last executing test programs: 3m6.299920942s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m1.296744186s ago: executing program 0 (id=107): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs$namespace(0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) pidfd_send_signal(0xffffffffffffffff, 0x15, &(0x7f0000000040)={0x15, 0x8001, 0x9}, 0x0) 3m1.224037732s ago: executing program 0 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2m59.654441227s ago: executing program 0 (id=109): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x4056, &(0x7f0000000280), 0x1, 0x464, &(0x7f0000000740)="$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") r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) pipe(&(0x7f0000000180)={0xffffffffffffffff}) copy_file_range(r2, 0x0, r1, 0x0, 0x98, 0x0) r3 = creat(&(0x7f0000000340)='./bus\x00', 0x1c7) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x41800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x84) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000003, 0x28011, r4, 0x0) write$binfmt_elf64(r3, &(0x7f0000000400)=ANY=[], 0x78) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@errors_remount}, {@discard}]}, 0x1, 0x467, &(0x7f00000004c0)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 2m56.524004656s ago: executing program 0 (id=121): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x41, 0x75e, &(0x7f0000001100)="$eJzs3M9rHGUfAPDvTLNNf+R9Ny+8h/f1IEILLZROkubSnowX8VIoFLzWJZmEsJNsyW5qEwttPQu1uSgIonePXoVS/wBvUlDwLojWeBAvkdls0jbNxm2bZGv8fGCyz/PMPPt9vjuTJzOQZwP4x3qt/JFEDEXEpYiodtrTiDjcLh2JuLV+3OrDG5PllsTa2uWfk7JbrK5VN98r6bwej3aX+F9E3K9EnHn/6bjNpeV6rSjyhU59pDV3daS5tHx2dq42k8/k82PjF0bPj4+fHx3ftVxPvn3h6N1v3lxZ+fbL1p1XB84mMdHOOzq57Vqgx6x/JpWY2NI+vxfB+ijp4ZiBfRgHAAA7K+/zD3XuzSpRjUPu0gAAAODAWRtcAwAAAA68JPo9AgAAAGBvbfwfwMba3r1aB9vNT29ExPB28Qfaa4gjjkQlIo6tJk+sTEjWu8ELuXU7Iu5NbHP9JZ3r7/mNbqn3skaa/XWvnH8mtpt/0s35J7aZfwY2vjvhBXWf/x7FP9Rl/rvUY4yvPv1/pWv82xGvDGwXP9mMn3SJ/06P8e+sfHC32761zyNObfv3J3ki1g7fDzEyPVvs+Kt1/4/TD3bK/9hT8ZOkHTXZOf+rPeb/3uqv9W5zSRn/9Imdz/96/MEn+pXXxIedcaQRcbfzWtZXtsQ4Mffd109HTm5txJ/q8vlvf/7f2sz/sx7z/+GLwes9HgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtaUQMRZJmm+U0zbKI4xHx3ziWFo1m68x0Y3F+qtwXMRyVdHq2yEcjorpeT8r6WLv8qH5uS308Iv7z/dH1oLNFnk02iql+Jw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCm4xExFEmaRUQaEb9V0zTL+j0qAAAAYNcN93sAAAAAwJ7z/A8AAAAH3/M+/ye7PA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQLt08WK5ra0+vDFZ1qeuLS3WG9fOTuXNeja3OJlNNhauZjONxkyRZ5ONub96vzQixi7E4vWRVt5sjTSXlq/MNRbnW1dm52oz+ZW8si9ZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8KyG2luSZhGRtstpmmUR/4qI4agk07NFPhoR/46IB9XKYFkf6/egAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HXNpeV6rSjyBYW/YyGSiJdgGAr1WsSz9LoZL/uJ6/fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAPzSXluu1osgXmv0eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP2V/phERLmdqp4c2rr3cPJ7tf0aEe9+cvmj67VWa2GsbP9ls731caf93GMdb+5nDgAAAHDgvf4sB288p288xwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPSqubRcrxVFvrCHhbjd7ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDn8WcAAAD//+Yew1w=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m55.886651839s ago: executing program 0 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x39}, @ptr={0x77622a85, 0x0, 0x0, 0x0, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2m55.424750574s ago: executing program 32 (id=127): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x39}, @ptr={0x77622a85, 0x0, 0x0, 0x0, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2m38.387988614s ago: executing program 4 (id=176): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002e80)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xd0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0xc}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000000000)="fa280f12308272fc2900526bab5de3837e34d4b70af78520e11cb50fe250fa6a8453bd017ec14853510ff354105e51ce115c1e68460addd6e997082f6c6c385da13ee60904a07e62a1bf7c6030", 0x4d}, {0x0}], 0x2}}], 0x1, 0x4000005) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2m38.22464016s ago: executing program 4 (id=177): pipe(0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x8000000000000fc, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x4850, 0x8, 0x1, 0x7f}, &(0x7f0000000000), &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000640)="$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") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x2, 0x3, 0xff) socket$inet6_icmp(0xa, 0x2, 0x3a) setxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "7b98e86db3dadd9aa66a10d1d80635e303b56127"}, 0x15, 0x2) 2m32.615998643s ago: executing program 4 (id=192): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m32.328395941s ago: executing program 4 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='fuseblk\x00', 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) symlink(&(0x7f0000000180)='.\x00', &(0x7f0000000440)='./file1\x00') lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000380)=@v3={0x3000000, [{0xff, 0x9}, {0xffffffff, 0x3}]}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x8090, &(0x7f0000000400)) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 2m31.141120099s ago: executing program 4 (id=197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(&(0x7f00000000c0)=0x1, 0x6, 0x0, &(0x7f00000001c0), 0x0, 0x2) 2m30.087234583s ago: executing program 4 (id=200): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2m14.374086402s ago: executing program 33 (id=200): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 2m3.580283136s ago: executing program 1 (id=260): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000480)) 2m3.328132531s ago: executing program 1 (id=261): socket$inet6(0xa, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x40814}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m3.099587853s ago: executing program 1 (id=262): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) truncate(&(0x7f0000000340)='./file0/file0\x00', 0x20000) chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 2m0.714278888s ago: executing program 1 (id=265): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$eJzs3E1rE10UwPHTtOlLSpssHh5QEA+60c3Qxk8QpAUxoNRGtAvh1k40ZExKJkYiYrtz6+coLt0J1i9QEHfuxU0RBDddSEc6L3Zaom1j22mb/w/C3My9Z+6dyUw4MzB3/d7rJ9Wya5VNU1LDKimRZdkQyW2VQn3hMuWXByVuWa6O/vh84c79uZuFYnFqRnW6MHstr6rjF98/e/Hm0ofm6N234++GZC33YP17/sva/2vn1jdno63Xm2p0vl5vmnnH1oWKW7VUbzu2cW2t1Fy7saO+7NQXF9tqagtjmcWG7bpqam2t2m1t1rXZaKt5ZCo1tSxLxzLSa/oPHFFamZkxhSMZDJIw0mllo1Ew/R0rSyvHMSgAAHCydJv/z30M1nWb/z+uuFpxtbZX/p+SA+X/ffKH/H/4+A7pKeLn/5sdk0acDemtG4CCyYTX707k/wAAAAAAAAAAAAAAAAAAAAAAnAYbnpf1PC8bLaPPUPjOTPQ96XHiaHTx+/clOFwcstiLe8MizqtWqVUKlkF9oSwVccSWibTIT/98CAXl6RvFqQn15WTVWQrj/ZcEh6L4SK5z/GQQr7H4pVYpLZl4/3nJyn+d4/O74tMi0ioNypXLsXhLsvLpodTFkQX/vN6Ofzmpev1WcVf/I347AAAAAADOAkt/y+28/w1mk7QsjaYN2VUfrFyW6PmAZPd4PqCyOijb8QNyfiC5/QYAAAAAoJe47edV4zh2g8LBCr146KxwFuW/NvY8b2mr0b93mhKRhPb0m4icgAMeK6QP44L9+jTYyH4aJ/WPBAAAAOCobCf9SY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDetd/Jw6L23cw9FuuuP5m9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6GXwEAAP//2MgYNQ==") open_tree(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 2m0.043993644s ago: executing program 1 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0x2) 1m56.218789732s ago: executing program 1 (id=275): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$eJzs3Au0jtXWOPA511oPm8Sb5L7mmg9vclkkSS4JiSRJjiS5JSRJkoTEJrckJCH3JPeQ3EJyv99yT5IjSZKQkGT9h079nXM63+l83znn842z52+MZ+w19/vO+c5nz733+zxrjL2/7jCoSr2qleowM/xT8E8fUgEgBQD6AkAWAIgAoGTWklkBh0IGjan/3IuIf60Hpl7pDsSVJPNP22T+aZvMP22T+adtMv+0Teaftsn80zaZvxBp2dZpua6RI+0e/3v7/yD7///nyPv/f5DDRUd/vr7odR3/Gyky/7RN5p+2yfzTNpl/2ibzT9tk/v/hIoCKf+dhmX/aJvMXIi270vvPclzZ40p//wkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESBvOhcsMAPy6vtJ9CSGEEEIIIYQQ4l8npP/zKN2Va0QIIYQQQgghhBD/RggKNBiIIB2khxTIABnhKsgEV0NmyAIJuAaywrWQDa6D7JADckIuyA15IC9YIHDAEEM+yA9JuB4KwA1QEApBYSgCHopCMbgRisNNUAJuhpJwC5SCW6E0lIGyUA5ug/JwO1SAilAJ7oDKcCdUgapwF1SDu6E63AM14F6oCfdBLbgfasMfoA48AHXhQagHD0F9eBgaQENoBI2hyf8o/3noAi9AV+gGqdAdesCL0BN6QW/oA33hJegHL0N/eAUGwEAYBK/CYHgNhsDrMBSGwXB4A0bASBgFo2EMjIVx8CaMh7dgArwNE2ESTIYpMBWmwXR4B2bATJgF78JseA/mwFyYB/NhAbwPC2ERLIYPYAl8CEthGSyHFbASVsFqWANrYR2shw2wETbBZtgCW+Ej2AbbYQfshF2wG/bAx7AXPoF98Cnsh8/+Oj/L388/+1f5HREQUKFCgwbTYTpMwRTMiBkxE2bCzJgZE5jArJgVs2E2zI7ZMSfmxNyYG/NiXiQkZGTMh/kwiUksgAWwIBbEwlgYPXoshsWwON6EJbAElsSSWApLYWksg2WwHJbD8lgeK2AFrISVsDJWxipYBe/Cu/BurI7VsQbWwJpYE2thLayNtbEO1sG6WBfrYT2sj/WxATbARtgIm2ATbIpNsRk2wxbYAltiS2yFrbA1tsY22AbbYltsh+2wPbbHDtgBO2In7ITP4/P4Ar6A3bCy6o49sAf2xJ7YG/tgH3wJ++HL+DK+ggNwIA7CV/FVfA2H4BkcisNwOA7H8mokjsLRyGosjsNxOB7H4wScgBNxEk7CKTgVp+F0nI4zcCbOxHdxNr6H7+FcnIvzcQEuwIW4CBfjYlyCZ3EpLsPluAJX4ipciWtwLa7B9bgB1+Mm3IRbcAt+hB/hdtyOO3En7sbd+DF+jJ/gJzgA9+N+PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPIfn8Dyexwv4bO4v6+4utG4AqEuMMiqdSqdSVIrKqDKqTCqTyqwyq4RKqKwqq8qmsqnsKrvKqXKq3Cq3yqvyKlKkWMUqn8qnkiqpCqgCqqAqqAqrwsorr4qpYqq4Kq5KqBKqpLpFlVK3qtKqjGruy6lyqrxq4SuoiqqSqqQqqztVFVVVVVXVVDVVXVVXNVQNVVPVVLXU/aq26o698QF1aTL11ECsrwZhA9VQNVKN1Wv4iGqqhmAz1Vy1UI+pYTgUW6mmvrV6UrVRo7CtelqNxmdUezUWO6jnVEfVSXVWz6suqpnv+ut2p5qCPVUv1Vv1UTPwTnVpYlXUK2qAGqgGqVfVfHxNDVGvq6FqmBqu3lAj1Eg1So1WY9RYNU69qcart9QE9baaqCapyWqKmqqmqenqHTVDzVSz1LtqtnpPzVFz1Tw1Xy1Q76uFapFarD5QS9SHaqlapparFWqlWqVWqzVqrVqn1qsNaqPapDarLWqr+khtU9vVDrVT7VK71R71sdqrPlH71Kdqv/pMHVB/VAfV5+qQ+kIdVl+qI+ordVR9rY6pb9Rx9a06oU6qU+o7dVp9r86os+qc+kGdVz+qC+ondVEFBRq10lobHel0Or1O0Rl0Rn2VBn21zqyz6IS+RmfV1+ps+jqdXefQOXUunVvn0Xm11aSdZh3rfDq/TurrdQF9gy6oC+nCuoj2uqgupm/UxfVNuoS+WZfUt+hS+lZdWpfRZXU5fZsur2/XFXRFXUnfoSvrO3UVXVXfpavpu3V1fY+uoe/VNfV9upa+X9fWf9B19AO6rn5Q19MP6fr6Yd1AN9SNdGPdRD+im+pHdTPdXLfQj+mW+nHdSj+hW+sndRv9lG6rn9bt9DO6vX5Wd9DP6Y66k+6sf9IXddBddTedqrvrHvpF3VP30r11H91Xv6T76Zd1f/2KHqAH6kH6VT1Yv6aH6Nf1UD1MD9dv6BF6pB6lR+sxeqwep9/U4/VbeoJ+W0/Uk/RkPUVP1dN0718qzfoH8t/6G/n9f371LXqr/khv09v1Dr1T79K79R69R+/Ve/U+vU/v1/v1AX1AH9QH9SF9SB/Wh/URfUQf1Uf1MX1MH9fH9Ql9Uv+gv9On9ff6jD6rz+of9Hl9Xl/45WsABo0y2hgTmXQmvUkxGUxGc5XJZK42mU0WkzDXmKzmWpPNXGeymxwmp8llcps8Jq+xhowzbGKTz+Q3SXO9KWBuMAVNIVPYFDHeFDXFzI3/dP7v9dfENDFNTVPTzDQzLUwL09K0NK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1Xk2pSTQ/zoulpepnepo/pa14y/Uw/09/0NwPMADPIDDKDzWAzxAwxQ81QM9wMNyPMCDPKjDJjzBgzzowz4814M8FMMBPNRDPZTDZTzVQz3Uw3M8wMM8vMMrPNbDPHzDHzzDyzwCwwC81Cs9gsNkvMErPULDPLzAqzwqwyq8was8asM+vMBrPBbDKbzFKz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQXPIHDKHzWFzxBwxR81Rc8wcM8fNcXPCnDCnzClz2pw2Z8wZc86cM+fNeXPBXDAXzcVLl32RilRkIhOli9JFKVFKlDHKGGWKMkWZo8xRIkpEWaOsUbbouih7lCPKGeWKckd5olSwEUUu4iiO8kX5o2R0fVQguiEqGBWKCkdFIh8VjYpFN0bFo5uiEtHNUcnolqhUdGtUOioTlY3KRbdF5aPbowpRxahSdEdUObozqhJVje6KqkV3R9Wje6Ia0b1Rzei+qFZ0f1Q7+kNUJ3ogqhs9GNWLHorqRw9HDaKGUaOocdTkX1o/hDM5HvVdbTebarvbHvZF29P2sr1tH9vXvmT72Zdtf/uKHWAH2kH2VTvYvmaH2NftUDvMDrdv2BF2pB1lR9sxdqwdZ9+04+1bdoJ92060k+xkO8VOtdPsdPuOnWFn2ln2XTvbvmfn2Ll2np1vF9j37UK7yC62H9gl9kO71C6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9V+ZLfZ7XaH3Wl32d12j/3Y7rWf2H32U7vffmYP2D/ag/Zze8h+YQ/bL+0R+5U9ar+2x+w39rj91p6wJ+0p+509bb+3Z+xZe87+YM/bH+0F+5O9aMOli/tLb+9kyFA6SkcplEIZKSNlokyUmTJTghKUlbJSNspG2Sk75aSclJtyU17KS5cwMeWjfJSkJBWgAlSQClJhKkyePBWjYlScilMJKkElqSSVolJUmkpTWSpLt9FtdDvdThWpIt1Bd9CddCdVpapUjapRdapONagG1aSaVItqUW2qTXWoDtWlulSP6lF9qk8NqAE1okbUhJpQU2pKzagZtaAW1JJaUitqRa2pNbWhNtSW2lI7akftqT11oA7UkTpSZ+pMXagLdaWulEqp1IN6UE/qSb2pN/WlvtSP+lF/6k8DaAANokE0mAbTEBpCQ2kYDac3aASNpFE0msbQWBpH42g8jacJNIEm0kSaTJNpKk2l6TSdZtAMmkWzaDbNpjk0h+bRPFpAC2ghLaTFtJiW0BJaSktpOS2nlbSSVtNqWktraT2tp420kTbTZtpKW2kbbaMdtIN20S7aQ3toL+2lfbSP9tN+OkAH6CAdpEN0iA7TYTpCR+goHaVjdIyO03E6QSfoFJ2i03SaztAZOkfn6Dz9SBfoJ7pIgVKcgozuKpfJXe0yuywuxWVwl+IIAC7FOV0ul9vlcXmdddldjr+IyTlX0BVyhV0R511RV8zd+Ju4tCvjyrpy7jZX3t3uKvwmrubudtXdPa6Gu9dVdXf9RVzT3edquYdcbfewq+MaurqusavnHnL13cOugWvoGrnGrqV73LVyT7jW7knXxj31m3ihW+TWunVuvdvg9rpP3Dn3gzvqvnbn3Y+uq+vm+rqXXD/3suvvXnED3MDfxMPdG26EG+lGudFujBv7m3iym+KmumluunvHzXAzfxMvcO+72W6xm+Pmunlu/s/xpZ4Wuw/cEvehW+qWueVuhVvpVrnVbs3/73WF2+Q2uy1uj/vYbXPb3Q630+1yu3+OL53HPvep2+8+c0fcV+6g+9wdcsfcYfflz/Gl8zvmvnHH3bfuhDvpTrnv3Gn3vTvjzv58/pfO/Tv3k7voggNGVqzZcMTpOD2ncAbOyFdxJr6aM3MWTvA1nJWv5Wx8HWfnHJyTc3FuzsN52TKxY+aY83F+TvL1XIBv4IJciAtzEfZclIvxjVycb+ISfDOX5Fu4FN/KpbkMl+VyfBuX59u5AlfkSnwHVw6Bq3BVvour8d1cne/hGnwv1+T7uBbfz7X5D1yHH+C6/CDX44e4Pj/MDbghN+LG3IQf4ab8KDfj5tyCH+OW/Di34ie4NT/JbfgpbstPczt+htvzs9yBn+OO3Ik78/PchV/grtyNU7k79+AXuSf34t7ch/vyS9yPX+b+/AoP4IE8iF/lwfwaD+HXeSgP4+H8Bo/gkTyKR/MYHsvj+E0ez2/xBH6bJ/IknsxTeCpP4+n8Ds/gmTyL3+XZ/B7P4bk8j+fzAn6fF/IiXswf8BL+kJfyMl7OK3glr+LVvIbX8jpezxt4I2/izbyFt/JHvI238w7eybt4N+/hj3kvf8L7+FPez5/xAf4jH+TP+RB/wYf5Sz7CX/FR/pqP8Td8nL/lE3yST/F3fJq/5zN8ls/xD3yef+QL/BNf5MAQY6xiHZs4itPF6eOUOEOcMb4qzhRfHWeOs8SJ+Jo4a3xtnC2+Ls4e54hzxrni3HGeOG9sY4pdzHEc54vzx8n4+rhAfENcMC4UF46LxD4uGheLb4yLxzfFJeKb45LxLXGp+NYYUsvED91bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8R/iOvEDcd34wbhe/FBcP344bhA3jBvFjeMm8SNx0/jRuFncPG4RPxa3jB+PW8VPxK3jJ+M28VO/+3hq3D3uEb8YvxiHcI/65T4xuTC5KLk4+UFySfLD5NLksuTy5IrkyuSq5OrkmuTa5Lrk+uSG5MbkpuTm5JZkCFXTg0evvPbGRz6dT+9TfAaf0V/lM/mrfWafxSf8NT6rv9Zn89f57D6Hz+lz+dw+j8/rrSfvPPvY5/P5fdJf7wv4G3xBX8gX9kW890V9Md/YN/FNfFP/qG/mm/sW/jH/mH/cP+6f8E/4J30b/5Rv65/27fwzvr1/1j/rn/MdfSff2T/vu/gXfFffzaf6VN/D9/A9fU/f2/f2fX1f38/38/19fz/AD/CD/CA/2A/2Q/wQP9QP9cP9cD/Cj/Cj/Cg/xo/x4/w4P96P9xP8BD/RT/ST/WQ/1U/10/10P8PP8LP8LD+74Gw/x8/x8/w8v8Av8Av9Qr/YL/ZL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/hD/sv/RH/lT/qv/bH/Df+uP/Wn/An/Sn/nT/tv/dn/Fl/zv/gz/sf/QX/k7/ogx+XeDMxPvFWYkLi7cTExKTE5MSUxNTEtMT0xDuJGYmZiVmJdxOzE+8l5iTmJuYl5icWJN5PLEwsSixOfJBYkvgwsTSxLLE8sSKxMrEqEUKebXHIF/KHZLg+FAg3hIKhUCgcigQfioZi4cZQPNwUSoSbQ8lwSygVbg2lQ5lQNjwcGoSGoVFoHJqER0LT8GhoFpqHFuGx0DI8HlqFJ0Lr8GRoE54KbcPToV14JrQPz4YO4bnQMXQKncPzoUt4IXQN3UJq6B56hBdDz9Ar9A59Qt/wUugXXg79wythQBgYBoVXw+DwWhgSXg9Dw7AwPLwRRoSRYVQYHcaEsWFceDOMD2+FCeHtMDFMCpPDlDA1TAvTwzthRpgZZoV3w+zwXpgT5oZ5YX5YEN4PC8OisDh8EJaED8PSsCwsDyvCyrAqrA5rwtqwLqwPG8LGsClsDlvC1vBR2Ba2hx1hZ9gVdoc94eOwN3wS9oVPw/7wWTgQ/hgOhs/DofBFOBy+DEfCV+Fo+DocC9+E4+HbcCKcDKfCd+F0+D6cCWfDufBDOB9+DBfCT+Gi/M2aEEIIIcQ/RP/O493/xufSAcCvt0Q9AODq7bkO/3XNjdn/tO6lcrdMAMCT3To88OtRuXJqauovz12qIco/FwASf1n/13gZtIDHoTU0h+J/s79eqtN5/p36yVsAMv5ZTgpcji/Xv+m/qP/IY8MXlorPZf079ecCFMx/OScDXI4v1y/xX9TP0fR3+s/w+TiAZn+Wkwkux5frF4NH4Slo/RfPFEIIIYQQQggh/qSXKtvu9+6fL92f5zaXc9LD5fj37s+FEEIIIYQQQghx5T3TqfMTj7Ru3bzdP7bAX/YF/ntZspDFf84iwy8/Ov9X+vk3La7kbyUhhBBCCCHEv8Pli/4r3YkQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCJF2/W/8O7ErfY5CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfb/AgAA//+wBDLo") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) truncate(&(0x7f0000000340)='./file0/file0\x00', 0x20000) chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 1m55.936937959s ago: executing program 34 (id=275): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x46, 0x0, 0x0) truncate(&(0x7f0000000340)='./file0/file0\x00', 0x20000) chdir(&(0x7f0000000400)='./file0\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) 1m38.852174564s ago: executing program 6 (id=333): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m37.955567523s ago: executing program 6 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.810967867s ago: executing program 6 (id=336): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00') r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) close_range(r4, 0xffffffffffffffff, 0x0) 1m36.675738728s ago: executing program 6 (id=340): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m34.608531112s ago: executing program 6 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 1m33.11194872s ago: executing program 6 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0x5, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7f, 0x0, 0xffff, 0x5, 0xb, 0x1}, {0x59, 0x3, 0x8, 0xfd5f, 0xd402, 0x5}, 0x0, 0x80000001, 0x497}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe31def08d133858c}, @TCA_TBF_BURST={0x8, 0x6, 0xc}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m33.046148606s ago: executing program 35 (id=359): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x11}, {0xffe6, 0xb}, {0x5, 0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7f, 0x0, 0xffff, 0x5, 0xb, 0x1}, {0x59, 0x3, 0x8, 0xfd5f, 0xd402, 0x5}, 0x0, 0x80000001, 0x497}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe31def08d133858c}, @TCA_TBF_BURST={0x8, 0x6, 0xc}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.395966762s ago: executing program 3 (id=610): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 8.329511619s ago: executing program 3 (id=611): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xd931d3864d39ddd2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x13000, 0x400, &(0x7f0000feb000/0x13000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x2}) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) mremap(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 7.984768183s ago: executing program 3 (id=612): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = memfd_secret(0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x2000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) 7.653742246s ago: executing program 7 (id=614): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153afd", 0x42, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.526930318s ago: executing program 2 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 7.40017433s ago: executing program 7 (id=617): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x5a580000, 0x0, 0x0, 0xfffffffe}) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) 7.350835065s ago: executing program 3 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0xbb, 0x8}, {0x31, 0x200}, 0x5, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.311875429s ago: executing program 2 (id=619): unshare(0x22020400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2040120, 0x0) 7.150107045s ago: executing program 7 (id=620): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000780)={0x1, 0xfff, 0x5}) 6.38786759s ago: executing program 7 (id=621): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$eJzs3U9oHPe9APDvyJIjK++ZkPfwM8Z2Jk4e2OAoK9lREHmQbFYjeZLVrthdBZvwSEwtB2O5CXEDtQ91fElpaQk99Zjk0Et7Kr20FFpoD+2p0F57CwR6SFraW0NAZWZ2bcn643+KbdLPR1j725nv/H7f+Wk9X42kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJLGTK02kUQzby2eTDfXmOm057dYP+jv12sethg3Iin+xeho7K0W7f3v66v3FJ8Oxf7q2f4YLR5G4/LDex557r+Ghwbbb5HQdhveaOHFS5fPn15eXnr7VnoY2factst3f7nm6Y/G4hZndi5r5d12Pl+fy9K8206np6ZqT5+Y7aazeTPrnur2svm00cnqvXYnPdw4kk5MTx9Ls/FT7cXW3Ey9maXD1cJnn5qs1abSl8YXsnqn2249/dJ4t3Eibzbz1ly5YbG6iHm2eCG+nPfSXlafT9Oz55aXjq1Nade6JIugiTVLvlhZ/Wz/k4988s7H/zi3NLnlvsZQOlmbnJyYmJycmEoiolYbvr7gmelnnq3Vhms3iHUR9/RFywNom4/gcOeG+vU/mpFHKxbjZKQbfjRiJjrRjvm4/gJevb5vUP//9+m//mGrcd9fVf+rKj+0f+/11fuirP8Hq2cHN6v/1dg7H9ok5y/ro/R/xaeLcSkux/k4HcuxHEvx9pcyXrJ9fQ1tb2ZzkUUr8uhGO/KYj3q5JO0vSWM6pmIqavFanIjZ6EYas5FHM7LoxqnoRi+y8hXViE5kUY9etKMTaRyORhyJNCZiOqbjWKSRxXicinYsRivmYibqZS9n41w578duyGvPt17/xRt//OSD8qs1CJrYaorfjSiD/r5F0Lpirv5z2yLit9t3AIe7sDKo/wAAAMBXVlL+9L04/x+JA2VrNm9mr66JefWzG7caLj69ew/TBAAAAO5C+Zv//ZFUjTgQSXH+X1sb9JOR8uGh+5AfAAAAcPeS8hq74uR/LB6rWoPLpWr3OzcAAABge5S/9j9YPIxFXCkXOP8HAACAr5hXftZv3HiP/Y8H99gdWngo+dXfotMZSY5/ePLJ5EK9iKtf2FFt13945VqPvdl9g6sJqr6mhi8/XDwfbmT7k8GNgr/oX0xQ3Vpg3/C1zdfm8cKuammSJEUCVxc2TSDWJLC7vxfXEiifxffi8Srm8TPV45nBmmpvx2bzZjbeaDefm4h6ffdQLzvZe+fr574Z5e5/pzW/O4mz55aXxr/25vKZMperRS9XL/T3d919FLfIZWVwOcWB9Xc3LroaKS/E6I87Vo1bW73/Qxd3F42hG+dgizHfi0P/UcYcGqtix9bu/2gx5sT4Zns/Vu3fxLo9H17/wqqyOPV5delIkcW1y0feiyeqxhOHn6geNshicqssirmYXJ1FNWcxdBvzv0kW8UhEfPD4lZMHRiOyYzfL4thdZgFwv5wt7/pTVKHq8FxVoc9XKkX973RGdsaaulNtcKtHuaQc5Sbv5FNUiVur7v9c2eKIfriKOVx9PzG8b4O6Ult7RN9VHNHfOvfW7/pH9OM//uGH/3/w9z+947o+OgjZNWg8+puHh6LMYlc/i8v9NZ2R5PvXKklVVT8qln+06bjd5mRSTOGOb1x4K/ZcvHT5qXMXTr+x9MbSzoiYqh2v1Z5Jkv4Xb6X8jkHtAWADh+JgVcg3fY+dTd6Fp/wGoIxIjm91Vr0jkkev/UlBURPfjOU4E0fLqw0i4rGNxx1b9WcIR+NQP9mNz1rHVr3Dy9GNzuquxLXYok5WsZMbx27Y77FVM/Y/P/gyvx4AcC8cukkd3rT+X49Ijt7kvHttLT9SxR4ZZLB5LY+I5+/tbADAv4es81ky1vt20unkC69NTE9P1HsnsrTTbrycdvKZuSzNW72sE8P11lyWLnTavXaj3Swar+QzWTftLi4stDu9dLbdSRfa3fxk+c7vaf+t37vZfL3VyxvdhWZW72Zpo93q1Ru9dCbvNtKFxRebefdE1ik37i5kjXw2b9R7ebuVdtuLnUY2nqbdLFsVmM9krV4+mxfNVrrQyefrnasR0Vycz9KZrNvo5Au9dtXhYKy8NdvuzJfd/mX3/Z5tAHgwXLx0+fzp5eWlt++s8edbCd589NGRe7mvAEDlepX+9D9vXOeH7wAAAAAAAAAAAAAA8GC4y+v/1jd2bW+Ho1vFrFyJWL8qWVlZuY0hdsVNYnZWM7Ujtnei7knj6rb0MxQbzfOD00g2X/X688+f32zzF6/sPXFrQ9z0f8pwRPQvdX33050/f79a9cId7c7Q7W/1p4i4g7FWki1i7vOBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA28K8AAAD//yYNZVE=") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6.38753021s ago: executing program 2 (id=622): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)}], 0x2) 6.307143518s ago: executing program 3 (id=623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000780)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40040, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.035876655s ago: executing program 2 (id=625): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000240)) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, 0x0, 0x0, 0x0, r4) 4.759167941s ago: executing program 2 (id=626): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4.527121634s ago: executing program 7 (id=627): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000002000000070000000000000d00000000000000000000000105006741b75600020000"], &(0x7f0000000000)=""/144, 0x36, 0x90, 0x1}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000140)={0x2, {{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, {{0xa, 0x4e22, 0xd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x55a3}}}, 0x108) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r2, &(0x7f00000000c0)="b3", 0x1, 0x24000084, 0x0, 0x0) alarm(0x8000000000000001) alarm(0x0) 4.514673565s ago: executing program 8 (id=628): iopl(0x3) io_uring_setup(0x17, &(0x7f0000000000)={0x0, 0x37ec, 0xc012a71d41555313, 0x4000004, 0x203}) 3.603758235s ago: executing program 8 (id=631): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) pipe(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.14553235s ago: executing program 5 (id=633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x2000000000010002, 0x0) 3.028253271s ago: executing program 5 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0xbb, 0x8}, {0x31, 0x200}, 0x5, 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.938449539s ago: executing program 5 (id=635): r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)}], 0x2) 1.839962599s ago: executing program 5 (id=636): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 1.736492869s ago: executing program 5 (id=637): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file1\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x806, &(0x7f0000001040)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000100)=ANY=[@ANYRES64], 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r2, 0x66020000) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 908.475151ms ago: executing program 8 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="6c00000000080108000000000000000003000006060002409100000005000300060000000900010073797a30000000003c000480080009400000000808000840"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 895.522862ms ago: executing program 5 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000800)=ANY=[], 0x290) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x420e, r3, 0x0, 0xfffffffffffffffe) 691.824902ms ago: executing program 8 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r2, &(0x7f0000000700)=""/90, 0x5a) 540.108127ms ago: executing program 8 (id=641): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x3, &(0x7f00000000c0)=ANY=[], 0x21, 0x1b2, &(0x7f0000000a40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1000004, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 139.989836ms ago: executing program 7 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x8de926025ae31ab, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x280008d4}, 0x4080) 91.272381ms ago: executing program 3 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) 70.675483ms ago: executing program 2 (id=644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0xffffffffffffc000) 0s ago: executing program 8 (id=645): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): : mark_inode_dirty error [ 99.618770][ T4527] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.49: corrupted inode contents [ 99.689578][ T4527] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.49: mark_inode_dirty error [ 100.333821][ T4551] loop2: detected capacity change from 0 to 8 [ 100.373199][ T4242] usb 1-1: USB disconnect, device number 2 [ 100.387536][ T4323] udevd[4323]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory [ 100.404619][ T4552] loop4: detected capacity change from 0 to 1024 [ 100.495939][ T4551] SQUASHFS error: zlib decompression failed, data probably corrupt [ 100.557215][ T4551] SQUASHFS error: Failed to read block 0x9b: -5 [ 100.579081][ T4551] SQUASHFS error: Unable to read metadata cache entry [99] [ 100.633258][ T4551] SQUASHFS error: Unable to read inode 0x127 [ 100.667790][ T4552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 102.268542][ T26] audit: type=1800 audit(1761044960.924:5): pid=4552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.55" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 102.316925][ T4242] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 102.367924][ T4242] Bluetooth: hci2: Injecting HCI hardware error event [ 102.376453][ T4200] Bluetooth: hci2: hardware error 0x00 [ 102.594752][ T4571] loop2: detected capacity change from 0 to 1024 [ 102.701525][ T4578] loop4: detected capacity change from 0 to 512 [ 102.962459][ T4578] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.214100][ T4578] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.078631][ T4578] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.60: corrupted inode contents [ 105.596026][ T4578] EXT4-fs error (device loop4): ext4_dirty_inode:6046: inode #2: comm syz.4.60: mark_inode_dirty error [ 105.639794][ T4578] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.60: corrupted inode contents [ 106.682281][ T4578] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz.4.60: mark_inode_dirty error [ 106.947053][ T2289] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.158541][ T4610] loop4: detected capacity change from 0 to 512 [ 107.188332][ T4610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.317150][ T2289] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 107.346959][ T2289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.359642][ T2289] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 107.371542][ T2289] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 107.387641][ T4610] EXT4-fs (loop4): 1 truncate cleaned up [ 107.398547][ T4610] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 107.457260][ T2289] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.487010][ T2289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 107.525908][ T2289] usb 1-1: SerialNumber: syz [ 107.581812][ T4610] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.71: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 107.697308][ T4610] EXT4-fs (loop4): Remounting filesystem read-only [ 107.733895][ T4618] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #2: block 13: comm syz.4.71: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 107.770522][ T4618] EXT4-fs (loop4): Remounting filesystem read-only [ 107.812631][ T4620] loop1: detected capacity change from 0 to 256 [ 107.855855][ T4620] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 108.322210][ T4625] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.232554][ T23] usb 1-1: USB disconnect, device number 3 [ 109.469757][ T4631] loop3: detected capacity change from 0 to 1024 [ 109.525492][ T4631] EXT4-fs (loop3): Ignoring removed oldalloc option [ 109.561359][ T4631] EXT4-fs (loop3): Ignoring removed bh option [ 109.609230][ T4631] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.705651][ T4637] loop2: detected capacity change from 0 to 2048 [ 109.713656][ T4631] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 109.833311][ T4643] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.837024][ T13] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.852973][ T26] audit: type=1804 audit(1761044968.504:6): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.76" name="/newroot/17/file1/bus" dev="loop3" ino=18 res=1 errno=0 [ 111.577971][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.661860][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 111.817681][ T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 111.856991][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.865553][ T13] usb 5-1: SerialNumber: syz [ 112.848891][ T4664] loop2: detected capacity change from 0 to 8 [ 112.923384][ T13] usb 5-1: 0:2 : does not exist [ 112.936192][ T4666] binder: BINDER_SET_CONTEXT_MGR already set [ 112.946933][ T4666] binder: 4665:4666 ioctl 4018620d 200000000040 returned -16 [ 113.107382][ T13] usb 5-1: USB disconnect, device number 3 [ 113.139669][ T4672] loop4: detected capacity change from 0 to 256 [ 113.253959][ T4671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.286244][ T4672] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.368263][ T4672] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 113.430718][ T4672] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 113.499531][ T4473] udevd[4473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.630124][ T4688] loop4: detected capacity change from 0 to 2048 [ 114.855323][ T4693] loop2: detected capacity change from 0 to 8192 [ 114.974102][ T4693] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 115.127141][ T4700] loop1: detected capacity change from 0 to 16 [ 115.744029][ T4700] erofs: (device loop1): mounted with root inode @ nid 36. [ 116.085204][ T4711] loop3: detected capacity change from 0 to 256 [ 116.443296][ T4711] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.461662][ T4711] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 116.478240][ T4711] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 116.966153][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.977080][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.999531][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.137219][ T23] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 118.161910][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 118.193305][ T23] usb 3-1: SerialNumber: syz [ 119.810631][ T23] usb 3-1: can't set config #1, error -71 [ 119.852721][ T23] usb 3-1: USB disconnect, device number 2 [ 120.045468][ T4738] loop2: detected capacity change from 0 to 2048 [ 120.195159][ T4747] loop1: detected capacity change from 0 to 256 [ 120.309946][ T4747] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.356850][ T4747] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 120.498838][ T4747] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 121.210716][ T13] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.600605][ T13] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 121.658739][ T13] usb 4-1: config 0 has no interface number 0 [ 121.682780][ T13] usb 4-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 121.703644][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.732285][ T13] usb 4-1: config 0 descriptor?? [ 121.798661][ T13] usb-storage 4-1:0.125: USB Mass Storage device detected [ 121.879491][ T4765] loop0: detected capacity change from 0 to 512 [ 121.894648][ T4765] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 122.038919][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.116'. [ 122.203186][ T4765] EXT4-fs (loop0): 1 truncate cleaned up [ 122.301925][ T4765] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.601664][ T13] usb 4-1: USB disconnect, device number 2 [ 122.716895][ T4235] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 122.731169][ T4773] loop1: detected capacity change from 0 to 1024 [ 122.784656][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 122.831412][ T4184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5842: Corrupt filesystem [ 122.848701][ T4184] EXT4-fs error (device loop0): ext4_dirty_inode:6046: inode #2: comm syz-executor: mark_inode_dirty error [ 122.863282][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 122.895491][ T4184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 3506399615 in block_group 0 [ 123.141819][ T4235] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 123.193339][ T4235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.215331][ T4235] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 123.237697][ T4235] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.303298][ T4467] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm kworker/u4:13: Invalid inode table block 3506399615 in block_group 0 [ 123.368577][ T4235] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.393622][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.403342][ T4283] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.441644][ T4235] usb 5-1: SerialNumber: syz [ 123.491908][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.628497][ T4235] usb 5-1: can't set config #1, error -71 [ 123.644237][ T4235] usb 5-1: USB disconnect, device number 4 [ 123.668689][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.710873][ T4789] loop2: detected capacity change from 0 to 256 [ 123.736280][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.865752][ T4283] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.893644][ T4283] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.914447][ T4789] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.935153][ T4789] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 123.956703][ T4789] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 124.113784][ T4283] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.124673][ T4283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.133086][ T4283] usb 2-1: SerialNumber: syz [ 124.510080][ T4283] usb 2-1: 0:2 : does not exist [ 124.949077][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.970467][ T4283] usb 2-1: USB disconnect, device number 2 [ 125.191260][ T4802] syz.2.132 uses obsolete (PF_INET,SOCK_PACKET) [ 125.328425][ T4332] udevd[4332]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.866931][ T4249] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 125.970821][ T4819] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 126.236932][ T4249] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 126.265059][ T4249] usb 3-1: config 0 has no interface number 0 [ 126.294950][ T4249] usb 3-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 126.342205][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.396170][ T4249] usb 3-1: config 0 descriptor?? [ 126.459249][ T4249] usb-storage 3-1:0.125: USB Mass Storage device detected [ 126.690038][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 126.784454][ T4242] usb 3-1: USB disconnect, device number 3 [ 126.846532][ T4807] chnl_net:caif_netlink_parms(): no params data found [ 127.196656][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.233062][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.284110][ T4807] device bridge_slave_0 entered promiscuous mode [ 127.387735][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.452261][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.558347][ T4807] device bridge_slave_1 entered promiscuous mode [ 127.636969][ T1108] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 128.048124][ T1108] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 128.115723][ T4242] Bluetooth: hci0: command 0x0409 tx timeout [ 128.126247][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.313338][ T4857] loop1: detected capacity change from 0 to 256 [ 128.327180][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 128.339157][ T1108] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 128.381341][ T4857] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.453946][ T4857] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 128.553110][ T4857] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 128.820201][ T1108] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.830530][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.839411][ T1108] usb 4-1: SerialNumber: syz [ 130.175005][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.215945][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.226551][ T4242] Bluetooth: hci0: command 0x041b tx timeout [ 131.057631][ T2289] usb 4-1: USB disconnect, device number 3 [ 131.192923][ T4807] team0: Port device team_slave_0 added [ 131.252182][ T4876] tipc: Started in network mode [ 131.271478][ T4876] tipc: Node identity 2232f2a16361, cluster identity 4711 [ 131.304535][ T4876] tipc: Enabled bearer , priority 0 [ 131.675922][ T4881] device syzkaller0 entered promiscuous mode [ 131.984342][ T4807] team0: Port device team_slave_1 added [ 132.123260][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.145385][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.190003][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.234073][ T4891] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 132.266155][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.287176][ T2289] Bluetooth: hci0: command 0x040f tx timeout [ 132.299937][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.353513][ T4904] loop3: detected capacity change from 0 to 256 [ 132.364472][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.377529][ T1108] tipc: Node number set to 1096020641 [ 132.394032][ T4891] tipc: Resetting bearer [ 132.421836][ T4904] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.466698][ T4891] tipc: Disabling bearer [ 132.475590][ T4904] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 132.501534][ T4909] loop4: detected capacity change from 0 to 1024 [ 132.521049][ T144] device hsr_slave_0 left promiscuous mode [ 132.528951][ T4904] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 132.545363][ T144] device hsr_slave_1 left promiscuous mode [ 132.576351][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.597405][ T4909] EXT4-fs (loop4): Ignoring removed orlov option [ 132.606163][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.637113][ T2289] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 132.678854][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.717353][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.748886][ T144] device bridge_slave_1 left promiscuous mode [ 132.768024][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.840621][ T144] device bridge_slave_0 left promiscuous mode [ 132.847382][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.857184][ T4909] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none. [ 132.876822][ T4909] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.950730][ T26] audit: type=1800 audit(1761044991.604:7): pid=4918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="file1" dev="loop3" ino=1048614 res=0 errno=0 [ 133.002634][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.009879][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.097987][ T2289] usb 2-1: config 0 has an invalid interface number: 125 but max is 0 [ 133.189420][ T2289] usb 2-1: config 0 has no interface number 0 [ 133.199875][ T2289] usb 2-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 133.313349][ T2289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.446863][ T26] audit: type=1800 audit(1761044992.094:8): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.153" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 133.525127][ T2289] usb 2-1: config 0 descriptor?? [ 133.552327][ T26] audit: type=1800 audit(1761044992.204:9): pid=4909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.153" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 133.578771][ T4909] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.153: lblock 0 mapped to illegal pblock 0 (length 6) [ 133.610478][ T2289] usb-storage 2-1:0.125: USB Mass Storage device detected [ 133.647578][ T144] device veth1_macvtap left promiscuous mode [ 133.669953][ T144] device veth0_macvtap left promiscuous mode [ 133.678424][ T144] device veth1_vlan left promiscuous mode [ 133.685889][ T144] device veth0_vlan left promiscuous mode [ 133.762057][ T4909] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 133.820650][ T4921] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.153: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.850255][ T4921] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 133.877129][ T4922] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: comm syz.4.153: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.902360][ T4922] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.153: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 134.116570][ T144] team0 (unregistering): Port device team_slave_1 removed [ 134.147767][ T144] team0 (unregistering): Port device team_slave_0 removed [ 134.180481][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.220537][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.371438][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 134.711960][ T144] bond0 (unregistering): Released all slaves [ 135.042621][ T4903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.151'. [ 135.062665][ T4924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 135.091096][ T4235] usb 2-1: USB disconnect, device number 3 [ 135.327849][ T4807] device hsr_slave_0 entered promiscuous mode [ 135.337158][ T4807] device hsr_slave_1 entered promiscuous mode [ 135.348943][ T4807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.391924][ T4807] Cannot create hsr debugfs directory [ 136.998356][ T4807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.082431][ T4968] tipc: Started in network mode [ 137.091300][ T4968] tipc: Node identity 7efedfa7f5d2, cluster identity 4711 [ 137.129049][ T4968] tipc: Enabled bearer , priority 0 [ 137.168141][ T4807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.192176][ T4972] device syzkaller0 entered promiscuous mode [ 137.217521][ T4807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.257884][ T4968] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 137.277410][ T4807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.298938][ T4966] tipc: Resetting bearer [ 137.395469][ T4966] tipc: Disabling bearer [ 137.613269][ T4984] loop4: detected capacity change from 0 to 8 [ 137.859281][ T4807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.006450][ T4988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 138.042465][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.063418][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.095781][ T4807] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.164067][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.205580][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.268562][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.275697][ T495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.305405][ T4992] loop3: detected capacity change from 0 to 1024 [ 138.335942][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.400550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.418756][ T4997] loop4: detected capacity change from 0 to 256 [ 138.434013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.506445][ T4997] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.533153][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.540745][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.616987][ T4997] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 138.652791][ T4997] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 138.706903][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.945556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.006282][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.007321][ T2289] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 139.038291][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.127700][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.588946][ T2289] usb 4-1: Using ep0 maxpacket: 32 [ 140.100544][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.187161][ T2289] usb 4-1: unable to get BOS descriptor or descriptor too short [ 140.223745][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.279233][ T2289] usb 4-1: config 1 has an invalid interface number: 24 but max is 0 [ 140.390998][ T2289] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.416458][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.764132][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.801982][ T2289] usb 4-1: config 1 has no interface number 0 [ 140.848585][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.882410][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.945999][ T2289] usb 4-1: config 1 interface 24 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 140.984607][ T2289] usb 4-1: config 1 interface 24 altsetting 5 endpoint 0x6 has invalid wMaxPacketSize 0 [ 141.006082][ T5020] tipc: Enabled bearer , priority 0 [ 141.010427][ T2289] usb 4-1: config 1 interface 24 altsetting 5 bulk endpoint 0x6 has invalid maxpacket 0 [ 141.034253][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 141.056623][ T5015] device syzkaller0 entered promiscuous mode [ 141.077148][ T2289] usb 4-1: config 1 interface 24 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.113095][ T2289] usb 4-1: config 1 interface 24 has no altsetting 0 [ 141.255735][ T5023] tipc: Resetting bearer [ 141.456986][ T2289] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=24.72 [ 141.477040][ T2289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.520102][ T5023] tipc: Disabling bearer [ 141.597358][ T2289] usb 4-1: can't set config #1, error -71 [ 141.713677][ T2289] usb 4-1: USB disconnect, device number 4 [ 142.110098][ T5040] loop3: detected capacity change from 0 to 1024 [ 142.200024][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.208815][ T5040] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 142.382424][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.668948][ T5040] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,nombcache,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 143.187703][ T4807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.473767][ T5059] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 144.267696][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.178'. [ 146.168179][ T5084] tipc: Enabled bearer , priority 0 [ 146.217896][ T5084] device syzkaller0 entered promiscuous mode [ 146.296610][ T5086] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 146.370332][ T5092] netlink: 'syz.3.187': attribute type 1 has an invalid length. [ 146.448141][ T5092] netlink: 'syz.3.187': attribute type 2 has an invalid length. [ 146.475863][ T5098] loop1: detected capacity change from 0 to 256 [ 146.493892][ T5083] tipc: Resetting bearer [ 146.562619][ T5083] tipc: Disabling bearer [ 146.570664][ T5098] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.595307][ T5098] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 146.652048][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.675818][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.695344][ T5098] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 146.765577][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.796017][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.848925][ T4807] device veth0_vlan entered promiscuous mode [ 146.959259][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.978529][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.988366][ T23] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 147.062521][ T4807] device veth1_vlan entered promiscuous mode [ 147.308174][ T26] audit: type=1800 audit(1761045005.944:10): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="file1" dev="loop1" ino=1048619 res=0 errno=0 [ 147.529001][ T5116] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 147.670772][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 147.799650][ T23] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 147.851688][ T23] usb 4-1: config 0 has no interface number 0 [ 147.918375][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.031165][ T23] usb 4-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 148.043196][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.064786][ T23] usb 4-1: config 0 descriptor?? [ 148.075436][ T4807] device veth0_macvtap entered promiscuous mode [ 148.111730][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.135952][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.153292][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.211088][ T4807] device veth1_macvtap entered promiscuous mode [ 148.213145][ T23] usb-storage 4-1:0.125: USB Mass Storage device detected [ 148.400140][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.456118][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.493502][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.575915][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.606972][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.639235][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.676091][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.718191][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.761294][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.789873][ T5102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 148.817752][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.839947][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.851974][ T4256] usb 4-1: USB disconnect, device number 5 [ 148.879132][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.903907][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.939628][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.982176][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.015372][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.053101][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.117101][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.168290][ T4807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.197548][ T4807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.281143][ T4807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.291119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.307665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.340335][ T4807] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.356850][ T4807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.392187][ T4807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.422235][ T4807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.699170][ T5154] tipc: Started in network mode [ 149.808193][ T5154] tipc: Node identity 2e42976d1bf3, cluster identity 4711 [ 149.808576][ T5157] loop1: detected capacity change from 0 to 8 [ 149.869197][ T5154] tipc: Enabled bearer , priority 0 [ 150.205345][ T5157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 150.218047][ T5157] SQUASHFS error: Failed to read block 0x0: -5 [ 150.224557][ T5157] SQUASHFS error: Unable to read data cache entry [0] [ 150.232596][ T5157] SQUASHFS error: Unable to read page, block 0, size ff [ 150.274029][ T5157] SQUASHFS error: Unable to read data cache entry [0] [ 150.319801][ T5158] device syzkaller0 entered promiscuous mode [ 150.350654][ T5157] SQUASHFS error: Unable to read page, block 0, size ff [ 150.395534][ T5157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 150.442111][ T5157] SQUASHFS error: Failed to read block 0x0: -5 [ 150.519324][ T5157] SQUASHFS error: lzo decompression failed, data probably corrupt [ 150.575551][ T5157] SQUASHFS error: Failed to read block 0x0: -5 [ 150.601418][ T26] audit: type=1800 audit(1761045009.254:11): pid=5157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.201" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 150.776488][ T5159] tipc: Resetting bearer [ 150.861567][ T5159] tipc: Disabling bearer [ 150.904551][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.960228][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.044222][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.074388][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.131594][ T5166] loop3: detected capacity change from 0 to 128 [ 151.158682][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.223613][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.135150][ T5179] netlink: 16 bytes leftover after parsing attributes in process `syz.3.204'. [ 153.868838][ T5192] loop3: detected capacity change from 0 to 1024 [ 153.964594][ T5192] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 155.407451][ T4283] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 155.818376][ T4283] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 155.844793][ T4283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.878630][ T4283] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 155.903265][ T4283] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 155.924844][ T5212] tipc: Enabling of bearer rejected, failed to enable media [ 156.027100][ T4283] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.045197][ T4283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 156.076917][ T4283] usb 2-1: SerialNumber: syz [ 156.456398][ T5227] loop5: detected capacity change from 0 to 1024 [ 156.578304][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 156.665005][ T5235] loop3: detected capacity change from 0 to 256 [ 156.720263][ T5235] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.752343][ T5235] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 156.903747][ T5235] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 156.925561][ T5241] loop2: detected capacity change from 0 to 256 [ 156.985598][ T5241] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.029253][ T5241] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 157.066131][ T5241] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 157.372024][ T26] audit: type=1800 audit(1761045017.024:12): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.216" name="file1" dev="loop3" ino=1048624 res=0 errno=0 [ 157.716905][ T2289] Bluetooth: hci0: command 0x0411 tx timeout [ 159.367728][ T1108] usb 2-1: USB disconnect, device number 4 [ 159.907326][ T1108] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.347515][ T1108] usb 4-1: config 0 has an invalid interface number: 124 but max is 0 [ 160.408085][ T1108] usb 4-1: config 0 has no interface number 0 [ 160.442583][ T1108] usb 4-1: config 0 interface 124 has no altsetting 0 [ 160.627230][ T1108] usb 4-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=32.00 [ 160.676805][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.706473][ T1108] usb 4-1: Product: syz [ 160.737333][ T1108] usb 4-1: Manufacturer: syz [ 160.766953][ T1108] usb 4-1: SerialNumber: syz [ 160.796160][ T1108] usb 4-1: config 0 descriptor?? [ 160.830901][ T5267] loop1: detected capacity change from 0 to 256 [ 160.874539][ T5267] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.926882][ T5267] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 160.997076][ T5267] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 161.919824][ T5280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.226'. [ 162.558598][ T1108] ftdi_sio 4-1:0.124: FTDI USB Serial Device converter detected [ 162.604912][ T1108] usb 4-1: Detected FT-X [ 162.730165][ T5297] loop3: detected capacity change from 0 to 256 [ 162.827785][ T1108] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 162.897499][ T1108] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 163.007611][ T1108] ftdi_sio 4-1:0.124: GPIO initialisation failed: -71 [ 163.568164][ T1108] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 164.323446][ T5297] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.361922][ T1108] usb 4-1: USB disconnect, device number 6 [ 164.406511][ T5297] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 164.988489][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.037065][ T5297] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 165.087752][ T1108] ftdi_sio 4-1:0.124: device disconnected [ 165.373036][ T5314] loop5: detected capacity change from 0 to 512 [ 165.568078][ T26] audit: type=1800 audit(1761045025.214:13): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.231" name="file1" dev="loop3" ino=1048629 res=0 errno=0 [ 166.125433][ T5314] EXT4-fs (loop5): 1 orphan inode deleted [ 166.197061][ T5314] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 166.294128][ T5314] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.337966][ T5323] tipc: Enabled bearer , priority 0 [ 166.492203][ T5323] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 166.505358][ T5314] EXT4-fs (loop5): Cannot change journaled quota options when quota turned on [ 166.612836][ T5323] tipc: Resetting bearer [ 166.778159][ T5322] tipc: Disabling bearer [ 168.447426][ T2289] Bluetooth: hci5: command 0x0409 tx timeout [ 168.459477][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.238'. [ 170.349310][ T5365] loop1: detected capacity change from 0 to 256 [ 170.371439][ T5324] chnl_net:caif_netlink_parms(): no params data found [ 170.441480][ T5365] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.506909][ T5365] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 170.516941][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 170.632386][ T5365] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 170.666390][ T5324] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.872585][ T5324] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.937652][ T5376] loop3: detected capacity change from 0 to 1024 [ 170.946150][ T5324] device bridge_slave_0 entered promiscuous mode [ 171.106692][ T5324] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.176940][ T5324] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.850652][ T5324] device bridge_slave_1 entered promiscuous mode [ 172.234130][ T5324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.404980][ T5324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.680261][ T4242] Bluetooth: hci5: command 0x040f tx timeout [ 172.815333][ T5324] team0: Port device team_slave_0 added [ 172.835742][ T5324] team0: Port device team_slave_1 added [ 172.881016][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.889647][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.928626][ T5324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.943455][ T5324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.952574][ T5324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.995805][ T5324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.263510][ T5324] device hsr_slave_0 entered promiscuous mode [ 173.305924][ T5324] device hsr_slave_1 entered promiscuous mode [ 173.364325][ T5324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.396998][ T5324] Cannot create hsr debugfs directory [ 173.860918][ T5414] loop1: detected capacity change from 0 to 1764 [ 174.168165][ T5324] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 174.215823][ T5417] loop2: detected capacity change from 0 to 2048 [ 174.686931][ T5324] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 174.713916][ T5324] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 174.730581][ T5324] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 174.789501][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 175.687071][ T23] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 175.916220][ T5324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.994620][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.027568][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.087118][ T23] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 176.095449][ T23] usb 3-1: config 0 has no interface number 0 [ 176.126078][ T5324] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.145659][ T23] usb 3-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 176.164525][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.261'. [ 176.180589][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.220938][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.236865][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.297357][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.304516][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.338711][ T23] usb 3-1: config 0 descriptor?? [ 176.394302][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.404206][ T23] usb-storage 3-1:0.125: USB Mass Storage device detected [ 176.419680][ T5450] loop1: detected capacity change from 0 to 256 [ 176.451358][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.507491][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.575244][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.582511][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.594874][ T5450] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.673441][ T5450] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 176.708717][ T5433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 176.777719][ T5450] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 176.867089][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.929142][ T23] usb 3-1: USB disconnect, device number 4 [ 177.071315][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.729544][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.739568][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.754507][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.764209][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.796802][ T5324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.814863][ T5324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.946166][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.277267][ T26] audit: type=1800 audit(1761045037.694:14): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="file1" dev="loop1" ino=1048632 res=0 errno=0 [ 178.608900][ T5461] loop5: detected capacity change from 0 to 256 [ 178.672946][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.690193][ T5461] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.737904][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.766852][ T5461] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 178.787752][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.817334][ T5469] loop1: detected capacity change from 0 to 128 [ 178.882454][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.898078][ T5461] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 178.959761][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.027835][ T26] audit: type=1800 audit(1761045038.684:15): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.265" name="bus" dev="loop1" ino=1048634 res=0 errno=0 [ 179.055745][ T5469] Trying to write to read-only block-device loop1 [ 179.159251][ T5469] Trying to write to read-only block-device loop1 [ 179.211390][ T5473] loop2: detected capacity change from 0 to 2048 [ 179.279401][ T5478] loop3: detected capacity change from 0 to 128 [ 179.305441][ T4183] FAT-fs (loop1): error, invalid access to FAT (entry 0xffff0000) [ 179.343405][ T4183] FAT-fs (loop1): Filesystem has been set read-only [ 179.351123][ T4183] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.367433][ T4183] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.529661][ T5478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.548867][ T5478] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 179.549914][ T5089] Trying to write to read-only block-device loop1 [ 179.689840][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.711353][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.803614][ T5324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.190436][ T5501] netlink: 'syz.2.272': attribute type 3 has an invalid length. [ 181.288020][ T5503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 182.217482][ T5517] loop2: detected capacity change from 0 to 128 [ 183.146339][ T5518] loop3: detected capacity change from 0 to 512 [ 183.151956][ T4322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.310850][ T5518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.320816][ T4322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.353746][ T5518] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.422693][ T5518] EXT4-fs (loop3): 1 truncate cleaned up [ 183.460591][ T5518] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 183.532136][ T4322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.552661][ T26] audit: type=1800 audit(1761045043.204:16): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.274" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 183.647284][ T26] audit: type=1800 audit(1761045043.204:17): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.274" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 183.676964][ T4242] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 183.743935][ T4322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.918127][ T5538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.271'. [ 184.049472][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.059488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.111427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.128042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.143755][ T4242] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 184.173356][ T4242] usb 3-1: config 0 has no interface number 0 [ 184.184235][ T5324] device veth0_vlan entered promiscuous mode [ 184.191420][ T4242] usb 3-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 184.223298][ T4242] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.256131][ T4242] usb 3-1: config 0 descriptor?? [ 184.325041][ T4242] usb-storage 3-1:0.125: USB Mass Storage device detected [ 185.156644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.165362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.209317][ T5524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.276'. [ 185.322341][ T1108] usb 3-1: USB disconnect, device number 5 [ 185.329102][ T5324] device veth1_vlan entered promiscuous mode [ 185.504127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.523883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.551252][ T5324] device veth0_macvtap entered promiscuous mode [ 185.679840][ T5324] device veth1_macvtap entered promiscuous mode [ 185.815166][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.826587][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 185.844065][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.875034][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.906697][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.936907][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.952318][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.973525][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.005555][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.023168][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.055410][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.078472][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.098380][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.119189][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.130869][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.161320][ T5544] chnl_net:caif_netlink_parms(): no params data found [ 186.187149][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.208760][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.216871][ T2289] Bluetooth: hci1: command 0x0409 tx timeout [ 186.229408][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.263660][ T1108] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.283967][ T1108] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.312245][ T1108] usb 3-1: config 0 descriptor?? [ 186.361864][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.391686][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.407339][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.418804][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.430663][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.449325][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.462082][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.474568][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.487512][ T5324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.578436][ T5324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.750519][ T5324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.783245][ T5588] loop5: detected capacity change from 0 to 256 [ 186.889433][ T1108] plantronics 0003:047F:FFFF.0003: unbalanced delimiter at end of report description [ 186.982261][ T1108] plantronics 0003:047F:FFFF.0003: parse failed [ 187.025905][ T5588] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 187.079936][ T1108] plantronics: probe of 0003:047F:FFFF.0003 failed with error -22 [ 187.118211][ T5588] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 187.248026][ T1108] usb 3-1: USB disconnect, device number 6 [ 187.269873][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.294510][ T5588] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 187.325493][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.350901][ T5324] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.367930][ T5324] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.392492][ T5324] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.417681][ T5324] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.801359][ T4187] Bluetooth: hci1: command 0x041b tx timeout [ 190.009518][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.017517][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.026331][ T5544] device bridge_slave_0 entered promiscuous mode [ 190.206274][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.229217][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.253952][ T5544] device bridge_slave_1 entered promiscuous mode [ 190.356955][ T1108] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 190.401312][ T1243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.438676][ T1243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.513030][ T4322] device hsr_slave_0 left promiscuous mode [ 190.530817][ T4322] device hsr_slave_1 left promiscuous mode [ 190.561183][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.582298][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.606611][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.657151][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.677791][ T4322] device bridge_slave_1 left promiscuous mode [ 190.684816][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.700928][ T4322] device bridge_slave_0 left promiscuous mode [ 190.707912][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.727081][ T1108] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 190.735877][ T1108] usb 6-1: config 0 has no interface number 0 [ 190.742346][ T1108] usb 6-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 190.767036][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.798493][ T1108] usb 6-1: config 0 descriptor?? [ 190.820686][ T4322] device veth1_macvtap left promiscuous mode [ 190.833694][ T4322] device veth0_macvtap left promiscuous mode [ 190.842132][ T1108] usb-storage 6-1:0.125: USB Mass Storage device detected [ 190.858399][ T4322] device veth1_vlan left promiscuous mode [ 190.872781][ T4322] device veth0_vlan left promiscuous mode [ 192.291665][ T4293] Bluetooth: hci4: command 0x0406 tx timeout [ 192.356633][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 192.413485][ T5613] usb 6-1: USB disconnect, device number 2 [ 192.549756][ T5635] loop5: detected capacity change from 0 to 1024 [ 192.879776][ T5639] loop5: detected capacity change from 0 to 512 [ 193.022861][ T5639] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 193.074701][ T5639] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.348958][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 193.373540][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 193.426161][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.483652][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.499281][ T5648] loop5: detected capacity change from 0 to 256 [ 193.586982][ T5648] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.625830][ T5648] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 193.670122][ T5648] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 193.749986][ T4322] bond0 (unregistering): Released all slaves [ 193.834043][ T5544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.857962][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 193.882779][ T5544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.957941][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.975179][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.995143][ T5660] loop2: detected capacity change from 0 to 256 [ 194.048130][ T5544] team0: Port device team_slave_0 added [ 194.077146][ T5660] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.093887][ T5544] team0: Port device team_slave_1 added [ 194.147744][ T5660] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.180570][ T5660] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 194.198828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.488305][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.501535][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 194.585518][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.594634][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.628796][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.722308][ T5544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.908549][ T5544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.916531][ T5544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.947849][ T5544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.361560][ T5544] device hsr_slave_0 entered promiscuous mode [ 195.591151][ T5544] device hsr_slave_1 entered promiscuous mode [ 195.635807][ T5544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.690053][ T5544] Cannot create hsr debugfs directory [ 195.743482][ T5692] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 195.750957][ T5692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 195.955740][ T5692] vhci_hcd vhci_hcd.0: Device attached [ 196.083625][ T5694] vhci_hcd: connection closed [ 196.087434][ T144] vhci_hcd: stop threads [ 196.128193][ T144] vhci_hcd: release socket [ 196.209279][ T5708] loop3: detected capacity change from 0 to 1024 [ 196.220166][ T144] vhci_hcd: disconnect device [ 196.223291][ T5710] loop2: detected capacity change from 0 to 256 [ 196.265985][ T5712] loop6: detected capacity change from 0 to 256 [ 196.289655][ T5710] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.420127][ T5544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 196.436871][ T5710] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 196.495233][ T5712] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 196.509708][ T5544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 196.526543][ T5544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 196.536242][ T5544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.576047][ T5710] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 196.581461][ T5712] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 197.071237][ T5712] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 197.570843][ T5735] fuse: Bad value for 'group_id' [ 198.179308][ T5753] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 198.186077][ T5753] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.235129][ T5753] vhci_hcd vhci_hcd.0: Device attached [ 198.290872][ T5753] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(16) [ 198.297580][ T5753] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 198.382700][ T5544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.441806][ T5753] vhci_hcd vhci_hcd.0: Device attached [ 198.469728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.485274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.517032][ T4249] usb 39-2: new high-speed USB device number 2 using vhci_hcd [ 198.539714][ T5544] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.573157][ T5758] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 198.579839][ T5758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 198.641253][ T5758] vhci_hcd vhci_hcd.0: Device attached [ 198.649863][ T5750] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 198.656872][ T5750] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 198.676288][ T5750] vhci_hcd vhci_hcd.0: Device attached [ 198.694770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.717586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.860331][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.867849][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.892975][ T5764] vhci_hcd: connection closed [ 198.893359][ T4467] vhci_hcd: stop threads [ 198.901160][ T5779] loop2: detected capacity change from 0 to 256 [ 198.917340][ T4467] vhci_hcd: release socket [ 198.923595][ T5760] vhci_hcd: connection closed [ 198.924088][ T5754] vhci_hcd: connection reset by peer [ 198.924256][ T5752] vhci_hcd: connection closed [ 198.954076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.957923][ T4467] vhci_hcd: disconnect device [ 198.988507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 199.017824][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.024942][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.033357][ T4467] vhci_hcd: stop threads [ 199.044043][ T4467] vhci_hcd: release socket [ 199.095423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 199.148120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 199.209941][ T4467] vhci_hcd: disconnect device [ 199.247406][ T5779] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.317023][ T4467] vhci_hcd: stop threads [ 199.321428][ T4467] vhci_hcd: release socket [ 199.361305][ T5779] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 199.388011][ T4467] vhci_hcd: disconnect device [ 199.411708][ T5788] fuse: Bad value for 'group_id' [ 199.457085][ T4467] vhci_hcd: stop threads [ 199.461534][ T4467] vhci_hcd: release socket [ 199.488373][ T5779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 199.557440][ T4467] vhci_hcd: disconnect device [ 200.296893][ T5544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.321084][ T5544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.456856][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.466333][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.512764][ T5777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.327'. [ 200.663661][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.738846][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.267735][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.313262][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.407620][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.465245][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.497835][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.547217][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.600860][ T495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.239802][ T5829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 202.246901][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.256170][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 202.269783][ T5837] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 202.276648][ T5837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.351292][ T5837] vhci_hcd vhci_hcd.0: Device attached [ 202.366110][ T5829] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 202.372869][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.384893][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 202.398198][ T5829] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 202.405039][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 202.413722][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 202.567736][ T5837] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 202.689044][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.726160][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.735825][ T5857] fuse: Bad value for 'group_id' [ 202.740192][ T5829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 202.749229][ T5829] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 202.786508][ T5859] loop5: detected capacity change from 0 to 1024 [ 202.808062][ T5544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.836545][ T5856] loop6: detected capacity change from 0 to 764 [ 202.883223][ T5856] rock: directory entry would overflow storage [ 202.890103][ T5856] rock: sig=0x4654, size=5, remaining=4 [ 202.898275][ T5829] vhci_hcd vhci_hcd.0: Device attached [ 202.905040][ T5847] vhci_hcd: connection closed [ 202.906568][ T5845] vhci_hcd: connection closed [ 202.912058][ T5832] vhci_hcd: connection closed [ 202.912110][ T5838] vhci_hcd: connection closed [ 202.925038][ T495] vhci_hcd: stop threads [ 203.026173][ T5849] vhci_hcd: connection closed [ 203.034360][ T495] vhci_hcd: release socket [ 203.067171][ T495] vhci_hcd: disconnect device [ 203.072475][ T495] vhci_hcd: stop threads [ 203.086040][ T495] vhci_hcd: release socket [ 203.113248][ T495] vhci_hcd: disconnect device [ 203.118940][ T495] vhci_hcd: stop threads [ 203.130327][ T495] vhci_hcd: release socket [ 203.192162][ T495] vhci_hcd: disconnect device [ 203.234667][ T495] vhci_hcd: stop threads [ 203.493965][ T495] vhci_hcd: release socket [ 203.502473][ T495] vhci_hcd: disconnect device [ 203.658495][ T5839] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 203.690096][ T495] vhci_hcd: stop threads [ 203.695100][ T495] vhci_hcd: release socket [ 203.702572][ T495] vhci_hcd: disconnect device [ 203.846633][ T4249] vhci_hcd: vhci_device speed not set [ 204.210486][ T5887] loop2: detected capacity change from 0 to 164 [ 205.138379][ T4256] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 205.262515][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 205.318318][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 205.339614][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 205.349805][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 205.360712][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 205.380459][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.409547][ T5544] device veth0_vlan entered promiscuous mode [ 205.467318][ T4256] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 205.482585][ T4256] usb usb40-port1: attempt power cycle [ 205.853771][ T5915] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 205.860525][ T5915] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.902165][ T5922] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 205.909146][ T5922] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.936195][ T5918] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 205.943144][ T5918] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 205.999345][ T5922] vhci_hcd vhci_hcd.0: Device attached [ 206.000199][ T5544] device veth1_vlan entered promiscuous mode [ 206.005457][ T5918] vhci_hcd vhci_hcd.0: Device attached [ 206.018276][ T5915] vhci_hcd vhci_hcd.0: Device attached [ 206.029246][ T4256] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 206.085208][ T5925] vhci_hcd: connection closed [ 206.085657][ T154] vhci_hcd: stop threads [ 206.094989][ T5920] vhci_hcd: connection closed [ 206.095200][ T5919] vhci_hcd: connection closed [ 206.110342][ T154] vhci_hcd: release socket [ 206.136948][ T154] vhci_hcd: disconnect device [ 206.170962][ T154] vhci_hcd: stop threads [ 206.233611][ T154] vhci_hcd: release socket [ 206.249212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 206.276612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 206.298897][ T154] vhci_hcd: disconnect device [ 206.314335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 206.482843][ T4256] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 206.491286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 206.545525][ T4256] usb usb40-port1: unable to enumerate USB device [ 206.737000][ T4283] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 206.797530][ T5923] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 206.871501][ T5544] device veth0_macvtap entered promiscuous mode [ 207.256997][ T154] vhci_hcd: stop threads [ 207.261521][ T154] vhci_hcd: release socket [ 207.269620][ T5544] device veth1_macvtap entered promiscuous mode [ 207.341940][ T154] vhci_hcd: disconnect device [ 207.436538][ T5953] loop3: detected capacity change from 0 to 1024 [ 207.452576][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.520541][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.587073][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.705459][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.768380][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.782288][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.793108][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.804022][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.815627][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.826769][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.860663][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.932247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.942874][ T5972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 207.949991][ T5972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.960530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.970882][ T5972] vhci_hcd vhci_hcd.0: Device attached [ 208.047531][ T5976] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 208.054321][ T5976] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.087184][ T5976] vhci_hcd vhci_hcd.0: Device attached [ 208.110765][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.386691][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.397102][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.407778][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.418247][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.429495][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.439678][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.452064][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.462526][ T5544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.491261][ T5544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.503304][ T5976] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 209.531881][ T5981] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 209.538599][ T5981] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 209.548853][ T5544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.587847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.616790][ T5972] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 209.617810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.623641][ T5972] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 209.690335][ T5977] vhci_hcd: connection closed [ 209.690906][ T5973] vhci_hcd: connection closed [ 209.691457][ T154] vhci_hcd: stop threads [ 209.730225][ T154] vhci_hcd: release socket [ 209.734314][ T5544] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.737469][ T154] vhci_hcd: disconnect device [ 209.750136][ T5982] vhci_hcd: connection closed [ 209.751585][ T5981] vhci_hcd vhci_hcd.0: Device attached [ 209.762955][ T5544] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.771876][ T154] vhci_hcd: stop threads [ 209.776601][ T154] vhci_hcd: release socket [ 209.780134][ T5544] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.790583][ T5985] vhci_hcd: connection closed [ 209.791042][ T5972] vhci_hcd vhci_hcd.0: Device attached [ 209.816575][ T154] vhci_hcd: disconnect device [ 209.818221][ T5544] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.838451][ T154] vhci_hcd: stop threads [ 209.843030][ T154] vhci_hcd: release socket [ 209.869151][ T154] vhci_hcd: disconnect device [ 209.881621][ T154] vhci_hcd: stop threads [ 209.885962][ T154] vhci_hcd: release socket [ 209.921129][ T154] vhci_hcd: disconnect device [ 210.117097][ T4249] Bluetooth: hci3: command 0x0409 tx timeout [ 211.133256][ T6001] loop5: detected capacity change from 0 to 512 [ 211.548800][ T4322] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.607086][ T6001] EXT4-fs (loop5): inline encryption not supported [ 211.614968][ T6001] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 211.622887][ T6001] EXT4-fs (loop5): Test dummy encryption mode enabled [ 211.645524][ T6001] EXT4-fs (loop5): orphan cleanup on readonly fs [ 211.652257][ T6001] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.373: invalid indirect mapped block 131072 (level 2) [ 211.685595][ T6001] EXT4-fs (loop5): Remounting filesystem read-only [ 211.692915][ T6001] EXT4-fs (loop5): 1 truncate cleaned up [ 211.699253][ T6001] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,inlinecrypt,noblock_validity,abort,mblk_io_submit,data_err=ignore,bsdgroups,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 211.893000][ T4283] vhci_hcd: vhci_device speed not set [ 212.008550][ T4322] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.196838][ T4249] Bluetooth: hci3: command 0x041b tx timeout [ 212.388971][ T4322] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.480338][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.516938][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.547936][ T4322] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.668895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.735273][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.779979][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.882831][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.963533][ T5978] chnl_net:caif_netlink_parms(): no params data found [ 213.268413][ T4322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.767704][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 216.273338][ T6044] loop2: detected capacity change from 0 to 256 [ 216.839794][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 216.937621][ T6052] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 216.944399][ T6052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.961636][ T6044] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 216.992201][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.000674][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.009445][ T5978] device bridge_slave_0 entered promiscuous mode [ 217.021816][ T6052] vhci_hcd vhci_hcd.0: Device attached [ 217.045604][ T4322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.065424][ T6052] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(13) [ 217.072468][ T6052] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.108435][ T6052] vhci_hcd vhci_hcd.0: Device attached [ 217.235345][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.243155][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.255901][ T5978] device bridge_slave_1 entered promiscuous mode [ 217.271838][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 217.281392][ T6061] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(19) [ 217.288425][ T6061] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 217.328931][ T6060] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 217.335782][ T6060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 217.359538][ T6052] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.376826][ T4256] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 217.395847][ T6061] vhci_hcd vhci_hcd.0: Device attached [ 217.452176][ T4322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.488894][ T6070] loop7: detected capacity change from 0 to 8 [ 217.547248][ T6060] vhci_hcd vhci_hcd.0: Device attached [ 217.574139][ T4322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.776683][ T5978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.816679][ T6057] vhci_hcd: connection closed [ 217.817253][ T4465] vhci_hcd: stop threads [ 217.818525][ T6063] vhci_hcd: connection closed [ 217.823833][ T4465] vhci_hcd: release socket [ 217.827209][ T6062] vhci_hcd: connection closed [ 217.832473][ T6054] vhci_hcd: connection reset by peer [ 217.854859][ T4465] vhci_hcd: disconnect device [ 217.887364][ T4465] vhci_hcd: stop threads [ 217.897970][ T4465] vhci_hcd: release socket [ 217.910432][ T4465] vhci_hcd: disconnect device [ 217.916266][ T5978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.926510][ T4465] vhci_hcd: stop threads [ 217.931417][ T4465] vhci_hcd: release socket [ 217.938753][ T6070] SQUASHFS error: lzo decompression failed, data probably corrupt [ 217.954999][ T4465] vhci_hcd: disconnect device [ 217.965355][ T4465] vhci_hcd: stop threads [ 217.978077][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 217.993038][ T4465] vhci_hcd: release socket [ 218.008161][ T4465] vhci_hcd: disconnect device [ 218.146469][ T6070] SQUASHFS error: Failed to read block 0x0: -5 [ 218.526914][ T4800] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 218.912262][ T6070] SQUASHFS error: Unable to read data cache entry [0] [ 218.948121][ T6070] SQUASHFS error: Unable to read page, block 0, size ff [ 218.976998][ T4800] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 218.991004][ T6070] SQUASHFS error: Unable to read data cache entry [0] [ 219.056928][ T4800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.073200][ T6070] SQUASHFS error: Unable to read page, block 0, size ff [ 219.233814][ T4800] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 219.247018][ T4800] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 219.292821][ T5978] team0: Port device team_slave_0 added [ 219.337114][ T4800] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.372339][ T5978] team0: Port device team_slave_1 added [ 219.381677][ T4800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.447340][ T4800] usb 6-1: SerialNumber: syz [ 219.668372][ T6070] SQUASHFS error: lzo decompression failed, data probably corrupt [ 219.683284][ T6070] SQUASHFS error: Failed to read block 0x0: -5 [ 219.691851][ T6070] SQUASHFS error: lzo decompression failed, data probably corrupt [ 219.700231][ T6070] SQUASHFS error: Failed to read block 0x0: -5 [ 219.706834][ T26] audit: type=1800 audit(1761045079.354:18): pid=6070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.384" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 219.828232][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.845665][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.909158][ T5978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.920921][ T4322] tipc: Left network mode [ 219.943784][ T5978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.951306][ T5978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.992959][ T5978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.910896][ T4256] vhci_hcd: vhci_device speed not set [ 224.921875][ T4242] usb 6-1: USB disconnect, device number 3 [ 225.290729][ T5978] device hsr_slave_0 entered promiscuous mode [ 225.312374][ T6122] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 225.319896][ T6122] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 225.330907][ T5978] device hsr_slave_1 entered promiscuous mode [ 225.344806][ T5978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.363706][ T6118] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 225.370799][ T6118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 225.376967][ T5978] Cannot create hsr debugfs directory [ 225.446496][ T6125] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(17) [ 225.453228][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 225.471035][ T6122] vhci_hcd vhci_hcd.0: Device attached [ 225.471066][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 225.493042][ T6118] vhci_hcd vhci_hcd.0: Device attached [ 225.649117][ T6123] vhci_hcd: connection closed [ 225.649167][ T6127] vhci_hcd: connection closed [ 225.651182][ T4465] vhci_hcd: stop threads [ 225.673189][ T6121] vhci_hcd: connection closed [ 225.711925][ T4465] vhci_hcd: release socket [ 225.714829][ T6139] loop5: detected capacity change from 0 to 128 [ 225.774017][ T4465] vhci_hcd: disconnect device [ 225.799921][ T4256] usb 43-1: device descriptor read/64, error -110 [ 226.689094][ T4465] vhci_hcd: stop threads [ 226.691656][ T4228] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 226.693666][ T4465] vhci_hcd: release socket [ 226.694592][ T4465] vhci_hcd: disconnect device [ 226.744364][ T4465] vhci_hcd: stop threads [ 226.769528][ T4465] vhci_hcd: release socket [ 226.781807][ T4465] vhci_hcd: disconnect device [ 226.826974][ T4256] vhci_hcd: vhci_device speed not set [ 227.157472][ T6155] loop7: detected capacity change from 0 to 1024 [ 227.237847][ T6155] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 227.797327][ T6155] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,nombcache,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 227.897140][ T4228] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 227.918701][ T4228] usb usb44-port1: attempt power cycle [ 228.349450][ T4228] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 228.677036][ T4228] usb usb44-port1: Cannot enable. Maybe the USB cable is bad? [ 228.870545][ T4228] usb usb44-port1: unable to enumerate USB device [ 228.917435][ T6171] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 228.925239][ T6171] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 229.418806][ T6171] vhci_hcd vhci_hcd.0: Device attached [ 229.527425][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.401'. [ 229.557829][ T6184] loop5: detected capacity change from 0 to 1024 [ 229.640321][ T6172] vhci_hcd: connection closed [ 229.640630][ T154] vhci_hcd: stop threads [ 229.686876][ T4249] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 229.692054][ T6184] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.947015][ T154] vhci_hcd: release socket [ 230.773874][ T154] vhci_hcd: disconnect device [ 232.242366][ T6209] binder: BINDER_SET_CONTEXT_MGR already set [ 232.248702][ T6209] binder: 6208:6209 ioctl 4018620d 200000000040 returned -16 [ 233.176272][ T5978] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 234.005759][ T5978] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 234.035601][ T6230] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(11) [ 234.042594][ T6230] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 234.062438][ T6230] vhci_hcd vhci_hcd.0: Device attached [ 234.091350][ T5978] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 234.107439][ T6237] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(17) [ 234.114553][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 234.133821][ T6234] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(14) [ 234.140978][ T6234] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 234.158448][ T5978] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 234.241643][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 234.267420][ T6234] vhci_hcd vhci_hcd.0: Device attached [ 234.293903][ T6230] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(13) [ 234.301141][ T6230] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.366000][ T6230] vhci_hcd vhci_hcd.0: Device attached [ 234.383244][ T6234] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 234.582969][ T6245] vhci_hcd: connection closed [ 234.585965][ T6238] vhci_hcd: connection closed [ 234.597203][ T6235] vhci_hcd: connection closed [ 234.797186][ T6231] vhci_hcd: connection closed [ 234.881794][ T154] vhci_hcd: stop threads [ 235.065089][ T154] vhci_hcd: release socket [ 235.107022][ T154] vhci_hcd: disconnect device [ 235.142925][ T154] vhci_hcd: stop threads [ 235.176866][ T4283] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 235.185451][ T6233] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 235.266922][ T4249] vhci_hcd: vhci_device speed not set [ 235.286860][ T154] vhci_hcd: release socket [ 235.366920][ T154] vhci_hcd: disconnect device [ 235.372830][ T154] vhci_hcd: stop threads [ 235.382532][ T154] vhci_hcd: release socket [ 235.466821][ T154] vhci_hcd: disconnect device [ 235.472366][ T154] vhci_hcd: stop threads [ 235.531471][ T6273] fuse: Unknown parameter 'grou00000000000000000000' [ 235.642755][ T154] vhci_hcd: release socket [ 235.774296][ T154] vhci_hcd: disconnect device [ 235.816079][ T6271] loop3: detected capacity change from 0 to 1024 [ 236.177783][ T5978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.219992][ T6271] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 236.342316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.358055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.481444][ T5978] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.467785][ T6285] binder: BINDER_SET_CONTEXT_MGR already set [ 237.474277][ T6285] binder: 6280:6285 ioctl 4018620d 200000000040 returned -16 [ 237.590661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.755313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.810491][ T6283] loop2: detected capacity change from 0 to 7 [ 237.952971][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.961548][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.988198][ T6283] Dev loop2: unable to read RDB block 7 [ 238.088840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.098370][ T6283] loop2: unable to read partition table [ 238.104584][ T6283] loop2: partition table beyond EOD, truncated [ 238.111230][ T6283] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.169935][ T3562] Dev loop2: unable to read RDB block 7 [ 238.176031][ T3562] loop2: unable to read partition table [ 238.209299][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.229310][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.255658][ T3562] loop2: partition table beyond EOD, truncated [ 238.260272][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.269575][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.388981][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.410493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.448375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.507332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.087626][ T6304] loop2: detected capacity change from 0 to 1024 [ 239.198510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.255919][ T6300] netlink: 52 bytes leftover after parsing attributes in process `syz.3.432'. [ 239.497751][ T6312] fuse: Unknown parameter 'grou00000000000000000000' [ 239.531810][ T6313] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 239.538829][ T6313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 239.573564][ T6317] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 239.580410][ T6317] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.600449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.635047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.663604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.753935][ T6317] vhci_hcd vhci_hcd.0: Device attached [ 239.811675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.867624][ T6313] vhci_hcd vhci_hcd.0: Device attached [ 240.366899][ T4283] vhci_hcd: vhci_device speed not set [ 240.702830][ T6318] vhci_hcd: connection closed [ 240.704967][ T4256] usb 39-2: new high-speed USB device number 4 using vhci_hcd [ 240.712862][ T495] vhci_hcd: stop threads [ 240.727187][ T6314] vhci_hcd: connection closed [ 240.736944][ T495] vhci_hcd: release socket [ 240.819682][ T495] vhci_hcd: disconnect device [ 240.829740][ T495] vhci_hcd: stop threads [ 240.840883][ T495] vhci_hcd: release socket [ 240.860781][ T6338] loop2: detected capacity change from 0 to 1024 [ 241.018644][ T495] vhci_hcd: disconnect device [ 241.028789][ T6338] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.045382][ T4322] device hsr_slave_0 left promiscuous mode [ 241.068065][ T4322] device hsr_slave_1 left promiscuous mode [ 241.075013][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.083571][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.092299][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.100932][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.110111][ T4322] device bridge_slave_1 left promiscuous mode [ 241.127344][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.153112][ T4322] device bridge_slave_0 left promiscuous mode [ 241.170946][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.321125][ T4322] device hsr_slave_0 left promiscuous mode [ 241.390648][ T4322] device hsr_slave_1 left promiscuous mode [ 241.483096][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.504529][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.518703][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.528575][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.542998][ T4322] device bridge_slave_1 left promiscuous mode [ 241.559755][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.582469][ T4322] device bridge_slave_0 left promiscuous mode [ 241.594777][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.639878][ T4322] device veth1_macvtap left promiscuous mode [ 241.646479][ T4322] device veth0_macvtap left promiscuous mode [ 241.672350][ T4322] device veth1_vlan left promiscuous mode [ 241.708863][ T4322] device veth0_vlan left promiscuous mode [ 241.735675][ T4322] device veth1_macvtap left promiscuous mode [ 241.757328][ T4322] device veth0_macvtap left promiscuous mode [ 241.779327][ T4322] device veth1_vlan left promiscuous mode [ 241.794429][ T4322] device veth0_vlan left promiscuous mode [ 242.432820][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 242.456398][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 242.512415][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.569882][ T6364] loop3: detected capacity change from 0 to 1024 [ 242.646067][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.054935][ T4322] bond0 (unregistering): Released all slaves [ 243.422927][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 243.499604][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 243.514451][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.519261][ T6368] fuse: Unknown parameter 'grou00000000000000000000' [ 243.605405][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.758077][ T4322] bond0 (unregistering): Released all slaves [ 243.829547][ T5978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.852565][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 243.873568][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 243.895526][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.155341][ T5978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.170962][ T6352] netlink: 52 bytes leftover after parsing attributes in process `syz.7.443'. [ 244.242045][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 244.265145][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 244.373249][ T6384] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 244.380194][ T6384] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 244.405567][ T6384] vhci_hcd vhci_hcd.0: Device attached [ 244.421577][ T6384] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(13) [ 244.428334][ T6384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 244.449465][ T6388] loop7: detected capacity change from 0 to 764 [ 244.467007][ T6384] vhci_hcd vhci_hcd.0: Device attached [ 244.490095][ T6396] 9pnet: Insufficient options for proto=fd [ 244.501968][ T6388] rock: directory entry would overflow storage [ 244.508460][ T6388] rock: sig=0x4654, size=5, remaining=4 [ 244.556247][ T6384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 244.798089][ T6393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 244.805157][ T6393] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 245.037652][ T6393] vhci_hcd vhci_hcd.0: Device attached [ 245.060367][ T6389] vhci_hcd: connection reset by peer [ 245.060770][ T6395] vhci_hcd: connection closed [ 245.330861][ T6407] loop5: detected capacity change from 0 to 8 [ 245.348763][ T6385] vhci_hcd: connection closed [ 245.354535][ T9] vhci_hcd: stop threads [ 245.522622][ T6407] SQUASHFS error: lzo decompression failed, data probably corrupt [ 245.533562][ T6407] SQUASHFS error: Failed to read block 0x0: -5 [ 245.543965][ T6407] SQUASHFS error: Unable to read data cache entry [0] [ 245.552191][ T6407] SQUASHFS error: Unable to read page, block 0, size ff [ 245.589271][ T6407] SQUASHFS error: Unable to read data cache entry [0] [ 245.622184][ T6407] SQUASHFS error: Unable to read page, block 0, size ff [ 245.651965][ T9] vhci_hcd: release socket [ 245.728548][ T6407] SQUASHFS error: lzo decompression failed, data probably corrupt [ 245.756263][ T9] vhci_hcd: disconnect device [ 245.782792][ T6407] SQUASHFS error: Failed to read block 0x0: -5 [ 245.809556][ T6390] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 245.828525][ T6407] SQUASHFS error: lzo decompression failed, data probably corrupt [ 245.911176][ T6407] SQUASHFS error: Failed to read block 0x0: -5 [ 245.947836][ T26] audit: type=1800 audit(1761045106.601:19): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.453" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 245.967266][ T9] vhci_hcd: stop threads [ 246.000128][ T9] vhci_hcd: release socket [ 246.006833][ T9] vhci_hcd: disconnect device [ 246.083210][ T9] vhci_hcd: stop threads [ 246.087108][ T4256] vhci_hcd: vhci_device speed not set [ 246.109736][ T9] vhci_hcd: release socket [ 246.126300][ T9] vhci_hcd: disconnect device [ 246.574128][ T6427] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.667841][ T6429] loop2: detected capacity change from 0 to 1024 [ 247.300089][ T4228] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 247.388444][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 247.398374][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 247.520804][ T6434] netlink: 52 bytes leftover after parsing attributes in process `syz.2.458'. [ 247.556659][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 247.595753][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 247.647633][ T5978] device veth0_vlan entered promiscuous mode [ 247.668150][ T4228] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 247.669169][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 247.716006][ T4228] usb usb40-port1: attempt power cycle [ 247.826752][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.848657][ T4800] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 247.908325][ T5978] device veth1_vlan entered promiscuous mode [ 247.954335][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 247.964127][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.037978][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.093224][ T1243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.116990][ T4800] usb 4-1: Using ep0 maxpacket: 16 [ 248.245069][ T4800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.270039][ T5978] device veth0_macvtap entered promiscuous mode [ 248.317205][ T4228] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 248.325302][ T4800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.547291][ T4800] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.648085][ T5978] device veth1_macvtap entered promiscuous mode [ 248.661205][ T4800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.834981][ T4800] usb 4-1: Product: syz [ 248.938175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.946498][ T4800] usb 4-1: Manufacturer: syz [ 248.966870][ T4800] usb 4-1: SerialNumber: syz [ 248.987867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.998065][ T6452] 9pnet: Insufficient options for proto=fd [ 249.092693][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.212572][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.230567][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.297275][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.320600][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.331540][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.341671][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.352454][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.363601][ T4228] usb usb40-port1: Cannot enable. Maybe the USB cable is bad? [ 249.373021][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.381098][ T4228] usb usb40-port1: unable to enumerate USB device [ 249.409255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.434550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.727830][ T4800] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 249.749163][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.891556][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.055475][ T4800] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 250.073484][ T4800] usb 4-1: USB disconnect, device number 7 [ 250.107281][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.175525][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.202265][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.220049][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.220108][ T6463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.273630][ T5978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.305494][ T5978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.318722][ T5062] udevd[5062]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 250.343708][ T5978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.406357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 250.423724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 250.448439][ T5978] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.493904][ T5978] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.530668][ T5978] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.558605][ T5978] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.651395][ T6470] loop3: detected capacity change from 0 to 22 [ 250.703765][ T6470] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 250.736081][ T6470] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 250.808251][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.832398][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.878554][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.896855][ T4249] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 250.903395][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.928293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.955693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.936935][ T4249] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 251.946237][ T4249] usb 8-1: config 0 has no interface number 0 [ 251.954010][ T4249] usb 8-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 251.987711][ T4249] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.199301][ T4249] usb 8-1: config 0 descriptor?? [ 252.212764][ T6503] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 252.249375][ T4249] usb-storage 8-1:0.125: USB Mass Storage device detected [ 252.406601][ T6512] netlink: 52 bytes leftover after parsing attributes in process `syz.8.476'. [ 252.472565][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.7.469'. [ 252.590680][ T4293] usb 8-1: USB disconnect, device number 2 [ 253.047979][ T6529] loop5: detected capacity change from 0 to 22 [ 253.083216][ T6529] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 253.109310][ T6473] syz.7.469 (6473) used greatest stack depth: 20416 bytes left [ 253.165455][ T6529] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 253.249454][ T6532] loop3: detected capacity change from 0 to 1024 [ 253.754780][ T6532] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.878356][ T6545] loop7: detected capacity change from 0 to 1024 [ 254.981310][ T6554] loop2: detected capacity change from 0 to 512 [ 255.153580][ T6556] netlink: 52 bytes leftover after parsing attributes in process `syz.5.488'. [ 255.471418][ T6554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 255.894638][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.906370][ T6554] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.956659][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.779863][ T6596] loop7: detected capacity change from 0 to 1024 [ 258.930528][ T6596] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.798561][ T1111] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 259.858306][ T1111] Bluetooth: hci1: Injecting HCI hardware error event [ 260.068931][ T4196] Bluetooth: hci1: hardware error 0x00 [ 261.305647][ T6656] loop2: detected capacity change from 0 to 1024 [ 261.576360][ T6656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.600948][ T6667] capability: warning: `syz.3.515' uses deprecated v2 capabilities in a way that may be insecure [ 261.623295][ T26] audit: type=1326 audit(1761045122.271:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 261.651329][ T26] audit: type=1326 audit(1761045122.301:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 261.758913][ T26] audit: type=1326 audit(1761045122.411:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 261.909106][ T26] audit: type=1326 audit(1761045122.411:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 262.028250][ T26] audit: type=1326 audit(1761045122.411:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 262.323777][ T26] audit: type=1326 audit(1761045122.411:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 262.535875][ T26] audit: type=1326 audit(1761045122.441:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf696e5810 code=0x7ffc0000 [ 262.567006][ T26] audit: type=1326 audit(1761045122.441:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf696e87f7 code=0x7ffc0000 [ 262.658914][ T26] audit: type=1326 audit(1761045122.441:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf696e6fc9 code=0x7ffc0000 [ 262.791022][ T26] audit: type=1326 audit(1761045122.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbf696e87f7 code=0x7ffc0000 [ 264.405259][ T6726] loop3: detected capacity change from 0 to 128 [ 264.778702][ T4249] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 265.086823][ T4465] wlan1: Trigger new scan to find an IBSS to join [ 265.879423][ T4249] usb 9-1: config 0 has an invalid interface number: 125 but max is 0 [ 266.102055][ T4249] usb 9-1: config 0 has no interface number 0 [ 266.407673][ T4249] usb 9-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 267.538751][ T4249] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.994626][ T4249] usb 9-1: config 0 descriptor?? [ 268.037974][ T4249] usb 9-1: can't set config #0, error -71 [ 268.075214][ T4249] usb 9-1: USB disconnect, device number 2 [ 268.200426][ T6758] fuse: Bad value for 'user_id' [ 268.216786][ T4467] wlan1: Creating new IBSS network, BSSID be:bb:d6:d9:76:12 [ 269.563137][ T6770] binder: BINDER_SET_CONTEXT_MGR already set [ 269.569667][ T6770] binder: 6765:6770 ioctl 4018620d 200000000040 returned -16 [ 271.947018][ T4293] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 272.203856][ T6811] fuse: Bad value for 'user_id' [ 272.213174][ T4293] usb 8-1: Using ep0 maxpacket: 16 [ 272.337029][ T4293] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.378820][ T4293] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.797615][ T4293] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.913900][ T4293] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.056058][ T4293] usb 8-1: Product: syz [ 273.238000][ T4293] usb 8-1: Manufacturer: syz [ 273.368980][ T4293] usb 8-1: SerialNumber: syz [ 274.412123][ T6834] binder: BINDER_SET_CONTEXT_MGR already set [ 274.418860][ T6834] binder: 6831:6834 ioctl 4018620d 200000000040 returned -16 [ 275.084597][ T4293] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 275.125899][ T4293] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 275.161877][ T6840] loop7: detected capacity change from 0 to 128 [ 275.228574][ T4293] usb 8-1: USB disconnect, device number 3 [ 275.294080][ T6844] loop2: detected capacity change from 0 to 256 [ 275.642214][ T5062] udevd[5062]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.862708][ T6849] fuse: Bad value for 'user_id' [ 277.326800][ T4235] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 278.436826][ T4800] Bluetooth: hci0: command 0x0406 tx timeout [ 278.507105][ T4235] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 278.596776][ T4235] usb 8-1: config 0 has no interface number 0 [ 278.655953][ T4235] usb 8-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 278.745258][ T4235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.830907][ T4235] usb 8-1: config 0 descriptor?? [ 278.914209][ T6922] loop5: detected capacity change from 0 to 16 [ 279.369273][ T6922] erofs: (device loop5): mounted with root inode @ nid 36. [ 279.675848][ T4235] usb-storage 8-1:0.125: USB Mass Storage device detected [ 279.826219][ T4235] usb 8-1: USB disconnect, device number 4 [ 280.174206][ T6938] fuse: Bad value for 'fd' [ 280.470256][ T6944] loop2: detected capacity change from 0 to 256 [ 280.520204][ T6944] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.671265][ T6947] loop7: detected capacity change from 0 to 1024 [ 281.366810][ T6944] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 281.439157][ T6944] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 281.938287][ T6963] loop5: detected capacity change from 0 to 764 [ 281.990337][ T6963] rock: directory entry would overflow storage [ 281.996759][ T6963] rock: sig=0x4654, size=5, remaining=4 [ 283.253864][ T6095] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 284.218032][ T6095] usb 9-1: config 0 has an invalid interface number: 125 but max is 0 [ 284.248275][ T6095] usb 9-1: config 0 has no interface number 0 [ 284.286834][ T6095] usb 9-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 284.336884][ T6095] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.454549][ T6095] usb 9-1: config 0 descriptor?? [ 284.498787][ T6095] usb-storage 9-1:0.125: USB Mass Storage device detected [ 286.130526][ T7036] loop5: detected capacity change from 0 to 764 [ 286.535179][ T7036] rock: directory entry would overflow storage [ 286.541618][ T7036] rock: sig=0x4654, size=5, remaining=4 [ 287.120657][ T2289] usb 9-1: USB disconnect, device number 3 [ 287.304593][ T7052] loop8: detected capacity change from 0 to 2048 [ 287.456328][ T7052] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 287.514658][ T7052] UDF-fs: Scanning with blocksize 512 failed [ 287.543667][ T7052] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 287.567929][ T7052] UDF-fs: Scanning with blocksize 1024 failed [ 287.588406][ T7052] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 287.621681][ T7052] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 287.643243][ T7052] UDF-fs: Scanning with blocksize 2048 failed [ 287.664478][ T7052] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 287.695394][ T7052] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 287.723497][ T7052] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 287.744749][ T7052] UDF-fs: Scanning with blocksize 4096 failed [ 287.770814][ T7052] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 287.871522][ T7065] loop5: detected capacity change from 0 to 512 [ 288.577574][ T7065] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 288.674453][ T7065] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.296938][ T2289] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 291.751992][ T2289] usb 6-1: config 0 has an invalid interface number: 125 but max is 0 [ 291.765223][ T2289] usb 6-1: config 0 has no interface number 0 [ 291.777542][ T2289] usb 6-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 291.792116][ T2289] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.828489][ T2289] usb 6-1: config 0 descriptor?? [ 291.869896][ T2289] usb-storage 6-1:0.125: USB Mass Storage device detected [ 291.917529][ T7133] fuse: Bad value for 'fd' [ 291.976411][ T7139] loop8: detected capacity change from 0 to 512 [ 292.376538][ T6095] usb 6-1: USB disconnect, device number 4 [ 292.886455][ T7139] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 293.014831][ T7139] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.051784][ T7160] loop7: detected capacity change from 0 to 764 [ 293.062878][ T7160] rock: directory entry would overflow storage [ 293.069513][ T7160] rock: sig=0x4654, size=5, remaining=4 [ 295.594500][ T7188] fuse: Bad value for 'fd' [ 297.708254][ T7225] loop5: detected capacity change from 0 to 764 [ 297.775535][ T7225] rock: directory entry would overflow storage [ 297.781805][ T7225] rock: sig=0x4654, size=5, remaining=4 [ 298.219781][ T495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 298.470002][ T7230] netlink: 40 bytes leftover after parsing attributes in process `syz.8.638'. [ 298.712401][ T7237] fuse: Bad value for 'fd' [ 298.886502][ T7241] loop8: detected capacity change from 0 to 8 [ 298.995358][ T7241] SQUASHFS error: zstd decompression error: 2 [ 299.024775][ T7241] SQUASHFS error: zstd decompression failed, data probably corrupt [ 299.054804][ T7241] SQUASHFS error: Failed to read block 0x62b: -5 [ 299.089870][ T7247] SQUASHFS error: Unable to read metadata cache entry [629] [ 299.106838][ T7241] SQUASHFS error: Unable to read metadata cache entry [629] [ 299.156988][ T7247] SQUASHFS error: Unable to read directory block [629:ff26] [ 299.167065][ T7241] SQUASHFS error: Unable to read directory block [629:ff26] [ 317.320869][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.327331][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.326640][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 404.333581][ C0] rcu: 0-...!: (1 GPs behind) idle=889/1/0x4000000000000000 softirq=18401/18402 fqs=61 [ 404.344900][ C0] (t=10502 jiffies g=24181 q=84) [ 404.349943][ C0] rcu: rcu_preempt kthread starved for 10381 jiffies! g24181 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 404.363585][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 404.374874][ C0] rcu: RCU grace-period kthread stack dump: [ 404.380783][ C0] task:rcu_preempt state:R running task stack:27584 pid: 15 ppid: 2 flags:0x00004000 [ 404.392534][ C0] Call Trace: [ 404.396120][ C0] [ 404.399274][ C0] __schedule+0x11bb/0x4390 [ 404.404354][ C0] ? release_firmware_map_entry+0x190/0x190 [ 404.410675][ C0] schedule+0x11b/0x1e0 [ 404.415041][ C0] schedule_timeout+0x15c/0x280 [ 404.420124][ C0] ? console_conditional_schedule+0x40/0x40 [ 404.426057][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 404.432160][ C0] ? update_process_times+0x200/0x200 [ 404.437857][ C0] ? prepare_to_swait_event+0x331/0x350 [ 404.443761][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 404.448895][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 404.455618][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 404.460424][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 404.465987][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 404.471382][ C0] rcu_gp_kthread+0x98/0x350 [ 404.476005][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 404.481153][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 404.487357][ C0] ? __kthread_parkme+0x157/0x1b0 [ 404.492564][ C0] kthread+0x436/0x520 [ 404.496985][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 404.502397][ C0] ? kthread_blkcg+0xd0/0xd0 [ 404.507178][ C0] ret_from_fork+0x1f/0x30 [ 404.511941][ C0] [ 404.515279][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 404.521883][ C0] Sending NMI from CPU 0 to CPUs 1: [ 404.527232][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 404.528218][ C0] NMI backtrace for cpu 0 [ 404.542034][ C0] CPU: 0 PID: 7251 Comm: syz.7.642 Not tainted syzkaller #0 [ 404.550366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 404.562138][ C0] Call Trace: [ 404.565513][ C0] [ 404.568815][ C0] dump_stack_lvl+0x168/0x230 [ 404.574063][ C0] ? show_regs_print_info+0x20/0x20 [ 404.579379][ C0] ? load_image+0x3b0/0x3b0 [ 404.584086][ C0] ? try_to_wake_up+0x3d4/0x1050 [ 404.589131][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 404.594221][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 404.601448][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 404.607135][ C0] ? _raw_spin_lock+0x40/0x40 [ 404.611981][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 404.618418][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 404.624891][ C0] rcu_dump_cpu_stacks+0x22f/0x380 [ 404.630281][ C0] print_cpu_stall+0x31d/0x5f0 [ 404.635207][ C0] rcu_sched_clock_irq+0x6d8/0x1110 [ 404.640413][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 404.645358][ C0] ? account_process_tick+0x227/0x3a0 [ 404.651132][ C0] update_process_times+0x193/0x200 [ 404.656450][ C0] tick_sched_timer+0x37d/0x560 [ 404.661746][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 404.667277][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 404.673109][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 404.678696][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 404.684789][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 404.690356][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 404.697125][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 404.703435][ C0] [ 404.706441][ C0] [ 404.709378][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 404.715476][ C0] RIP: 0010:__local_bh_enable_ip+0x132/0x1b0 [ 404.721847][ C0] Code: 8a e8 92 eb 60 08 65 66 8b 05 8a 25 bb 7e 66 85 c0 75 54 bf 01 00 00 00 e8 ab fe 08 00 e8 e6 74 35 00 fb 65 8b 05 36 fc b9 7e <85> c0 75 05 e8 e5 06 b8 ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 404.742541][ C0] RSP: 0018:ffffc900031afaa0 EFLAGS: 00000286 [ 404.748919][ C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 2e8987af96bc6800 [ 404.758686][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b18a0 RDI: ffffffff8a59a880 [ 404.767631][ C0] RBP: ffffc900031afb30 R08: dffffc0000000000 R09: ffffed1027fd4481 [ 404.776946][ C0] R10: ffffed1027fd4481 R11: 1ffff11027fd4480 R12: ffffffff812bdd75 [ 404.785232][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000635f54 [ 404.793837][ C0] ? local_bh_enable+0x5/0x20 [ 404.798929][ C0] ? _local_bh_enable+0xa0/0xa0 [ 404.804088][ C0] ? rcu_is_watching+0x11/0xa0 [ 404.809238][ C0] fpu__restore_sig+0x785/0xf50 [ 404.814533][ C0] ? copy_fpstate_to_sigframe+0xb90/0xb90 [ 404.820962][ C0] ? __might_fault+0xb3/0x110 [ 404.825919][ C0] ? _copy_from_user+0x111/0x170 [ 404.831668][ C0] __ia32_sys_rt_sigreturn+0x649/0x790 [ 404.845019][ C0] ? load_gs_index+0x120/0x120 [ 404.850111][ C0] ? lock_chain_count+0x20/0x20 [ 404.856000][ C0] ? vtime_user_exit+0x2dc/0x400 [ 404.861201][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 404.866904][ C0] do_syscall_64+0x4c/0xa0 [ 404.871329][ C0] ? clear_bhb_loop+0x30/0x80 [ 404.876022][ C0] ? clear_bhb_loop+0x30/0x80 [ 404.881234][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 404.887424][ C0] RIP: 0033:0x7fee58c8cfc7 [ 404.892305][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 404.913933][ C0] RSP: 002b:00007fee56ef40e8 EFLAGS: 00000246 [ 404.920569][ C0] RAX: 00000000000000ca RBX: 00007fee58ee3fa8 RCX: 00007fee58c8cfc9 [ 404.929010][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee58ee3fa8 [ 404.937381][ C0] RBP: 00007fee58ee3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 404.946468][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.955401][ C0] R13: 00007fee58ee4038 R14: 00007ffcbbf5dc40 R15: 00007ffcbbf5dd28 [ 404.964570][ C0]