-1: config 0 descriptor?? [ 319.212587][ T6481] hub 6-1:0.0: USB hub found [ 319.410856][ T6481] hub 6-1:0.0: 1 port detected [ 319.651742][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.659146][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.724205][ T9453] device bridge_slave_0 entered promiscuous mode [ 319.780980][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.790656][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.807282][ T9453] device bridge_slave_1 entered promiscuous mode [ 319.880683][ T7031] device hsr_slave_0 left promiscuous mode [ 319.903410][ T7031] device hsr_slave_1 left promiscuous mode [ 319.910900][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.919536][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.929730][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.942645][ T7031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.952034][ T7031] device bridge_slave_1 left promiscuous mode [ 319.958798][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.969488][ T7031] device bridge_slave_0 left promiscuous mode [ 319.984128][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.020899][ T6481] hub 6-1:0.0: activate --> -90 [ 320.070594][ T7031] device veth1_macvtap left promiscuous mode [ 320.082783][ T7031] device veth0_macvtap left promiscuous mode [ 320.093246][ T7031] device veth1_vlan left promiscuous mode [ 320.109471][ T7031] device veth0_vlan left promiscuous mode [ 320.629676][ T6481] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 320.650156][ T4317] usb 6-1: USB disconnect, device number 12 [ 320.657928][ T6481] usb 6-1-port1: cannot reset (err = -71) [ 320.671188][ T6481] usb 6-1-port1: Cannot enable. Maybe the USB cable is bad? [ 320.687110][ T6481] usb 6-1-port1: attempt power cycle [ 320.935451][ T4276] Bluetooth: hci0: command 0x040f tx timeout [ 321.298436][ T9558] sctp: [Deprecated]: syz.5.1502 (pid 9558) Use of int in maxseg socket option. [ 321.298436][ T9558] Use struct sctp_assoc_value instead [ 321.604796][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 321.695902][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 321.813262][ T7031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.911263][ T7031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.684390][ T7031] bond0 (unregistering): Released all slaves [ 322.873873][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1501'. [ 322.957478][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.005854][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 323.056183][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.244644][ T9453] team0: Port device team_slave_0 added [ 323.316118][ T9453] team0: Port device team_slave_1 added [ 323.415222][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.456087][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.565669][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.597626][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.604821][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.693422][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.738848][ T9589] netlink: 'syz.4.1513': attribute type 4 has an invalid length. [ 323.813066][ T9590] netlink: 'syz.4.1513': attribute type 4 has an invalid length. [ 323.941948][ T9453] device hsr_slave_0 entered promiscuous mode [ 323.977028][ T9453] device hsr_slave_1 entered promiscuous mode [ 324.358789][ T9606] overlayfs: failed to clone upperpath [ 324.446235][ T9610] loop5: detected capacity change from 0 to 256 [ 324.483333][ T9610] exfat: Deprecated parameter 'utf8' [ 324.535997][ T9610] exfat: Deprecated parameter 'namecase' [ 324.541790][ T9610] exfat: Deprecated parameter 'namecase' [ 324.598959][ T9610] exfat: Deprecated parameter 'utf8' [ 324.654320][ T9610] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 324.912172][ T26] audit: type=1800 audit(1772739880.532:28): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1521" name="file1" dev="loop5" ino=1048700 res=0 errno=0 [ 324.995515][ T9610] loop5: detected capacity change from 256 to 0 [ 325.111264][ C0] blk_print_req_error: 40 callbacks suppressed [ 325.111283][ C0] I/O error, dev loop5, sector 161 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 325.257721][ C0] I/O error, dev loop5, sector 160 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.278062][ C0] I/O error, dev loop5, sector 161 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.288824][ C0] I/O error, dev loop5, sector 162 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.299033][ C0] I/O error, dev loop5, sector 163 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.308953][ C0] I/O error, dev loop5, sector 164 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.318876][ C0] I/O error, dev loop5, sector 165 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.328786][ C0] I/O error, dev loop5, sector 166 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.338557][ C0] I/O error, dev loop5, sector 167 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.348687][ C0] I/O error, dev loop5, sector 160 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 325.391835][ T9602] loop4: detected capacity change from 0 to 32768 [ 325.540717][ T46] loop: Write error at byte offset 9223372036854775803, length 512. [ 325.558039][ T9602] XFS (loop4): Mounting V5 Filesystem [ 325.573120][ C0] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 325.780563][ T9602] XFS (loop4): Ending clean mount [ 326.223616][ T7034] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.253333][ T7034] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.264834][ T8350] XFS (loop4): Unmounting Filesystem [ 326.627702][ T7034] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.666645][ T7034] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.870625][ T7034] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.905771][ T7034] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.094436][ T9667] netlink: 'syz.4.1537': attribute type 4 has an invalid length. [ 327.170787][ T9453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 327.234473][ T9671] netlink: 'syz.4.1537': attribute type 4 has an invalid length. [ 327.262369][ T9453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 327.296043][ T9453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.354969][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.367984][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.377544][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.385504][ T9453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.407621][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.415381][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.422700][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.016692][ T7034] tipc: Left network mode [ 328.133951][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.158032][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 328.179453][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 328.227889][ T9453] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.274274][ T9694] netlink: 'syz.4.1546': attribute type 4 has an invalid length. [ 328.389532][ T9699] xt_hashlimit: size too large, truncated to 1048576 [ 329.082142][ T9672] chnl_net:caif_netlink_parms(): no params data found [ 329.404243][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.427057][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.436316][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.443456][ T7037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.475833][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.485583][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 329.496217][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.518744][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.525946][ T7037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.676086][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.693221][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.723541][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.765989][ T9725] fuse: Bad value for 'fd' [ 329.850678][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.867463][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.890465][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.916571][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.007775][ T9453] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.040017][ T9453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.104537][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.113878][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.151649][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 330.178925][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 330.212124][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.243625][ T7037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 330.330011][ T9719] loop4: detected capacity change from 0 to 40427 [ 330.387038][ T9719] F2FS-fs (loop4): invalid crc value [ 330.408207][ T9719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 330.474730][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1556'. [ 330.605725][ T9672] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.612963][ T9672] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.641205][ T9672] device bridge_slave_0 entered promiscuous mode [ 330.645181][ T9719] F2FS-fs (loop4): Start checkpoint disabled! [ 330.671598][ T9672] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.697193][ T9672] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.738122][ T9672] device bridge_slave_1 entered promiscuous mode [ 330.780821][ T9719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 330.848591][ T9672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.008662][ T9672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.194130][ T4934] kworker/u4:10: attempt to access beyond end of device [ 331.194130][ T4934] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 331.282234][ T9672] team0: Port device team_slave_0 added [ 331.485624][ T9672] team0: Port device team_slave_1 added [ 331.545088][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.565529][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 331.645934][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.725487][ T9672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.773308][ T9672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.805514][ T9672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.885846][ T9672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.231877][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.328255][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.356526][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.794574][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.838261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.899937][ T9672] device hsr_slave_0 entered promiscuous mode [ 332.986094][ T9672] device hsr_slave_1 entered promiscuous mode [ 333.030805][ T9672] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.045333][ T9672] Cannot create hsr debugfs directory [ 333.118921][ T7034] device hsr_slave_0 left promiscuous mode [ 333.141133][ T7034] device hsr_slave_1 left promiscuous mode [ 333.320742][ T7034] device veth1_macvtap left promiscuous mode [ 333.328925][ T7034] device veth0_macvtap left promiscuous mode [ 333.545416][ T5959] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 333.645496][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 333.727234][ T5959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.750298][ T5959] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 333.780324][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.835726][ T5959] usb 5-1: config 0 descriptor?? [ 333.862571][ T5959] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 334.100846][ T9780] loop4: detected capacity change from 0 to 512 [ 334.190053][ T9780] EXT4-fs: Ignoring removed nobh option [ 334.234262][ T9780] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 334.255418][ T9780] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 334.275616][ T9780] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 334.340697][ T9780] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 334.362473][ T9780] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c041e01c, mo2=0180] [ 334.426615][ T9780] EXT4-fs (loop4): orphan cleanup on readonly fs [ 334.603727][ T9780] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1565: bg 0: block 34: padding at end of block bitmap is not set [ 334.654259][ T9780] Quota error (device loop4): write_blk: dquota write failed [ 334.671346][ T9780] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 334.682384][ T9780] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1565: Failed to acquire dquot type 1 [ 334.703795][ T9799] xt_hashlimit: size too large, truncated to 1048576 [ 334.734988][ T9780] EXT4-fs (loop4): 1 truncate cleaned up [ 334.775997][ T9780] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 334.806207][ T9780] EXT4-fs (loop4): unmounting filesystem. [ 335.725703][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 336.287983][ T4365] usb 5-1: USB disconnect, device number 6 [ 336.970509][ T7034] bond0 (unregistering): Released all slaves [ 337.112510][ T9453] device veth0_vlan entered promiscuous mode [ 337.150251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 337.164355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 337.189892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 337.209562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 337.337863][ T9453] device veth1_vlan entered promiscuous mode [ 337.475173][ T9829] loop4: detected capacity change from 0 to 128 [ 337.516385][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.536306][ T7007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.598649][ T9453] device veth0_macvtap entered promiscuous mode [ 337.621784][ T4479] blk_print_req_error: 3 callbacks suppressed [ 337.621804][ T4479] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 337.667364][ T9453] device veth1_macvtap entered promiscuous mode [ 337.685195][ T9829] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 338.084388][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.106393][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.135544][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.155372][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.195350][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.216115][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.269455][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.288666][ T26] audit: type=1326 audit(1772740149.921:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.320896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 338.336533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 338.355148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 338.363787][ T26] audit: type=1326 audit(1772740149.941:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.393817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 338.420872][ T26] audit: type=1326 audit(1772740149.941:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.444970][ T26] audit: type=1326 audit(1772740149.941:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.479852][ T26] audit: type=1326 audit(1772740149.941:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.581052][ T26] audit: type=1326 audit(1772740149.941:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.614370][ T26] audit: type=1326 audit(1772740149.941:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.644307][ T26] audit: type=1326 audit(1772740149.941:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9844 comm="syz.8.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fe59c799 code=0x7ffc0000 [ 338.829153][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.860296][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.902764][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.922714][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.955855][ T9453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.991945][ T9453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.027468][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.040806][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.062790][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.348245][ T9453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.357924][ T9453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.368333][ T9453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.377936][ T9453] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.490266][ T9862] device syzkaller0 entered promiscuous mode [ 341.007636][ T9893] fuse: Bad value for 'fd' [ 343.957990][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.004681][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.075250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.098406][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.109503][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.151351][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.407747][ T9672] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.467850][ T9672] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.508271][ T9672] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.582423][ T9672] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.704983][ T9932] netlink: 'syz.8.1600': attribute type 4 has an invalid length. [ 344.726526][ T9930] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1602'. [ 345.614254][ T9672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.724921][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.740725][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 345.771248][ T9954] loop2: detected capacity change from 0 to 512 [ 345.787383][ T9672] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.817062][ T9954] EXT4-fs: inline encryption not supported [ 345.831198][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 345.851068][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 345.856102][ T9954] EXT4-fs: Ignoring removed i_version option [ 345.889823][ T7031] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.897067][ T7031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.948580][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 346.028002][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 346.054166][ T9954] EXT4-fs (loop2): 1 orphan inode deleted [ 346.081967][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 346.095499][ T9954] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 346.124735][ T7031] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.132028][ T7031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.209903][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 346.228466][ T9954] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 346.273690][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 346.320950][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 346.355155][ T9954] EXT4-fs (loop2): Remounting filesystem read-only [ 346.377784][ T9954] EXT4-fs error (device loop2): __ext4_new_inode:1349: inode #11: comm syz.2.1607: mark_inode_dirty error [ 346.408648][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 346.424911][ T9954] EXT4-fs (loop2): Remounting filesystem read-only [ 346.436704][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 346.460664][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 346.462207][ T9954] EXT4-fs error (device loop2) in __ext4_new_inode:1351: Corrupt filesystem [ 346.531094][ T9954] EXT4-fs (loop2): Remounting filesystem read-only [ 346.540676][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.570110][ T9954] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 346.613223][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.621115][ T9954] EXT4-fs (loop2): Remounting filesystem read-only [ 346.621140][ T9954] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.1607: mark_inode_dirty error [ 346.651713][ T9954] EXT4-fs (loop2): Remounting filesystem read-only [ 346.695163][ T9954] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 346.719448][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.751331][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.781761][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.813336][ T9672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.904902][ T9453] EXT4-fs (loop2): unmounting filesystem. [ 347.478361][ T9975] loop4: detected capacity change from 0 to 4096 [ 347.555769][ T9975] EXT4-fs (loop4): Test dummy encryption mode enabled [ 347.631675][ T9975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 348.142893][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.157069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.192683][ T9672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.368914][ T9975] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 348.541827][ T8350] EXT4-fs (loop4): unmounting filesystem. [ 349.115512][T10022] loop2: detected capacity change from 0 to 2048 [ 349.261063][T10029] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 349.496479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.519464][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.611711][T10038] overlayfs: failed to clone upperpath [ 349.625898][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.655537][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.677120][T10038] overlayfs: failed to clone upperpath [ 349.677711][ T9672] device veth0_vlan entered promiscuous mode [ 349.704618][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.744778][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.771597][ T9672] device veth1_vlan entered promiscuous mode [ 349.906510][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 349.932770][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 349.977562][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.016578][ T7031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.045475][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 350.063166][ T9672] device veth0_macvtap entered promiscuous mode [ 350.118403][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1632'. [ 350.291612][ T9672] device veth1_macvtap entered promiscuous mode [ 350.340198][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.376608][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.407095][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.476550][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.495359][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.518862][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.536162][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.559185][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.582921][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.604762][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 350.626175][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 350.651031][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 350.670090][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 350.691706][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.717362][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.751002][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.786300][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.814247][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.846045][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.857030][ T9672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.874830][ T9672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.894292][ T9672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.911309][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 350.946317][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.999638][ T9672] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.027285][ T9672] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.083233][ T9672] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.112797][ T9672] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.375880][ T7014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.384034][ T7014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.438229][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 351.530926][ T7014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.550362][ T7014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.586872][ T7014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.495698][T10144] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 354.069590][T10101] loop6: detected capacity change from 0 to 65536 [ 354.177970][T10101] XFS (loop6): Mounting V5 Filesystem [ 354.314272][T10101] XFS (loop6): Ending clean mount [ 355.287837][T10199] overlayfs: failed to set xattr on upper [ 355.315358][T10199] overlayfs: ...falling back to index=off,metacopy=off. [ 355.577105][T10205] netlink: 'syz.8.1675': attribute type 1 has an invalid length. [ 355.625573][T10205] netlink: 'syz.8.1675': attribute type 4 has an invalid length. [ 355.662953][T10205] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.1675'. [ 355.671431][ T9672] XFS (loop6): Unmounting Filesystem [ 355.963261][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1680'. [ 356.006786][T10217] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.016145][T10217] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.024897][T10217] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.033746][T10217] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.132335][T10217] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.141624][T10217] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.152030][T10217] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.161466][T10217] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.386760][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1680'. [ 356.424654][T10217] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.433626][T10217] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.442717][T10217] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.451836][T10217] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.475558][T10217] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.484537][T10217] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.493939][T10217] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.502904][T10217] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.762810][T10229] loop4: detected capacity change from 0 to 4096 [ 357.018158][T10236] loop6: detected capacity change from 0 to 65 [ 357.126865][T10236] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 357.196927][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 357.196951][ T26] audit: type=1326 audit(1772740168.831:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10237 comm="syz.0.1686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7fb2ea33db19 code=0x0 [ 359.347534][T10266] loop4: detected capacity change from 0 to 32768 [ 361.085816][ T4683] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 361.130253][T10325] netlink: 'syz.6.1716': attribute type 11 has an invalid length. [ 361.285389][ T4683] usb 5-1: Using ep0 maxpacket: 32 [ 361.301066][ T4683] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 361.341554][ T4683] usb 5-1: config 0 has no interface number 0 [ 361.363110][ T4683] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 361.440492][ T4683] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 361.470117][ T4683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.495411][ T4683] usb 5-1: Product: syz [ 361.499646][ T4683] usb 5-1: Manufacturer: syz [ 361.544982][ T4683] usb 5-1: SerialNumber: syz [ 361.552608][ T4683] usb 5-1: config 0 descriptor?? [ 361.568792][T10318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 361.812072][T10318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 362.823109][T10334] loop6: detected capacity change from 0 to 40427 [ 362.872322][T10334] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x3ffff [ 362.907294][T10334] F2FS-fs (loop6): invalid crc value [ 362.945870][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 362.962873][T10334] F2FS-fs (loop6): Found nat_bits in checkpoint [ 363.075381][ T4683] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 363.102760][ T4683] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 363.168946][ T4683] asix: probe of 5-1:0.188 failed with error -71 [ 363.179297][T10334] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 363.200994][ T4683] usb 5-1: USB disconnect, device number 7 [ 363.439281][ T9672] syz-executor: attempt to access beyond end of device [ 363.439281][ T9672] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 363.852335][T10212] Set syz1 is full, maxelem 65536 reached [ 364.071795][ T4365] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 364.267403][ T4365] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.290647][ T4365] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.326539][ T4365] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 364.332749][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1731'. [ 364.375961][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.384902][ T4365] usb 5-1: Product: syz [ 364.395444][T10392] device macvlan0 entered promiscuous mode [ 364.420439][ T4365] usb 5-1: Manufacturer: syz [ 364.430562][ T4365] usb 5-1: SerialNumber: syz [ 364.464025][ T4365] usb 5-1: config 0 descriptor?? [ 365.116741][ T4683] usb 5-1: USB disconnect, device number 8 [ 366.508321][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 368.078378][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'. [ 368.322757][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'. [ 368.363131][T10520] netlink: 'syz.2.1771': attribute type 11 has an invalid length. [ 368.393250][T10520] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.402513][T10520] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.411553][T10520] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.421149][T10520] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.442965][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1771'. [ 368.454770][T10520] netlink: 'syz.2.1771': attribute type 11 has an invalid length. [ 368.476582][T10525] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1772'. [ 368.530886][T10534] loop6: detected capacity change from 0 to 128 [ 370.174455][T10544] loop6: detected capacity change from 0 to 32768 [ 370.183636][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 370.232493][T10544] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1778 (10544) [ 370.351017][T10544] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 370.416194][T10544] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 370.450860][T10544] BTRFS info (device loop6): force zlib compression, level 3 [ 370.517260][T10544] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 370.562692][T10544] BTRFS info (device loop6): use zstd compression, level 3 [ 370.613306][T10544] BTRFS info (device loop6): enabling ssd optimizations [ 370.653844][T10544] BTRFS info (device loop6): using free space tree [ 371.138887][T10599] overlayfs: failed to clone upperpath [ 371.261679][ T9672] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 371.584206][T10617] overlayfs: failed to clone upperpath [ 372.256163][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 372.268316][T10638] device bridge_slave_1 left promiscuous mode [ 372.274637][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.297487][T10638] device bridge_slave_0 left promiscuous mode [ 372.303889][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.849471][ T4680] libceph: connect (1)[c::]:6789 error -101 [ 372.864738][ T4680] libceph: mon0 (1)[c::]:6789 connect error [ 372.912144][T10650] ceph: No mds server is up or the cluster is laggy [ 373.620118][T10677] loop4: detected capacity change from 0 to 256 [ 373.698069][T10677] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 375.121374][T10736] loop6: detected capacity change from 0 to 1024 [ 375.286910][T10736] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 375.453636][T10736] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3850: comm syz.6.1831: Allocating blocks 497-513 which overlap fs metadata [ 375.582885][T10736] EXT4-fs (loop6): pa ffff888073b7f700: logic 256, phys. 385, len 8 [ 375.592715][T10736] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 376.088202][ T9672] EXT4-fs error (device loop6): mb_free_blocks:1824: group 0, inode 20: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 376.161236][ T9672] EXT4-fs (loop6): unmounting filesystem. [ 376.721334][T10794] loop6: detected capacity change from 0 to 256 [ 376.781622][T10794] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 377.228041][ T4683] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 377.425468][ T4683] usb 5-1: Using ep0 maxpacket: 32 [ 377.433604][ T4683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.495510][ T4683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.532286][ T4683] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.563244][ T4683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.603086][ T4683] usb 5-1: config 0 descriptor?? [ 378.034630][ T4683] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 378.067166][ T4683] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 378.093967][ T4683] ft260 0003:0403:6030.0004: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 378.232106][ T4683] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 378.293427][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1866'. [ 378.364019][T10840] device bridge_slave_1 left promiscuous mode [ 378.412435][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.442968][T10840] device bridge_slave_0 left promiscuous mode [ 378.470952][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.633624][ T4683] ft260 0003:0403:6030.0004: failed to retrieve status: -32 [ 378.698951][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.705431][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.763945][T10852] overlayfs: failed to clone upperpath [ 378.855733][ T4683] usb 5-1: USB disconnect, device number 9 [ 378.935963][T10829] loop6: detected capacity change from 0 to 32768 [ 379.033372][T10854] fido_id[10854]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 379.082923][T10829] XFS (loop6): Mounting V5 Filesystem [ 379.173567][T10829] XFS (loop6): Ending clean mount [ 379.259202][T10829] XFS (loop6): Quotacheck needed: Please wait. [ 379.341894][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 379.433334][T10829] XFS (loop6): Quotacheck: Done. [ 379.529162][T10829] XFS (loop6): User initiated shutdown received. [ 379.636527][T10829] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 379.705422][T10829] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 379.856633][ T9672] XFS (loop6): Unmounting Filesystem [ 380.246697][T10888] netlink: 'syz.0.1877': attribute type 4 has an invalid length. [ 380.328245][T10888] netlink: 'syz.0.1877': attribute type 4 has an invalid length. [ 382.627073][T10953] ALSA: seq fatal error: cannot create timer (-16) [ 382.973098][T10960] overlayfs: failed to clone upperpath [ 384.670697][T11010] overlayfs: failed to clone upperpath [ 384.865444][T10992] loop6: detected capacity change from 0 to 32768 [ 384.929921][T10992] JBD2: Ignoring recovery information on journal [ 385.027317][T10992] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 385.181569][T10992] [ 385.184009][T10992] ====================================================== [ 385.191873][T10992] WARNING: possible circular locking dependency detected [ 385.198945][T10992] syzkaller #0 Not tainted [ 385.203497][T10992] ------------------------------------------------------ [ 385.210724][T10992] syz.6.1911/10992 is trying to acquire lock: [ 385.217745][T10992] ffff88804f63d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}, at: ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 385.232015][T10992] [ 385.232015][T10992] but task is already holding lock: [ 385.239784][T10992] ffff888073a222e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x434/0x1200 [ 385.250912][T10992] [ 385.250912][T10992] which lock already depends on the new lock. [ 385.250912][T10992] [ 385.261357][T10992] [ 385.261357][T10992] the existing dependency chain (in reverse order) is: [ 385.270394][T10992] [ 385.270394][T10992] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 385.279298][T10992] down_write+0x36/0x60 [ 385.284099][T10992] ocfs2_create_local_dquot+0x1a5/0x18e0 [ 385.291106][T10992] ocfs2_acquire_dquot+0x7c6/0xb20 [ 385.296859][T10992] dqget+0x778/0xeb0 [ 385.301296][T10992] __dquot_initialize+0x3c3/0xcd0 [ 385.306873][T10992] ocfs2_get_init_inode+0x144/0x1b0 [ 385.312624][T10992] ocfs2_mknod+0x8c8/0x25b0 [ 385.317781][T10992] ocfs2_mkdir+0x1b6/0x4b0 [ 385.322768][T10992] vfs_mkdir+0x387/0x570 [ 385.327689][T10992] do_mkdirat+0x1d8/0x440 [ 385.332569][T10992] __x64_sys_mkdirat+0x85/0x90 [ 385.338056][T10992] do_syscall_64+0x4c/0xa0 [ 385.343031][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.349663][T10992] [ 385.349663][T10992] -> #2 (&dquot->dq_lock){+.+.}-{3:3}: [ 385.357332][T10992] __mutex_lock+0x12d/0xaf0 [ 385.362661][T10992] dqget+0x6f8/0xeb0 [ 385.367105][T10992] __dquot_initialize+0x3c3/0xcd0 [ 385.372760][T10992] ocfs2_get_init_inode+0x144/0x1b0 [ 385.378606][T10992] ocfs2_mknod+0x8c8/0x25b0 [ 385.383742][T10992] ocfs2_mkdir+0x1b6/0x4b0 [ 385.388798][T10992] vfs_mkdir+0x387/0x570 [ 385.393584][T10992] do_mkdirat+0x1d8/0x440 [ 385.398479][T10992] __x64_sys_mkdirat+0x85/0x90 [ 385.403786][T10992] do_syscall_64+0x4c/0xa0 [ 385.408753][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.415402][T10992] [ 385.415402][T10992] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 385.426301][T10992] down_write+0x36/0x60 [ 385.431029][T10992] ocfs2_evict_inode+0x163f/0x4630 [ 385.436700][T10992] evict+0x4c9/0x8d0 [ 385.441241][T10992] ocfs2_dentry_iput+0x24a/0x390 [ 385.446818][T10992] __dentry_kill+0x431/0x650 [ 385.451964][T10992] dentry_kill+0xb8/0x290 [ 385.456955][T10992] dput+0xfa/0x1d0 [ 385.461247][T10992] ovl_get_workdir+0xb5f/0x1610 [ 385.466835][T10992] ovl_fill_super+0x1824/0x2a30 [ 385.472333][T10992] mount_nodev+0x52/0xe0 [ 385.477222][T10992] legacy_get_tree+0xe6/0x180 [ 385.482536][T10992] vfs_get_tree+0x88/0x270 [ 385.487516][T10992] do_new_mount+0x24a/0xa40 [ 385.492565][T10992] __se_sys_mount+0x2e3/0x3d0 [ 385.497789][T10992] do_syscall_64+0x4c/0xa0 [ 385.502847][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.509376][T10992] [ 385.509376][T10992] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]){+.+.}-{3:3}: [ 385.521339][T10992] __lock_acquire+0x2d07/0x7d10 [ 385.526837][T10992] lock_acquire+0x1bb/0x4a0 [ 385.531892][T10992] down_write+0x36/0x60 [ 385.536729][T10992] ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 385.543094][T10992] ocfs2_dio_end_io+0x540/0x1200 [ 385.548681][T10992] dio_complete+0x251/0x710 [ 385.553742][T10992] __blockdev_direct_IO+0x2f25/0x3570 [ 385.559669][T10992] ocfs2_direct_IO+0x233/0x2a0 [ 385.564972][T10992] generic_file_direct_write+0x10f/0x330 [ 385.571157][T10992] __generic_file_write_iter+0x15f/0x2a0 [ 385.577612][T10992] ocfs2_file_write_iter+0x1660/0x1f00 [ 385.583792][T10992] do_iter_write+0x642/0xb10 [ 385.588930][T10992] iter_file_splice_write+0x699/0xcc0 [ 385.594852][T10992] direct_splice_actor+0xe1/0x130 [ 385.600428][T10992] splice_direct_to_actor+0x48b/0xb90 [ 385.606391][T10992] do_splice_direct+0x1ce/0x2f0 [ 385.611790][T10992] do_sendfile+0x5f3/0xea0 [ 385.616760][T10992] __se_sys_sendfile64+0x141/0x1a0 [ 385.622659][T10992] do_syscall_64+0x4c/0xa0 [ 385.627741][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.634195][T10992] [ 385.634195][T10992] other info that might help us debug this: [ 385.634195][T10992] [ 385.644534][T10992] Chain exists of: [ 385.644534][T10992] &ocfs2_sysfile_lock_key[args->fi_sysfile_type] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key [ 385.644534][T10992] [ 385.661541][T10992] Possible unsafe locking scenario: [ 385.661541][T10992] [ 385.669104][T10992] CPU0 CPU1 [ 385.674572][T10992] ---- ---- [ 385.680041][T10992] lock(&ocfs2_quota_ip_alloc_sem_key); [ 385.685710][T10992] lock(&dquot->dq_lock); [ 385.692776][T10992] lock(&ocfs2_quota_ip_alloc_sem_key); [ 385.701045][T10992] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]); [ 385.708553][T10992] [ 385.708553][T10992] *** DEADLOCK *** [ 385.708553][T10992] [ 385.716902][T10992] 3 locks held by syz.6.1911/10992: [ 385.722380][T10992] #0: ffff88804f1e4460 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x5d0/0xea0 [ 385.731733][T10992] #1: ffff888073a22648 (&sb->s_type->i_mutex_key#23){+.+.}-{3:3}, at: ocfs2_file_write_iter+0x448/0x1f00 [ 385.743278][T10992] #2: ffff888073a222e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_dio_end_io+0x434/0x1200 [ 385.754465][T10992] [ 385.754465][T10992] stack backtrace: [ 385.760503][T10992] CPU: 0 PID: 10992 Comm: syz.6.1911 Not tainted syzkaller #0 [ 385.768148][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.778408][T10992] Call Trace: [ 385.781735][T10992] [ 385.784787][T10992] dump_stack_lvl+0x188/0x24e [ 385.789511][T10992] ? load_image+0x400/0x400 [ 385.794034][T10992] ? show_regs_print_info+0x12/0x12 [ 385.799286][T10992] ? print_circular_bug+0x12b/0x1a0 [ 385.804522][T10992] check_noncircular+0x296/0x330 [ 385.809507][T10992] ? add_chain_block+0x940/0x940 [ 385.814513][T10992] ? lockdep_lock+0xf1/0x1f0 [ 385.819247][T10992] ? _find_first_zero_bit+0xcf/0x100 [ 385.824665][T10992] __lock_acquire+0x2d07/0x7d10 [ 385.829675][T10992] ? verify_lock_unused+0x140/0x140 [ 385.834908][T10992] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 385.840582][T10992] ? do_raw_spin_lock+0x128/0x2f0 [ 385.845627][T10992] ? mutex_unlock+0x10/0x10 [ 385.850157][T10992] ? __rwlock_init+0x140/0x140 [ 385.854956][T10992] ? do_raw_spin_unlock+0x11d/0x230 [ 385.860264][T10992] lock_acquire+0x1bb/0x4a0 [ 385.864793][T10992] ? ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 385.870812][T10992] ? __might_sleep+0xd0/0xd0 [ 385.875421][T10992] ? read_lock_is_recursive+0x10/0x10 [ 385.880826][T10992] ? ocfs2_inode_lock_full_nested+0xcdb/0x1bb0 [ 385.887729][T10992] down_write+0x36/0x60 [ 385.892118][T10992] ? ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 385.898581][T10992] ocfs2_del_inode_from_orphan+0x12b/0x7a0 [ 385.904530][T10992] ? ocfs2_add_inode_to_orphan+0x7b0/0x7b0 [ 385.910723][T10992] ? __lock_acquire+0x13cf/0x7d10 [ 385.915872][T10992] ? rwsem_write_trylock+0x135/0x1c0 [ 385.921194][T10992] ? clear_nonspinnable+0x60/0x60 [ 385.926341][T10992] ocfs2_dio_end_io+0x540/0x1200 [ 385.931329][T10992] ? ____kasan_slab_free+0x126/0x1e0 [ 385.936658][T10992] ? ocfs2_dio_wr_get_block+0x1820/0x1820 [ 385.942400][T10992] ? mark_lock+0x94/0x320 [ 385.946760][T10992] ? lock_chain_count+0x20/0x20 [ 385.951746][T10992] ? mark_lock+0x94/0x320 [ 385.956106][T10992] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 385.962153][T10992] ? lock_chain_count+0x20/0x20 [ 385.967043][T10992] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 385.973047][T10992] ? lockdep_hardirqs_on+0x94/0x140 [ 385.978369][T10992] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 385.984420][T10992] ? ocfs2_dio_wr_get_block+0x1820/0x1820 [ 385.990167][T10992] dio_complete+0x251/0x710 [ 385.994731][T10992] __blockdev_direct_IO+0x2f25/0x3570 [ 386.000337][T10992] ? lockdep_hardirqs_on+0x94/0x140 [ 386.005665][T10992] ? sb_init_dio_done_wq+0x80/0x80 [ 386.011256][T10992] ? ocfs2_lock_get_block+0x50/0x50 [ 386.016486][T10992] ? preempt_schedule+0xbc/0xd0 [ 386.021464][T10992] ? preempt_schedule_common+0xa5/0xd0 [ 386.027144][T10992] ? preempt_schedule_thunk+0x16/0x18 [ 386.032562][T10992] ? filemap_read+0x3020/0x3020 [ 386.037455][T10992] ? __mnt_drop_write_file+0xbc/0xf0 [ 386.042957][T10992] ? ocfs2_lock_get_block+0x50/0x50 [ 386.048187][T10992] ocfs2_direct_IO+0x233/0x2a0 [ 386.053156][T10992] generic_file_direct_write+0x10f/0x330 [ 386.058822][T10992] ? do_raw_spin_unlock+0x11d/0x230 [ 386.064041][T10992] __generic_file_write_iter+0x15f/0x2a0 [ 386.069900][T10992] ocfs2_file_write_iter+0x1660/0x1f00 [ 386.075420][T10992] ? ocfs2_file_read_iter+0xbb0/0xbb0 [ 386.080909][T10992] ? aa_file_perm+0x3ea/0xf00 [ 386.085700][T10992] ? aa_file_perm+0x112/0xf00 [ 386.090514][T10992] ? kasan_set_track+0x60/0x70 [ 386.095506][T10992] ? aa_path_link+0x880/0x880 [ 386.100232][T10992] ? iter_file_splice_write+0x19f/0xcc0 [ 386.105857][T10992] ? direct_splice_actor+0xe1/0x130 [ 386.111098][T10992] ? splice_direct_to_actor+0x48b/0xb90 [ 386.116679][T10992] ? do_splice_direct+0x1ce/0x2f0 [ 386.121841][T10992] ? do_sendfile+0x5f3/0xea0 [ 386.126453][T10992] ? __se_sys_sendfile64+0x141/0x1a0 [ 386.131763][T10992] ? do_syscall_64+0x4c/0xa0 [ 386.136405][T10992] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.142618][T10992] ? end_current_label_crit_section+0x14b/0x170 [ 386.148899][T10992] ? common_file_perm+0x171/0x1c0 [ 386.153994][T10992] do_iter_write+0x642/0xb10 [ 386.158822][T10992] ? vfs_iter_write+0xa0/0xa0 [ 386.163559][T10992] ? vfs_iter_write+0x67/0xa0 [ 386.168381][T10992] iter_file_splice_write+0x699/0xcc0 [ 386.173812][T10992] ? splice_from_pipe+0x180/0x180 [ 386.178962][T10992] ? splice_shrink_spd+0xc0/0xc0 [ 386.184123][T10992] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 386.190851][T10992] ? splice_from_pipe+0x180/0x180 [ 386.195995][T10992] direct_splice_actor+0xe1/0x130 [ 386.201575][T10992] splice_direct_to_actor+0x48b/0xb90 [ 386.207099][T10992] ? direct_file_splice_eof+0xa0/0xa0 [ 386.212781][T10992] ? pipe_to_sendpage+0x320/0x320 [ 386.218288][T10992] ? common_file_perm+0x171/0x1c0 [ 386.223764][T10992] ? fsnotify_perm+0x5a/0x550 [ 386.228511][T10992] ? security_file_permission+0x75/0xa0 [ 386.234201][T10992] do_splice_direct+0x1ce/0x2f0 [ 386.239138][T10992] ? splice_direct_to_actor+0xb90/0xb90 [ 386.244772][T10992] ? rcu_read_lock_any_held+0xb0/0x130 [ 386.250446][T10992] ? do_splice_direct+0x2f0/0x2f0 [ 386.255502][T10992] ? common_file_perm+0x171/0x1c0 [ 386.260558][T10992] do_sendfile+0x5f3/0xea0 [ 386.265016][T10992] ? do_pwritev+0x3a0/0x3a0 [ 386.269541][T10992] ? do_sys_openat2+0x20c/0x4b0 [ 386.274427][T10992] __se_sys_sendfile64+0x141/0x1a0 [ 386.279559][T10992] ? lock_chain_count+0x20/0x20 [ 386.284484][T10992] ? __x64_sys_sendfile64+0xa0/0xa0 [ 386.289705][T10992] ? lockdep_hardirqs_on+0x94/0x140 [ 386.295027][T10992] do_syscall_64+0x4c/0xa0 [ 386.299472][T10992] ? clear_bhb_loop+0x60/0xb0 [ 386.304277][T10992] ? clear_bhb_loop+0x60/0xb0 [ 386.308979][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.314899][T10992] RIP: 0033:0x7fc940f9c799 [ 386.319353][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.339162][T10992] RSP: 002b:00007fc941e34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 386.347642][T10992] RAX: ffffffffffffffda RBX: 00007fc941215fa0 RCX: 00007fc940f9c799 [ 386.355638][T10992] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 386.363636][T10992] RBP: 00007fc941032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 386.371710][T10992] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 386.379696][T10992] R13: 00007fc941216038 R14: 00007fc941215fa0 R15: 00007ffc09a26d98 [ 386.387696][T10992] [ 386.392576][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 386.562033][ T9672] ocfs2: Unmounting device (7,6) on (node local)