last executing test programs: 2m33.544020405s ago: executing program 0 (id=1): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208012, &(0x7f0000000080), 0x1, 0x5e4, &(0x7f00000005c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 2m33.327387762s ago: executing program 0 (id=5): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000005c0), &(0x7f0000000600)=0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') r4 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) vmsplice(r5, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001280)}, {&(0x7f00000004c0)="05a73ddcc6243cee9c29deeb283716de7be0120b24de0d84664f2f157e55090e9912219839b3efae25feeff11c45ab4c3738da67941961356beaf3ddb72801e63024da730a24e59a13f847a85509f9c412b4b8f657b73d311e5e0a793379a3496310667f85197226fd26cb942204c33bb6d241580cc4d682db7f0f5a684b1ae422c968f6c64dbfccfd840b73d522c3a5f238fc512e68300afcdc8fafe8861fac8632aa10d7c2d7f869b712985bc578a1a2cc3a5c304583628e1bb13f161e57b42031d59487e5215caba072fa9966dc9aaac4299f0d74e8edf9357dfad16c58ab7ed94bf7a05905e15c92f800d71dbd289675ba05b736cc910e21da3c0b8d8a36f1edda2461f08bee1e47d10efaf1ac7e47e1d3eca5a529546cd8589e5c637a364485ffb35842bf449b95cd697cf5f4203c58e1ea9fa8022cce358f3dc5c97ce674e65e3e3c07fb451d4fcf7ccccf325994bab0d7c0b62f6a193b8622bbc708888c739be99f512f6b72677133fe4910186ab2ae652c3ee7e2d4cb13db6f4f020b9c36913492c09fbb663a50a8be8091ffaff231bfff5f7e215a564e2766a1764b28f4122ea3ea211ac0d0b307aaeeb7b26216a2d48ffe41ae41201cd08ce1a4f8696959b5e2bcf8c6cd636c0a06062d335c2b4e1baff68bb4fb5c7f588fca5c6a27a23b36b7f8cabcc08976c34fd46ff83f4e4b40cec84b2ed54c1962b191dea6390ac2e7aa1a8ba3c4cc89f85659d37a8e0a8407430e6303cfdf954e4af2fe87a82983c5e4070a9b71069be01838374d926fdfd6385b964526d1b05acab6808551b551a9bb7b530c95d8370f273bfbc119506d02160d817a3852e21e4f41ba3801d29676fcfca4cb93f726ae59d1a684699e7fc0c7acd595baa17cf0890757aa2a8b4be8181ced0ce1c4bd30211a9b3a44779e254df4f60aa5591808d0c066c2238a663be4e4fa9219a2fea4315f6588ffe1ea69e5e01c3f79ca49e7814d371ac3c99627ed02243ed40cb43ed54f1d5bcbaac2657ab83ed446dcbdd45621ea50fdc52214696fc3893907d0547b526f4fa223f4699ee703c69950385f4a6f80f62aea5e2302a6c0b4e5e8e47528293381737467f32c2d7c19be760ca017ae0ef3ac639f0bed656a0fa442d92fb4278ca84cd1c99039ccf504d0ee016d4d70e3b526de667f2f3e3df2d81fd1877888de16fa0bba08e0870d622e7015429db272edaff475cff3a1fba0c20960dd0ffcc00119d5be3c1b255110a4ec968212d407eb096852d70386f1702a880bf9e57d2794030b76ea901a49bc41700282fa9d011021a2b6db2d4939145975d6e4d7031afb7cd36126f2134f13cda0c4b96b39e8f1fc9bca8aba144b8ea7eafd48309265a1cd722ec366d4e5f909e8e8248ed85bba925cdf55261974a50e96847c55e7209a422f842173e8911edf882e37f5f19d9844b4519754bf02c3974c57e24d0122e30dcdbeee21445501d501b97057cd229cebcc2a49b025f4497d2a8112a644e16a1ffa7f4e017919666b239a69f91191b44b870881890389b68d46b25141bd692303711e35487b6d133ef2828318562e1820bdf364226b2ad12eb7696b9c702d00f833fbb8de56a5cb805858abcf0e83682b9d9aa34426c0c2173fccaebb49219a5ae83f8b3399cc1841dae2d5af6502794954b53266e327df94797f2abef55e1b608fa4cce8afc372663c932526923b1bce134a5d2396dfe30bf44e1e8b12be51907b5c923790aa063023db874f883c8f2d195a46e053e0c6bec718093f29129f3130822c491d2319fe269f553cbca94424a86a69066d7aabc0de2c60975b799d792f1e377770ff7b8de133d92f841ce5aca3f5abf14682290e8a408ec07428ed47ad32a402eff93a263bffd7339194df2f410ee9bec502536d3c7815bb696133d73ff1a6698cca2306c5a5fcc1c1b3930d629520dc093053fc2367aaac4cd8a28c88b120929f85e9483a58801aaa64d964973fe91d4865490d5a870dd25cb7cf3af52dd3703a2a91b119ad1a1f9eff4778c1686eca708ca43713615a5d8d7cfd84035d95b97346554fa9bc1cdc31e20d0fd55e976de350857bc719a322e69355f08c50668374a783cfa17761f292fec7bae2525f182900d48e3b1cc004761c3f9ba403ea60290f2237c04912a641393341e70cb07683317d8fd50b765956b7261885cf5c7c5681484b8598989a7f4c753844b9d94cc3ffa6668b29646b9526ea57da675b80d63f8c11f6afce661b2eba4a260259be769408d1abb755be532bd70eb46282d14fe3e1db9c736d065902a5e829d645666b4f616f5ea7f3fee3a5c061cb50b664310a0655b593be77cfe8c46eb6d1614686e90214c94cfec5fc1583d4e3e6416237aed16da7c3811e641003574276b7d6f9f0b7d7636aeed788c203b996f7b0ea3784cb96b9967ab18ca59dbb78688001e445740db815588c0a32db410b8e3cee13aed0ddd473e8b2a54ebff28b2f958d4337bec39c5032ab142c59aff96d85f9e54142ae7111cb2606ef669451d66ace8708a39bb6ea0808055c9ac2e6b3f46039f598b923fb31099572853962e3f3f35c398c3d9aa323aa58d0ddf095d6f169f6ca2fca411279eda7255403b22047af619dfd532affeef879bb60ebcd534c76e290922f7001f41168984f80791d69f04cfba3bf07fd0ac980f67bd407614eb666e6dd43a337d7771bc85164567742fce75b1991964454339fbd3071a15bd35040c10f3e14a0808f5adb44c4e2cca506648a1c0ee5bc7feb7f98e84248e9df43a11df67d7d602bb08b1bcf664fb6d4ba1b8b80eefe6443c78a2e32256c98fb1f86cd8daf65392f03f0e4967281f4ab85545dbc2a65e14645697589b4205ea0cfb7d5e8d870b76fd1ab5ca51b186837f68589795610cb6f58a204746af1e690de15dc584d57d3c73aeb136b70217e21d8b0bf7160d3c61d179cea631289c966689be0092eb5fc96b6a91f8bbf42f4ef1a6acb596be60217f00ae7c0f8079c8170be83d4bd9d3ca62f31adfd47f77dc9cfa85f1f683ae75a4bc98eb0d54fd69abf71954628579f978a15f52fc08ee0ae12b50d4d696d07a36c9e05202ccbb1f8183c746d0f4064ab70625a085774fa1a49e44892bbf5695ed3bb31eaf826659ef5ea4665b98153c3d8ed258011198d4f4b92038c5525705e0e554c7c9bb6061b05c421e03682bddb13b04e9de8f6cede820889e256fc63fe2b1874b87a59c257e33426ca63eee700aa556dcccb2ad73599bf6fac4b425e8ef793ae163b12c9526f7a502032ed8b7dfbfe3fbfedd271e8742389e91062b060d16dc65577fe5e6c3587809d45d3bc79c3665cddee421e56aa9f5aa3a67ee7a7aae302cf842dc8edd45cad7aca7cb1281de0707b11ce716b0879621f8ba8a645ac8ccc6fe3fbecdd03c5401942636cf0efbd4fc813b943caf6f9fed3e0cc7b4aef5af2e6c496804aa5dce5d78e7ce6f54b92f209d24d136059b639c8970f2e5d252bc245d5aac171fcda777803bcea7ac76b0bb163169055eaf08d066db68c1c43cf69fa87736844b5327046308dfce87ad7a7b0d313f8020361ddb3767ad6f07bd1e0c03f44ca1e1e4318c7f6f77cf359075d389a47fec9bc6d5134af206dd27f423daf14b50a1ad7b7b6ed2aac6e0f1913631465f2e6836efafa3f1e963152072a30652b85cd916e42b1394f4a92b351b50439d66baae3c09243ab03261901e338ef10fd4de2ee0e7f8732135dedb95306881de7ec65be735ed5048a96ec0acb2154da6cf85e4f80e5d1b0765e6fe130bff73c91621cc58ec336a0ec0981848dda216151dc1fab65d6032c88dc6231f30fe6b229b9869ab4703550bd9093d6ff3252ea106fce841fdc8af766d4b65e8ed228093c537490195cf9dfb3ea163543551ce1013ab04fc68036b65e0c4d163238ff298968217afac37fd9b3383069867ff7d37c840b113f77ceedf3db264653d5d937353a5e140367d6d3bd5f5650af8bf1565fffe5f3b302d30ab603e346bfa5c34fc9a20455adda440b129a0b7d656590fecb6b0eec4890db30c1dc72450356c7195cf9644f99f8250835b349bdccc56d7e9299c38d17e75ca799ea26c4575004bb3bd5837cad7e2cd37572ece54c011cc330b13fd539c37f07f11613e8080ae041addee1d3730acfe21227be404ef7156f3aefce514c0f617b74a88344eae9b70fa47032ca4abf7aa9ab70840c14f6de6adff1a65bf762ea00cd6fb9b0b670ad64b982dad6fd82fb169f0c1962ea5b410c05283077555a753c431fdb06f3921d2f9a4404a748c4531782d9573d71251fc4c009b2c657df9a0d55992d7bfc7889c9208fe564c7793f65fc22384b72151aafe2f6ab5bee7adfd990a7da1dbcba3d556cef54cfe3410940c0431f2616299f4bc232e6ba871e2074990f8285540c166311c46e114d264351ab98cded16e316065d26188293b2c01bffb2a7a2c429fd08c590627ffa681b0cc707bca6079400197145f05a33646b567fe38205f8b01682b61734add033039e9e23691b1239700cc77b6f501624441e2ca4db0ff65230ebdbe5d28fe490ba64a28eaa667cdafab55d875e4149d2f28e079929d7139c13c65745b019b9cc667596ba7984d20b4b1a5d18d25bbccf3272740eed4a22e297d36e21edbe3b8cfa6246c4a369e014f46f0bbaf0697e4bf1dbf4e50b4a4c57d7487d46a467378c30579ee8702dad4f639939ef1405405270a63ab280c71d9b1f57025687c5b7e85a93c4a7dc1e73d89b3f8f1c3e1b5019f7674d0e5a515f155228b3e4ace17d06f7d4acc97908054ce093e81dd6ad881b13372cd2df20c2ef1b4b41bc3b1bea69867d7b5502562db67f5c07aa831682ce73d10faa4e7c4bcae4cabc759b9d3477707df08a61e76b88aee2edc4037d3eab64c57a10686c71", 0xd9d}], 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4e90}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)) pidfd_getfd(0xffffffffffffffff, r4, 0x0) 2m30.915633865s ago: executing program 0 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10, 0x0}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x8, 0x9}) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@private2}, &(0x7f0000000240)=0x14) 2m30.309060046s ago: executing program 32 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}}}, 0x10, 0x0}, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x8, 0x9}) getsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@private2}, &(0x7f0000000240)=0x14) 7.386642648s ago: executing program 3 (id=329): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000000ced0a00bfa30000000000002503000028feffff6203f0fff8ffffffc3a4f0ff000000001d04020000000000cf000000000000005504000017ffffff6604000017ffffff9c400000000000007b0300fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a339d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8df000d10e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867bbacec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e809bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f8e3ce2a9414575833a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0d72534050000004ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc19488e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d185afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffe9067f565c6f86b5f596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05db7f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece8d264a2b6adae02c821b6242894f33c81c0a6813497502aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d301183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c7000"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 7.166290395s ago: executing program 3 (id=330): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='stat\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(r0, &(0x7f0000000000)=""/25, 0x19, 0xb6) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000900)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB='iocharset=cp932,umask=00000000000000000000006,iocharset=cp850,utf8,fmask=00000000000000000000343,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB="000000000096205a792fac04789d5782b0e39bd74eb67bfdd61fed50cc5ae83ced3c1cf059bbc767ed72d79670610783173f536800c89362c667a24a103c0a1d392b7a1afc37dd969c3660aaf54150656e4b11d15a929049d7a9c84042813475ffe8e76a99fdc2b0c8122bd1a712989fd85c09e8912bd1eb5396915112610a47f6992cf9979a4c772f6da1f63df85196ddb0c5316bd3057a16521a8d394bf49af96e3ec3f9", @ANYRESHEX=0x0, @ANYRES32, @ANYRESDEC, @ANYBLOB='\x00\x00'], 0x1, 0x1529, &(0x7f0000001cc0)="$eJzs3AuYTlUXOPC19t5nDIm3SS7D3nsd3uSyTZLkkiSXJEmSJLeEpEk+SZIYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckv1/JvzVV1//79I/3/PN+j3Peez17rP22edd7+Wc7X3mm65DajWpXb0REcF/BM//kwQAsQAwAADyAkAAAOXjysdl9eeUmPSfHYT9ue5PvdwzYJcT1z974/pnb1z/7I3rn71x/bM3rn/2xvXP3rj+jGVnG6cWuoq37Lvx+n92xt///0Myy4z5YnWZa7oBxPyzKVz/7I3r/z8r+Gd24vpnb1z/7Cr2ck+A/Rfg9392kOMf9nD9szeuP2PZ2eVef77cG0T+y56DwznPF+avOn/GGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+wvcMpfogDgYvtyz4sxxhhjjDHGGGN/Hp/jD7vP8XIAY4wxxhhjjDH2vwBBgAQFAcRADoiFnJALBABcCXkgL0TgKoiDqyEfXAP5oQAUhEIQD4WhCGgwYIEghKJQDKJwLRSH66AElIRSUBoclIEEuB7Kwg1QDm6E8nATVICboSJUgspQBW6BqnArVIPboDrcDjWgJtSC2nAH1IE7oS7cBfXgbqgP90ADuBcawn3QCO6HxvAANIEHoSk8BM2gObSAltDq38p/DnrA89ATekES9IY+8AL0hX7QH16EAfASDISXYRC8AskwGIbAqzAUXoNh8DoMhxEwEt6AUfAmjIYxMBbGQQqMhwnwFkyEt2ESvAOTYQqkwlSYBu/CdJgBM+E9mAXvw2yYA3NhHqTBBzAfFkA6fAgL4SPIgEWwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2Abb4WPYAZ/ATtgFu+FT2AOf/Yv5J/8uvxsCAgoUqFBhDMZgLMZiLsyFuTE35sE8GMEIxmEc5sN8mB/zY0EsiPEYj0WwCBo0SEhYFItiFKNYHItjCSyBpbAUOnSYgAlYFm/AclgOy2N5rIAVsCJWwkpYBatgVayK1bAaVsfqWANrYC2shXfgHdgb62JdrIf1sD7Wv7g8hY2wETbGxtgEm2BTbIrNsBm2wBbYCltha2yNbbANtsN22B7bYwfsgImYiB2xI3bCTtgZO2MX7IJdsSt2w2fx2czncgA+j89jL6whemMf7IN9MTlHf3wRX8SXcCC+jC/jK5iMg3EIvoqv4ms4DE/gcByBI3EkVhVv4mgcgyTGYQqm4AScgBNxImZN9B2cgqk4FafhNJyOM3AGvoez8H18H+fgHJyHaZiG83EBpmM6LsSTmIGLcDEuwaW4DJfiClyJK3A1rsHVuA7X4QbcgJtwE27BLbgNt+HHqADwE9yFuzAZ9+Ae3It7cR/uw/24HzMxEw/gATyIB/EQHsLDeBiP4FE8hkfxOB7HE3gST+EpPINn8Cw+Hf9V449LrkoGkUUJJWJEjIgVsSKXyCVyi9wij8gjIiIi4kScyCfyifwivygoCop4ES+KiCLCCCNIhDEAIKIiKoqL4qKEKCFKiVLCCScSRIIoK8qKcqKcKC9uEhXEzaKiqCTauiqiiqgq2rlq4jZRXVQXNURNUUvUFrVFHVFH1BV1RT1RT9QX9UUDca9oKHpjf7xfZFWmiRiMTcUQbCaaC3nhE6y1GIZtRFvRTjwqRuBw7CBau0TxhOgoRmMn8TcxBp8SXcQ47CqeEd3Es6K7eE70EG1cT9FLTMLeoo+Ygn1FP9FfvCimY03xHs7KWUu8IpLFYDFEvCrm4WtimHhdDBcjxEjxhhgl3hSjxRgxVowTKWK8mCDeEhPF22KSeEdMFlNEqpgqpol3xXQxQ8wU74lZ4n0xW8wRc8U8kSY+EPPFApEuPhQLxUciQywSi8USsVQsE8vFCrFSrBKrxRqxVqwT68UGsVFsEpvFFrFVbBPbxcdih/hE7BS7xG7xqdgjPhN7xedin/hC7BdfikzxlTggvhYHxTfikPhWHBbfiSPiqDgmvhfHxQ/ihDgpTonT4oz4UZwVP4lzwguQKIWUUslAxsgcMlbmlLnkFTK3DC48u1fJOHm1zCevkfllAVlQFpLxsrAsIrU00kqSoSwqi8movFYWl9fJErKkLCVLSyfLyAR5vSwrb5Dl5I2yvLxJVpA3y4qykqwsq8hbZFV5q4TI+WPUkDVlLVlb3iGT4E5ZV94l68m7ZX15j2wg75UN5X2ykbxfNpYPyCbyQdlUPiSbyeayhWwpW8mHZWv5iGwj28p28lHZXj4mO8jHZaJ8QnaU/sJL5CnZRT4tu8pnZDf5rOwuf5LnpJc9ZS8JvUH2kS/IvrKf7B8LAPIlOVC+LAfJV2SyHCyHyFflUPmaHCZfl8PlCDlSviFHyTflaDlGjpXjZIocLyfIt+RE+bacJN+Rk+UUmSqnyv5ywM8jzZTy/5n/1u/kD/r56BvkRrlJbpZb5Fa5TW6XH8sdcofcKXfK3XK33CP3yL1yr9wn98n9cr/MlJnygDwgD8qD8pA8JA/Lw/KIPCpPy+/lcfmDPCFPypPytDwjz8izF54DUKiEkkqpQMWoHCpW5VS51BUqt7pS5VF5VURdpeLU1SqfukblVwVUQVVIxavCqojSyiirSIWqqCqmoupavPCCUaVUaeVUGZWgrv9X8lVxdZ0qoUr+Kv/i/JL+wfxAnT9oG9VGtVPtVHvVXnVQHVSiSlQdVUfVSXVSnVVn1UV1UV1VV9VNdVPdVXfVQ/VQPVVPlaSSVB/1guqr+qn+6kU1QL2kBqqBapAapJJVshqihqihaqgapoap4Wq4GqlGqlFqlBqtRquxaqxKUSlqgpqgJqqJapKapCarySpVpappapqarqarmWqmmqVmqdlqtpqr5qo0labmq/kqXaWrhWqhylCL1CK1RC1Ry9QytUKtUKvUKrVGrVHr1DqVoTaqjWqz2qy2qq1qu9qudqgdaqfaqXar3WqP2qP2qr1qn9qn9qv9KlNlqgPqgDqoDqpD6pA6rA6rI+qIOqaOqePquDqhTqhT6pQ6o86os+qsOqfOZV32BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJAvuCbIHxQICgaFgvigcFAk0IEJbCAuFD0aXBsUD64LSgQlg1JB6cAFZYKE4PqgbHBDUC64MSgf3BRUCG4OKgaVgspBleCWoGpwa1AtuC2oHtwe1AhqBrWC2sEdQZ3gzqBucFdQL7g7qB/cEzQI7g0aBvcFjYL7g8bBA0GT4MGgafBQ0CxoHrQIWgat/tTxvT9R4BHXU/fSSbq37qNf0H11P91fv6gH6Jf0QP2yHqRf0cl6sB6iX9VD9Wt6mH5dD9cj9Ej9hh6l39Sj9Rg9Vo/TKXq8nqDf0hP123qSfkdP1lN0qp6qp+l39XQ9Q8/U7+lZ+n09W8/Rc/U8naY/0PP1Ap2uP9QL9Uc6Qy/Si/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9cd6h/5E79S79G79qd6jP9N79ed6n/5C79df6kz9lT6gv9YH9Tf6kP5WH9bf6SP6qD6mv9fH9Q/6hD6pT+nT+oz+UZ/VP+lz2mdd3Gd9vRtllIkxMSbWxJpcJpfJbXKbPCaPiZiIiTNxJp/JZ/Kb/KagKWjiTbwpYoqYLGTIFDVFTdRETXFT3JQwJUwpU8o440yCSTBlTVlTzpQz5U15U8FUMBVNRVPZVDa3mFvMreZWc5u5zdxubjc1TU1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTDPTwrQwrUwr09q0Nm1MG9POtDPtTXvTwXQwiSbRdDQdTSfTyXQ2nU0X08V0NV1NN9PNdDfdTQ/Tw/Q0PU2SSTJ9TB/T1/Q1/U1/M8AMMAPNQDPIDDLJJtkMMUPMUDPUDDPDzHAzwozMulA1b5rRZowZa8aZFJNiJpgJZqKZaCaZSWaymWxSTaqZZqaZ6Wa6mWlmmllmlpltZpu5Zq5JM2lmvplv0k26WWgWmgyTYRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww12812s8PsMDvNTrPb7DZ7zB6z1+w1+8w+s9/sN5km0xwwB8xBc9AcMofMYXPYHDFHzDFzzBw3x80Jc8KcMqfMGVPgwvelN7E2p81lr7C57ZU2j81r/z4uaAvZeFvYFrHa5rcFfhUba20JW9KWsqWts2Vsgr3+N3FFW8lWtlXsLbaqvdVW+01cx95p69q7bD17d87a9o5fxra+vcc2sA/ahogAtrltbFvaJvZB29Q+ZJvZ5raFbWnb28dsB/u4TbRP2I72yd/E8+0Cu9KusqvtGrvT7rKn7Gl70H5jz9gfbU/byw6wL9mB9mU7yL5ik+3g38Qj7Rt2lH3TjrZj7Fg77jfxZDvFptqpdpp91063M34Tp9kP7CybbmfbOXaunfdznDWndPuhXWg/shk2gMV2iV1ql9nldsXFufq8dp1dbzfYHfYTu9lusVvtNrv94oWw3WV320/tHvuZPWC/tvvsF3a/PWQz7Vc/x1nnd8h+aw/b7+wRe9Qes9/b4/YHdTE769y/tz/Zc9ZbICQgSYoCiqEcFEs5KRddQbnpSspDeSlCV1EcXU356BrKTwWoIBWieCpMRUiTIUtEIRWlYhSla+ni9EpRaXJUhhLoeipLN1A5upHK001UgW6milSJKlMVuoWq0q1UjW6j6nQ71aCaVItq0x1Uh+6kunQX1aO7qT7dQw3oXmpI91Ejup8a0wPUhB6kpvQQNaPm1IJaUit6mFrTI9SG2lI7epTa02PUgR6nRHqCOtKT1In+Rp3pKepCT1NXeoa60bPUnZ6jHvQ89aRelES9qQ+9QH2pH/WnF2kAvUQD6WUaRK9QMg2mIfQqDaXXaBi9TsNpBI2kN2gUvUmjaQyNpXGUQuNpAr1FE+ltmkTv0GSaQqk0labRuzSdZtBMeo9m0fs0m+bQXJpHafQBzacFlE4f0kL6iDJoES2mJbSUltFyWkEraRWtpjW0ltbRetpAG2kTbaYttJW20Xb6mHbQJ7STdtFu+pT20Ge0lz6nffQF7acvKZO+ogP0NR2kb+gQfet70Xd0hI7SMfqejtMPdIJO0ik6TWfoRzpLP9E58gQhhiKUoQqDMCbMEcaGOcNc4RVh7vDKME+YN4yEV4Vx4dVhvvCaMH9YICwYFgrjw8JhkVCHJrQhhWFYNCwWRsNrw+LhdWGJsGRYKiwdurBMmBBeH5YNbwjLhTeG5cObwgrhzWHFsFL44N1VwlvCquGtYbXwtrB6eHtYI6wZ1gprh3eEdcI7w7rhXWG98O6wXHhP2CC8N2wY3hc2Cu8PG4cPhE3CB8Om4UNhs7B52CJsGbYKHw5bh4+EbcK2Ybvw0bB9+FjYIXw8TAyfCDuGT/7cf8+Cf9yfFPYO+4QvhC+E3t8l50bnRdOiH0TnRxdE06MfRhdGP4pmRBdFF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RL2vnQMcOuGkUy5wMS6Hi3U5XS53hcvtrnR5XF4XcVe5OHe1y+eucfldAVfQFXLxrrAr4rQzzjpyoSvqirmou9YVd9e5Eq6kK+VKO+fKuATX0rVyrVxr94hr49q6du5R96h7zD3mHnePuydcR/ek6+T+5jq7p1wX97R72j3jurlnXXf3nOvhxuc5/55Mcn1cH9fX9XX9XX83wA1wA91AN8gNcsku2Q1xQ9xQN9QNc8PccDfcjXQj3Sg3yo12o91YN9aluBQ3wU1wE91EN8lNcpPdZJfqUt00N81Nd9Nd1RnnjzLbzXZz3VyX5tLcfJd1zZjuFrqFLsNluMVusVvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uJ0+7/lB3R631+11+9w+t9996TLdV+6A+9oddN+4Q+5bd9h95464o+6Y+94ddz+4E+6kO+VOuzPuR3fW/eTOOe9SIuMjEyJvRSZG3o5MirwTmRyZEkmNTI1Mi7wbmR6ZEZkZeS8yK/J+ZHZkTmRuZF4kLfJBZH5kQSQ98mFkYeSjSEZkUWRxZElkaWRZxPvCm0Nf1BfzUX+tL+6v8yV8SV/Kl/bOl/EJ/npf1t/gy/kbfXl/k6/gb/YVfSVf2T/km/nmvoVv6Vv5h31r/4hv49v6dv5R394/5jv4x32if8J39E/6Tv5vvrN/ynfxT/uu/hnfzT/ru/vnfA//vO/pe/kk39v38S/4vr6f7+9f9AP8S36gf9kP8q/4ZD/YD/Gv+qH+NT/Mv+6H+xF+ZMwbftTFW2QY51P8eD/Bv+Un+rf9JP+On+yn+FQ/1U/z7/rpfoaf6d/zs/z7fraf4+f6eT7Nf+Dn+wU+3X/oF/qPfIZfdHFR2S/3K/xKv8qv9mv8Wr/Or/cb/Ea/yW/2W/xWv81v9x/7Hf4Tv9Pv8rv9p36P/8zv9Z///Euz/f5Ln+m/8gf81/6g/8Yf8t/6w/47f8Qf9cf89/64/8Gf8Cf9KX/an/E/+rP+J3+Of6TGGGOMMfZPGX+pKX7dc345v/fv5Ihf7NwHAK7cUijzl/1ZV5Rr859v9xPx7SMA8ESvrvdf3GrUSEpKurBvhoSg2ByAi/8TlCUGLsWLoB08BonQFsr+zkzw/7b+aPzoTQC5fpEVC5fiS+N/DoBJvzlCP/HwoyPnVwhPxf3B+HMAShS7lJMTLsWLoN3P6yttodzvzD9r/AKt6Y/nn/OLFIA2v8jJDZfiS/NPgEfgSUj81Z6MMcYYY4wxxth5/UTlzhfvPy/+4vP37s/j1aWcHHAp/uP7c8YYY4wxxhhjjP03eOrZ7o8/nJjYtvO/3qj2b2X9042m8P9rZG78bsN7gIuPKAD4DwcEyGrIv/IsNv0lx0q+8Nb5+66lp30A/x2l/DMal/mDiTHGGGOMMfanu3TR/+vH1eWaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlg39FX9O7HKfI2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMXa5/Z8AAAD//6grACo=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x144800, 0x0, 0x0, 0x0, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x3a424bc, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRESHEX, @ANYBLOB="e486301f94ddf2a3c6e9c6a4598fef2f7853d743f4831d65b415af9ec7dbc191ae080a134bb75d703b909f2312a98aee8b0f9b0db8e7ed2462a00363dad1638b2153b8042adc1cad959cd28efb4c8408de3df91b02cf343ff378c71b87fe0d59824e1618cd9913d306913a737be0e0af9d7310bf01ca4a8807b84427333d19419f24196d806ff138823247a8bf660b3819db5bbac9a3d8c83bbc03f79dd97f2a3ceb4e16d6a19e70233dd475778c5a2ff5143c51b6058a6effbef0ad0e432f91e823", @ANYRES16, @ANYBLOB="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"/433, @ANYRESHEX, @ANYRES8=0x0, @ANYBLOB="787fbcf0d953c7f09e72bb2e52a1f87e9302fa845ff03171634dcdcbfde9f09ac5308b68bf8ccb1186dcaa791090376a8ced429e212b7d50db18595fe44dc1973a193e4ccbd838bba3cb884f228953e593dbe276a8ce3da4d9ee24916115"], 0x5, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) quotactl_fd$Q_GETINFO(r4, 0xffffffff80000502, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 6.094701002s ago: executing program 1 (id=334): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x48000) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r4}) r5 = socket$inet6(0xa, 0x2, 0x24000) setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0) syz_read_part_table(0x5cc, &(0x7f0000000680)="$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") 3.948847155s ago: executing program 3 (id=342): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000200)=0x4, 0x4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.726346713s ago: executing program 1 (id=344): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') pipe2(&(0x7f00000000c0), 0x80000) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0, 0xfffffffc}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 3.507366511s ago: executing program 4 (id=346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) getgroups(0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01, 0xee00]) 3.443582922s ago: executing program 2 (id=347): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.278567838s ago: executing program 2 (id=348): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x18}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20) 3.073634715s ago: executing program 2 (id=349): socketpair(0x8, 0x6, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16, @ANYRES8, @ANYBLOB="6b09ae7ed835a7c8f238bb7782d24d57561d58b3c6cd247eef1505a8c8258534c022ac1f35a74491f9e02a5a906e7db851a42e4632e4286349e35b1366f6b456e6e576fa4c17fa3c044ab6fc5f00d3555bec19dee3e115723f2c5f2f7a40ac9187179cac4a004acd68bde1f54f899f7cd6dc5bd181694f5447dc5ef68c774a739e087a776d78a4b44cb6bb2cd3847eda9cab1e1d7f2fdfe1519cc6b8681bb28ff41c1b0c0be2bfcb43fb"], 0x1, 0x379, &(0x7f0000000880)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) clock_getres(0x2, 0x0) 2.869273272s ago: executing program 3 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.839538503s ago: executing program 1 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x8000, 0x5) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 2.64252879s ago: executing program 3 (id=352): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4840}, 0x48000) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@chain={'key_or_keyring:', r4}) r5 = socket$inet6(0xa, 0x2, 0x24000) setsockopt$inet6_mtu(r5, 0x29, 0x17, 0x0, 0x0) syz_read_part_table(0x5cc, &(0x7f0000000680)="$eJzs079LJHcUAPA3e2v2TDz3ioNr0t1yEDhyEAkR4oJBlsVGJT+MReqARVIIFhaLslob8w8kGBWMjQRSWkYNiMJaiVjJ/gNKGouwYdxZhWAV1KB8PsW87/ftm++8Yd4GD1ouij35y1WrEBF/31TzPCIKV7tf26E7vXy18XVlvD722edfxsdJfBMRlfd7Ln9Osur01OT6/lbnnOHuaCzvDZ13xf6rw93SSi7Lb+Ui5iLiu9PVYveNHZ/kb+G1eSQ2yzvFdxamqosz5UJUa82+bzuTFwNJxNxELuL3bK4inqSXp7f7/HSiB7NdrVlq9K8dtEbPfnr2Yddu4+KjPy/zvVf/Bx6XwXSk2vM3eVStNX9+UT+uX4y8Xp9++yYff8wuZR/+ryx+etL7v/YLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8XpvlnYtYmKouzpQnj6q1Zl8+In6ofP/jJ78MzI6/HJjIpVXJXT6/OL/Qle1qzVKhf+2gNXoWz6bSxLudujdXLTy5s164fx+8FzGfzl8S8TJNvKgf13Mjr9en3243ImaXsu/e+veNxfvvFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4GCox97Sz3k6u861CO3ZSv2VxNMsPF75IlveGzjee77863C2tjGX5rZ6s8HS12F6kx/fe8VvwX/0TAAD//6u5ZoQ=") 2.585381292s ago: executing program 4 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x20, 0x50, 0x8, 0xfffff010}, {0x6, 0x2, 0x1, 0x7}]}) 2.35195838s ago: executing program 4 (id=354): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/189, 0xbd) read$FUSE(r0, &(0x7f0000003f00)={0x2020}, 0x2020) 2.332957701s ago: executing program 1 (id=355): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180254c1d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.946491504s ago: executing program 2 (id=356): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) sendmsg$inet(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.530052248s ago: executing program 4 (id=357): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x28) 1.377756423s ago: executing program 1 (id=358): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000200)=0x4, 0x4) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.282607287s ago: executing program 2 (id=359): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') pipe2(&(0x7f00000000c0), 0x80000) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, r0, 0xfffffffc}, 0x50) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r3, 0x1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 1.153245731s ago: executing program 4 (id=360): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000611458000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 709.243236ms ago: executing program 4 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@local, @random="41208cb8e5b4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @private, @loopback}, '\b\x00\x00\x00\x00\x00 \x00'}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r4) getgroups(0x3, &(0x7f0000000280)=[0xffffffffffffffff, 0xee01, 0xee00]) 491.731194ms ago: executing program 3 (id=362): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) 214.666583ms ago: executing program 1 (id=363): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071181e000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=364): socketpair(0x8, 0x6, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16, @ANYRES8, @ANYBLOB="6b09ae7ed835a7c8f238bb7782d24d57561d58b3c6cd247eef1505a8c8258534c022ac1f35a74491f9e02a5a906e7db851a42e4632e4286349e35b1366f6b456e6e576fa4c17fa3c044ab6fc5f00d3555bec19dee3e115723f2c5f2f7a40ac9187179cac4a004acd68bde1f54f899f7cd6dc5bd181694f5447dc5ef68c774a739e087a776d78a4b44cb6bb2cd3847eda9cab1e1d7f2fdfe1519cc6b8681bb28ff41c1b0c0be2bfcb43fb"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002180)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) clock_getres(0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 64.864130][ T5752] cgroup: Unknown subsys name 'net' [ 64.995314][ T5752] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.322583][ T5752] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.536464][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.544718][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.547051][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.553330][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.569279][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.578026][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.579425][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.593027][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.593869][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.600665][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.608682][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.615386][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.622419][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.629486][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.643690][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.644691][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.651441][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.666013][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.673572][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.681011][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.689892][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.711693][ T5770] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.727975][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.739228][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.070564][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 69.176415][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 69.190464][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 69.261526][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.270980][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.278512][ T5765] bridge_slave_0: entered allmulticast mode [ 69.285281][ T5765] bridge_slave_0: entered promiscuous mode [ 69.295035][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.302203][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.309456][ T5765] bridge_slave_1: entered allmulticast mode [ 69.316440][ T5765] bridge_slave_1: entered promiscuous mode [ 69.323517][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 69.415645][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.458330][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.465487][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.473038][ T5764] bridge_slave_0: entered allmulticast mode [ 69.480249][ T5764] bridge_slave_0: entered promiscuous mode [ 69.489697][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.511712][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.518922][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.526049][ T5767] bridge_slave_0: entered allmulticast mode [ 69.533190][ T5767] bridge_slave_0: entered promiscuous mode [ 69.540359][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.547474][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.555233][ T5764] bridge_slave_1: entered allmulticast mode [ 69.562086][ T5764] bridge_slave_1: entered promiscuous mode [ 69.601283][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.608574][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.615923][ T5767] bridge_slave_1: entered allmulticast mode [ 69.625250][ T5767] bridge_slave_1: entered promiscuous mode [ 69.633720][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.673270][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.702054][ T5765] team0: Port device team_slave_0 added [ 69.708193][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.715622][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.723399][ T5763] bridge_slave_0: entered allmulticast mode [ 69.730614][ T5763] bridge_slave_0: entered promiscuous mode [ 69.746281][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.753424][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.760884][ T5763] bridge_slave_1: entered allmulticast mode [ 69.767849][ T5763] bridge_slave_1: entered promiscuous mode [ 69.784413][ T5765] team0: Port device team_slave_1 added [ 69.801676][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.814879][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.844284][ T5764] team0: Port device team_slave_0 added [ 69.853712][ T5764] team0: Port device team_slave_1 added [ 69.893569][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.900711][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.927189][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.941926][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.953689][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.966426][ T5767] team0: Port device team_slave_0 added [ 69.983847][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.990878][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.017191][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.043479][ T5767] team0: Port device team_slave_1 added [ 70.050319][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.057310][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.083615][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.129790][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.136774][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.163287][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.192497][ T5763] team0: Port device team_slave_0 added [ 70.202652][ T5763] team0: Port device team_slave_1 added [ 70.209610][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.216574][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.242644][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.255315][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.262393][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.288682][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.324316][ T5765] hsr_slave_0: entered promiscuous mode [ 70.330699][ T5765] hsr_slave_1: entered promiscuous mode [ 70.376387][ T5764] hsr_slave_0: entered promiscuous mode [ 70.383006][ T5764] hsr_slave_1: entered promiscuous mode [ 70.389564][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.397284][ T5764] Cannot create hsr debugfs directory [ 70.419465][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.426458][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.452431][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.501114][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.508135][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.534602][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.591220][ T5767] hsr_slave_0: entered promiscuous mode [ 70.597430][ T5767] hsr_slave_1: entered promiscuous mode [ 70.603980][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.611594][ T5767] Cannot create hsr debugfs directory [ 70.679110][ T5779] Bluetooth: hci2: command tx timeout [ 70.685016][ T5763] hsr_slave_0: entered promiscuous mode [ 70.691422][ T5763] hsr_slave_1: entered promiscuous mode [ 70.697418][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.705253][ T5763] Cannot create hsr debugfs directory [ 70.758827][ T5772] Bluetooth: hci3: command tx timeout [ 70.769249][ T5779] Bluetooth: hci0: command tx timeout [ 70.838759][ T5779] Bluetooth: hci1: command tx timeout [ 70.988781][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.000908][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.034092][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.053577][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.112876][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.123784][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.142276][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.157243][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.193496][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.214457][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.247308][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.257564][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.344526][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.358663][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.374135][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.384330][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.394186][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.413586][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.447564][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.454928][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.469251][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.476367][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.605753][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.636335][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.697537][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.711670][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.725566][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.733887][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.760074][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.783881][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.793981][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.817522][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.824671][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.834936][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.842130][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.856184][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.863553][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.896307][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.903530][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.931462][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.938629][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.980578][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987710][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.042016][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.205301][ T5764] veth0_vlan: entered promiscuous mode [ 72.237498][ T5764] veth1_vlan: entered promiscuous mode [ 72.370380][ T5764] veth0_macvtap: entered promiscuous mode [ 72.395445][ T5764] veth1_macvtap: entered promiscuous mode [ 72.447094][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.505453][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.518097][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529857][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.542410][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.551211][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.590695][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.625839][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.654628][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.737028][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.741973][ T5763] veth0_vlan: entered promiscuous mode [ 72.755584][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.768964][ T5779] Bluetooth: hci2: command tx timeout [ 72.813501][ T5763] veth1_vlan: entered promiscuous mode [ 72.833763][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.844022][ T5779] Bluetooth: hci0: command tx timeout [ 72.850263][ T5779] Bluetooth: hci3: command tx timeout [ 72.856059][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.863109][ T5765] veth0_vlan: entered promiscuous mode [ 72.875994][ T5765] veth1_vlan: entered promiscuous mode [ 72.884613][ T5767] veth0_vlan: entered promiscuous mode [ 72.919289][ T5779] Bluetooth: hci1: command tx timeout [ 72.932126][ T5767] veth1_vlan: entered promiscuous mode [ 72.969094][ T5767] veth0_macvtap: entered promiscuous mode [ 72.996296][ T5767] veth1_macvtap: entered promiscuous mode [ 73.035208][ T5765] veth0_macvtap: entered promiscuous mode [ 73.045863][ T5763] veth0_macvtap: entered promiscuous mode [ 73.062965][ T5765] veth1_macvtap: entered promiscuous mode [ 73.091958][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.105413][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.117471][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.133683][ T5763] veth1_macvtap: entered promiscuous mode [ 73.151643][ T5833] syz.0.1[5833]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.157439][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.172939][ T5833] loop0: detected capacity change from 0 to 1024 [ 73.177893][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.192140][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.220631][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.232185][ T5833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.243552][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.280341][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.306834][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.332343][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.333419][ T5764] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 73.341584][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.370326][ T5764] EXT4-fs error (device loop0): ext4_iget_extra_inode:4732: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 73.387853][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.407029][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.417670][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.427737][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.438810][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.461456][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.480027][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.494035][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.507159][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.516051][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.555411][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.566767][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.576881][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.587959][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.602904][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.612748][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.626020][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.636172][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.650355][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.661008][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.673702][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.685163][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.700521][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.713019][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.723579][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.732750][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.746531][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.759010][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.767729][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.776994][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.898346][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.906200][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.945141][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.953465][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.995728][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.006787][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.035354][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.047626][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.094208][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.111568][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.210707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.238321][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.353051][ T5838] loop1: detected capacity change from 0 to 512 [ 74.363536][ T5838] ======================================================= [ 74.363536][ T5838] WARNING: The mand mount option has been deprecated and [ 74.363536][ T5838] and is ignored by this kernel. Remove the mand [ 74.363536][ T5838] option from the mount to silence this warning. [ 74.363536][ T5838] ======================================================= [ 74.404721][ T5838] EXT4-fs: Ignoring removed oldalloc option [ 74.559851][ T5838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2: invalid indirect mapped block 4294967295 (level 1) [ 74.577299][ T5838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2: invalid indirect mapped block 4294967295 (level 1) [ 74.593583][ T5838] EXT4-fs (loop1): 2 truncates cleaned up [ 74.602098][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.859059][ T5779] Bluetooth: hci2: command tx timeout [ 74.919335][ T5779] Bluetooth: hci3: command tx timeout [ 74.998791][ T5779] Bluetooth: hci1: command tx timeout [ 75.334184][ T5852] loop3: detected capacity change from 0 to 2048 [ 75.401319][ T5852] loop3: p1 < > [ 75.462484][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.614830][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.685359][ T5764] syz-executor (5764) used greatest stack depth: 20648 bytes left [ 75.771996][ T4513] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.836265][ T5856] loop1: detected capacity change from 0 to 4096 [ 76.149158][ T5856] EXT4-fs (loop1): Test dummy encryption mode enabled [ 76.176117][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.930771][ T5779] Bluetooth: hci2: command tx timeout [ 76.999465][ T5779] Bluetooth: hci3: command tx timeout [ 77.083610][ T5779] Bluetooth: hci1: command tx timeout [ 77.124786][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.697498][ T5869] loop1: detected capacity change from 0 to 128 [ 77.780511][ T5869] EXT4-fs (loop1): Test dummy encryption mode enabled [ 77.865981][ T5869] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.886579][ T5869] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.379030][ T5872] loop2: detected capacity change from 0 to 256 [ 78.434590][ T5872] exfat: Deprecated parameter 'utf8' [ 78.493329][ T5872] exfat: Deprecated parameter 'utf8' [ 78.625889][ T5872] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 78.661520][ T4513] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.748961][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.763686][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.773779][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.783098][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.798972][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.806488][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.073475][ T4513] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.338249][ C0] sched: RT throttling activated [ 79.453683][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.534497][ T4513] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.699334][ T5878] overlayfs: missing 'lowerdir' [ 79.705439][ T5881] capability: warning: `syz.1.13' uses deprecated v2 capabilities in a way that may be insecure [ 80.268717][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 80.660336][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.667595][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.676740][ T5873] bridge_slave_0: entered allmulticast mode [ 80.685263][ T5873] bridge_slave_0: entered promiscuous mode [ 80.727668][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.758512][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.765913][ T5873] bridge_slave_1: entered allmulticast mode [ 80.818679][ T5873] bridge_slave_1: entered promiscuous mode [ 80.922695][ T5772] Bluetooth: hci0: command tx timeout [ 81.007164][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.067041][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.295374][ T5873] team0: Port device team_slave_0 added [ 81.305556][ T5873] team0: Port device team_slave_1 added [ 81.394401][ T5906] loop1: detected capacity change from 0 to 512 [ 81.425714][ T5906] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.438842][ T5906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.457091][ T5906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 81.457347][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.465217][ T5906] System zones: 1-12 [ 81.492136][ T5906] EXT4-fs (loop1): 1 truncate cleaned up [ 81.499710][ T5906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.537067][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.647568][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.780017][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.802353][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.853342][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.944647][ T5873] hsr_slave_0: entered promiscuous mode [ 81.964462][ T1550] cfg80211: failed to load regulatory.db [ 81.964800][ T5873] hsr_slave_1: entered promiscuous mode [ 81.989410][ T5873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.997028][ T5873] Cannot create hsr debugfs directory [ 82.159144][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.710043][ T5913] overlayfs: missing 'lowerdir' [ 82.766375][ T4513] hsr_slave_0: left promiscuous mode [ 82.788657][ T4513] hsr_slave_1: left promiscuous mode [ 82.805994][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.830480][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.857788][ T4513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.878706][ T4513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.917714][ T4513] bridge_slave_1: left allmulticast mode [ 82.942731][ T4513] bridge_slave_1: left promiscuous mode [ 82.961531][ T4513] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.993929][ T4513] bridge_slave_0: left allmulticast mode [ 83.008403][ T5772] Bluetooth: hci0: command tx timeout [ 83.008415][ T4513] bridge_slave_0: left promiscuous mode [ 83.035598][ T4513] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.152821][ T4513] veth1_macvtap: left promiscuous mode [ 83.164237][ T5932] input: syz0 as /devices/virtual/input/input5 [ 83.187721][ T4513] veth0_macvtap: left promiscuous mode [ 83.208865][ T4513] veth1_vlan: left promiscuous mode [ 83.214441][ T4513] veth0_vlan: left promiscuous mode [ 84.375307][ T5914] loop3: detected capacity change from 0 to 131072 [ 84.419826][ T5914] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0xf2f50210) [ 84.439070][ T5914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 84.463614][ T5914] F2FS-fs (loop3): invalid crc value [ 84.538021][ T5937] loop1: detected capacity change from 0 to 4096 [ 84.555521][ T5937] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.558784][ T5914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.635923][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.804585][ T5914] F2FS-fs (loop3): access invalid blkaddr:0 [ 84.841915][ T5914] CPU: 1 PID: 5914 Comm: syz.3.15 Not tainted syzkaller #0 [ 84.849186][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.859288][ T5914] Call Trace: [ 84.862604][ T5914] [ 84.865602][ T5914] dump_stack_lvl+0x18c/0x250 [ 84.870353][ T5914] ? show_regs_print_info+0x20/0x20 [ 84.875610][ T5914] ? __up_read+0x2b6/0x6b0 [ 84.880066][ T5914] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 84.885495][ T5914] sanity_check_extent_cache+0xfc/0x1f0 [ 84.891096][ T5914] f2fs_iget+0x33c5/0x47e0 [ 84.895661][ T5914] f2fs_fill_super+0x48b3/0x6be0 [ 84.900675][ T5914] ? kill_f2fs_super+0x3d0/0x3d0 [ 84.905650][ T5914] ? down_write+0x16e/0x200 [ 84.910188][ T5914] ? down_read_killable+0x340/0x340 [ 84.915425][ T5914] ? setup_bdev_super+0x56b/0x660 [ 84.920509][ T5914] mount_bdev+0x221/0x2d0 [ 84.924869][ T5914] ? kill_f2fs_super+0x3d0/0x3d0 [ 84.929835][ T5914] ? get_tree_bdev+0x520/0x520 [ 84.934702][ T5914] ? vfs_parse_fs_param+0x420/0x420 [ 84.939905][ T5914] legacy_get_tree+0xea/0x180 [ 84.944580][ T5914] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 84.950734][ T5914] vfs_get_tree+0x8c/0x280 [ 84.955148][ T5914] do_new_mount+0x24b/0xa40 [ 84.959662][ T5914] __se_sys_mount+0x2e7/0x3d0 [ 84.964341][ T5914] ? __x64_sys_mount+0xc0/0xc0 [ 84.969109][ T5914] ? lockdep_hardirqs_on+0x98/0x150 [ 84.974311][ T5914] ? __x64_sys_mount+0x20/0xc0 [ 84.979084][ T5914] do_syscall_64+0x55/0xa0 [ 84.983506][ T5914] ? clear_bhb_loop+0x40/0x90 [ 84.988183][ T5914] ? clear_bhb_loop+0x40/0x90 [ 84.992858][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.998756][ T5914] RIP: 0033:0x7fe43539da8a [ 85.003182][ T5914] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.022806][ T5914] RSP: 002b:00007fe4361bce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.031229][ T5914] RAX: ffffffffffffffda RBX: 00007fe4361bcee0 RCX: 00007fe43539da8a [ 85.039220][ T5914] RDX: 0000200000000100 RSI: 0000200000010600 RDI: 00007fe4361bcea0 [ 85.047452][ T5914] RBP: 0000200000000100 R08: 00007fe4361bcee0 R09: 0000000000000010 [ 85.055428][ T5914] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000010600 [ 85.063504][ T5914] R13: 00007fe4361bcea0 R14: 00000000000105e7 R15: 0000200000000380 [ 85.071522][ T5914] [ 85.096553][ T5772] Bluetooth: hci0: command tx timeout [ 85.268177][ T5914] F2FS-fs (loop3): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 85.409175][ T5914] F2FS-fs (loop3): Failed to read root inode [ 85.437212][ T4513] team0 (unregistering): Port device team_slave_1 removed [ 85.531008][ T4513] team0 (unregistering): Port device team_slave_0 removed [ 85.614995][ T4513] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.681467][ T4513] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.169017][ T4513] bond0 (unregistering): Released all slaves [ 86.386875][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.163496][ T5772] Bluetooth: hci0: command tx timeout [ 87.296003][ T5873] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.371832][ T5873] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.451323][ T5873] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.499698][ T5873] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.632394][ T5960] loop1: detected capacity change from 0 to 512 [ 87.649939][ T5960] EXT4-fs: Ignoring removed oldalloc option [ 87.702991][ T5960] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.21: invalid indirect mapped block 4294967295 (level 1) [ 87.746535][ T5960] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.21: invalid indirect mapped block 4294967295 (level 1) [ 87.840574][ T5960] EXT4-fs (loop1): 2 truncates cleaned up [ 87.868022][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.883732][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.953763][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.016553][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.023835][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.108372][ T5909] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 88.149867][ T5972] loop2: detected capacity change from 0 to 2048 [ 88.236051][ T5972] loop2: p1 < > [ 88.270532][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.297584][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.304931][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.203488][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.928794][ T5999] overlayfs: missing 'lowerdir' [ 90.066418][ T5873] veth0_vlan: entered promiscuous mode [ 90.131859][ T5873] veth1_vlan: entered promiscuous mode [ 90.270978][ T5873] veth0_macvtap: entered promiscuous mode [ 90.305307][ T5873] veth1_macvtap: entered promiscuous mode [ 90.407035][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.531510][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.578440][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.616541][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.637529][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.674776][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.700820][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.722700][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.889964][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.909666][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 91.928551][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.968296][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.979450][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.991547][ T5873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.002292][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.007160][ T5873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.019293][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.030078][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.036311][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.075343][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 92.107390][ T6026] loop3: detected capacity change from 0 to 512 [ 92.107487][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.131476][ T5873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139080][ T6026] EXT4-fs: Ignoring removed oldalloc option [ 92.163637][ T5873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.192684][ T8] usb 2-1: config 0 descriptor?? [ 92.205439][ T5873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.231124][ T6026] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.31: invalid indirect mapped block 4294967295 (level 1) [ 92.260043][ T5873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.286766][ T6026] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.31: invalid indirect mapped block 4294967295 (level 1) [ 92.330727][ T6026] EXT4-fs (loop3): 2 truncates cleaned up [ 92.343111][ T6026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.455343][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.481024][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.492703][ T4495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.507214][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.522797][ T4495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.553688][ T4495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.571453][ T4495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.732823][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.769091][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.934615][ T6042] overlayfs: missing 'lowerdir' [ 93.015105][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.067217][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.108026][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.147783][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.275463][ T8] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0001/input/input6 [ 93.562822][ T6053] loop3: detected capacity change from 0 to 2048 [ 93.654464][ T6053] loop3: p1 < > [ 94.616265][ T6037] loop4: detected capacity change from 0 to 40427 [ 94.624516][ T8] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 94.653767][ T8] usb 2-1: USB disconnect, device number 2 [ 94.708757][ T6037] F2FS-fs (loop4): invalid crc value [ 94.800857][ T6037] F2FS-fs (loop4): Found nat_bits in checkpoint [ 95.128351][ T6037] F2FS-fs (loop4): Start checkpoint disabled! [ 95.273428][ T6037] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 95.347118][ T6067] overlayfs: missing 'lowerdir' [ 96.761950][ T6088] loop2: detected capacity change from 0 to 128 [ 96.852054][ T6088] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.912496][ T6088] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.925077][ T6088] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.551002][ T6096] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 98.223175][ T6097] loop1: detected capacity change from 0 to 512 [ 98.656642][ T6097] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.752837][ T6097] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 98.761375][ T6097] System zones: 1-12 [ 98.771806][ T6097] EXT4-fs (loop1): 1 truncate cleaned up [ 98.782803][ T6097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.874367][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.127768][ T6102] loop4: detected capacity change from 0 to 256 [ 99.240313][ T6102] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0x4ea91ace, utbl_chksum : 0xe619d30d) [ 99.271085][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.352986][ T6102] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 100.000094][ T6119] overlayfs: missing 'lowerdir' [ 100.039159][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.240073][ T8] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.259650][ T8] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.281332][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.411292][ T6130] loop1: detected capacity change from 0 to 2048 [ 100.524874][ T6130] loop1: p1 < > [ 101.629670][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 101.641131][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 101.853554][ T8] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.862740][ T8] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.871747][ T8] usb 5-1: Product: syz [ 101.875934][ T8] usb 5-1: Manufacturer: syz [ 101.904306][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 101.927311][ T8] cdc_wdm 5-1:1.0: skipping garbage [ 101.952722][ T8] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 101.967803][ T8] cdc_wdm 5-1:1.0: Unknown control protocol [ 102.169449][ T6151] loop3: detected capacity change from 0 to 128 [ 102.213928][ T6151] EXT4-fs (loop3): Test dummy encryption mode enabled [ 102.253195][ T6151] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.268558][ T6151] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.765496][ T5811] usb 5-1: USB disconnect, device number 2 [ 103.950830][ T6157] loop1: detected capacity change from 0 to 512 [ 104.035123][ T6157] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 104.082208][ T6157] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 104.090965][ T6157] System zones: 1-12 [ 104.110774][ T6157] EXT4-fs (loop1): 1 truncate cleaned up [ 104.122231][ T6157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.427644][ T5763] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.446043][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.948602][ T1550] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.178375][ T5811] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 105.180142][ T1550] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 105.215696][ T1550] usb 2-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 105.243514][ T1550] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.256382][ T1550] usb 2-1: Product: syz [ 105.262962][ T1550] usb 2-1: Manufacturer: syz [ 105.284487][ T1550] usb 2-1: SerialNumber: syz [ 105.297488][ T6190] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.322225][ T6168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.371264][ T5811] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.396218][ T5811] usb 5-1: not running at top speed; connect to a high speed hub [ 105.415416][ T5811] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.437298][ T5811] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 105.458052][ T5811] usb 5-1: string descriptor 0 read error: -22 [ 105.485832][ T5811] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.498557][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.557596][ T5811] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 105.656825][ T6197] loop3: detected capacity change from 0 to 4096 [ 105.689856][ T6197] EXT4-fs (loop3): Test dummy encryption mode enabled [ 105.729763][ T6197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.024481][ T5811] usb 5-1: USB disconnect, device number 3 [ 106.036575][ T1550] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 106.701607][ T1550] usb 2-1: MIDIStreaming interface descriptor not found [ 106.709087][ T1550] usb 2-1: too many endpoints [ 106.736464][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.805655][ T1550] usb 2-1: USB disconnect, device number 3 [ 107.805248][ T5781] udevd[5781]: setting owner of /dev/dmmidi4 to uid=0, gid=29 failed: No such file or directory [ 107.939229][ T6223] udevd[6223]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 108.263423][ T6234] loop1: detected capacity change from 0 to 4096 [ 108.300700][ T6234] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.318597][ T5811] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 108.352471][ T6234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.370150][ T6237] loop2: detected capacity change from 0 to 2048 [ 108.416338][ T6237] loop2: p1 < > [ 108.528782][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 108.562804][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.766813][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.777868][ T5811] usb 5-1: config 0 descriptor?? [ 108.784700][ T6228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.796004][ T5811] hub 5-1:0.0: USB hub found [ 109.091048][ T5811] hub 5-1:0.0: 1 port detected [ 109.366847][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.696315][ T5811] usb 5-1: USB disconnect, device number 4 [ 110.164470][ T6255] loop1: detected capacity change from 0 to 40427 [ 110.455948][ T6267] loop4: detected capacity change from 0 to 4096 [ 110.479284][ T6267] EXT4-fs: inline encryption not supported [ 110.511668][ T6267] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.527650][ T6267] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c019, mo2=0003] [ 110.537637][ T6267] System zones: 0-5 [ 110.546413][ T6267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.608369][ T5811] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 110.705250][ T6267] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 110.738152][ T27] audit: type=1800 audit(1774735122.173:2): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.69" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 110.793162][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 110.802224][ T5811] usb 2-1: not running at top speed; connect to a high speed hub [ 110.820460][ T5811] usb 2-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 110.829947][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.837976][ T5811] usb 2-1: Product: syz [ 110.843039][ T5811] usb 2-1: Manufacturer: syz [ 110.847664][ T5811] usb 2-1: SerialNumber: syz [ 110.874202][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.022916][ T6277] loop3: detected capacity change from 0 to 256 [ 111.032076][ T6277] exfat: Deprecated parameter 'utf8' [ 111.085713][ T5811] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.092360][ T6277] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 111.097685][ T5811] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.132625][ T6275] loop4: detected capacity change from 0 to 4096 [ 111.156421][ T6275] EXT4-fs (loop4): Test dummy encryption mode enabled [ 111.195997][ T6275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.221623][ T5811] usb 2-1: USB disconnect, device number 4 [ 112.244868][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.260382][ T6286] loop1: detected capacity change from 0 to 1024 [ 112.309199][ T6286] EXT4-fs: Ignoring removed oldalloc option [ 112.361978][ T6286] EXT4-fs: Ignoring removed bh option [ 112.385654][ T6286] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.464159][ T6286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.631876][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.997256][ T6297] loop4: detected capacity change from 0 to 128 [ 113.050867][ T6297] EXT4-fs (loop4): Test dummy encryption mode enabled [ 113.226174][ T6297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.249948][ T6297] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.723181][ T5873] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.853169][ T6345] input: syz0 as /devices/virtual/input/input7 [ 118.523346][ T6370] loop4: detected capacity change from 0 to 128 [ 118.622492][ T6370] EXT4-fs (loop4): Test dummy encryption mode enabled [ 118.724022][ T6370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.742951][ T6370] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.330601][ T5873] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.909778][ T6398] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 122.037493][ T6412] overlayfs: missing 'lowerdir' [ 122.693684][ T6425] process 'syz.1.98' launched './file0' with NULL argv: empty string added [ 122.892969][ T6423] loop3: detected capacity change from 0 to 512 [ 123.118138][ T6423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.267617][ T6423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 123.276369][ T6423] System zones: 1-12 [ 123.302550][ T6423] EXT4-fs (loop3): 1 truncate cleaned up [ 123.309948][ T6423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.096447][ T6437] overlayfs: missing 'lowerdir' [ 124.444455][ T6436] loop2: detected capacity change from 0 to 4096 [ 124.503324][ T6436] EXT4-fs (loop2): Test dummy encryption mode enabled [ 124.628934][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.020617][ T6450] Zero length message leads to an empty skb [ 125.561536][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.143192][ T6462] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 126.886596][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.273311][ T6503] loop2: detected capacity change from 0 to 256 [ 128.350254][ T6503] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 128.970401][ T6512] input: syz0 as /devices/virtual/input/input9 [ 128.983693][ T6517] loop1: detected capacity change from 0 to 128 [ 129.385567][ T6517] EXT4-fs (loop1): Test dummy encryption mode enabled [ 129.465157][ T6517] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.480190][ T6517] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.151511][ T6496] loop3: detected capacity change from 0 to 40427 [ 130.203026][ T6496] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 130.250991][ T6496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.311429][ T6496] F2FS-fs (loop3): invalid crc value [ 130.902032][ T6536] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 131.603167][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.784747][ T6546] loop1: detected capacity change from 0 to 256 [ 132.160984][ T6552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.164310][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.170823][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.789051][ T6584] overlayfs: missing 'lowerdir' [ 134.119097][ T6589] loop2: detected capacity change from 0 to 128 [ 134.196971][ T6589] EXT4-fs (loop2): Test dummy encryption mode enabled [ 134.356446][ T6589] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.371934][ T6589] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.959915][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.631612][ T6607] input: syz0 as /devices/virtual/input/input10 [ 137.361019][ T6611] loop2: detected capacity change from 0 to 2048 [ 137.431576][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.580092][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.643846][ T6618] loop1: detected capacity change from 0 to 256 [ 137.758680][ T6618] FAT-fs (loop1): Directory bread(block 64) failed [ 137.765649][ T6618] FAT-fs (loop1): Directory bread(block 65) failed [ 137.802583][ T6618] FAT-fs (loop1): Directory bread(block 66) failed [ 137.814579][ T6618] FAT-fs (loop1): Directory bread(block 67) failed [ 137.842802][ T6618] FAT-fs (loop1): Directory bread(block 68) failed [ 137.868745][ T6618] FAT-fs (loop1): Directory bread(block 69) failed [ 137.889284][ T6618] FAT-fs (loop1): Directory bread(block 70) failed [ 137.906268][ T6618] FAT-fs (loop1): Directory bread(block 71) failed [ 137.919919][ T6618] FAT-fs (loop1): Directory bread(block 72) failed [ 137.949595][ T6618] FAT-fs (loop1): Directory bread(block 73) failed [ 138.843949][ T6624] loop2: detected capacity change from 0 to 512 [ 139.782988][ T6634] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 140.300295][ T6636] loop3: detected capacity change from 0 to 512 [ 140.380580][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.488984][ T6636] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.138: bg 0: block 5: invalid block bitmap [ 140.534959][ T6636] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.716234][ T6636] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.138: invalid indirect mapped block 3 (level 2) [ 140.773153][ T6636] EXT4-fs (loop3): 1 orphan inode deleted [ 140.788338][ T6636] EXT4-fs (loop3): 1 truncate cleaned up [ 140.809859][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.870049][ T6642] input: syz0 as /devices/virtual/input/input11 [ 141.716705][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.969044][ T6650] loop4: detected capacity change from 0 to 512 [ 142.029859][ T6650] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #15: comm syz.4.142: iget: bad i_size value: 38620345925642 [ 142.085431][ T6650] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.142: couldn't read orphan inode 15 (err -117) [ 142.240982][ T6650] EXT4-fs (loop4): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.337145][ T6655] overlayfs: missing 'lowerdir' [ 143.077259][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 143.280968][ T6662] loop1: detected capacity change from 0 to 2048 [ 143.293087][ T6662] EXT4-fs: old and new quota format mixing [ 144.721786][ T6675] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 145.454105][ T6677] loop4: detected capacity change from 0 to 512 [ 145.542693][ T6677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.815006][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.124820][ T6687] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 146.340726][ T6688] input: syz0 as /devices/virtual/input/input12 [ 148.160407][ T6713] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 148.385411][ T6714] loop1: detected capacity change from 0 to 128 [ 148.874531][ T6714] syz.1.158: attempt to access beyond end of device [ 148.874531][ T6714] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 148.966133][ T6714] syz.1.158: attempt to access beyond end of device [ 148.966133][ T6714] loop1: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 149.009708][ T6714] syz.1.158: attempt to access beyond end of device [ 149.009708][ T6714] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.044492][ T6718] syz.1.158: attempt to access beyond end of device [ 149.044492][ T6718] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.068708][ T6718] syz.1.158: attempt to access beyond end of device [ 149.068708][ T6718] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.099555][ T6714] syz.1.158: attempt to access beyond end of device [ 149.099555][ T6714] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.134759][ T6714] syz.1.158: attempt to access beyond end of device [ 149.134759][ T6714] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.164710][ T6714] syz.1.158: attempt to access beyond end of device [ 149.164710][ T6714] loop1: rw=0, sector=138, nr_sectors = 8 limit=128 [ 149.178379][ T5574] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.368343][ T5574] usb 4-1: Using ep0 maxpacket: 16 [ 149.379843][ T5574] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 149.390229][ T5574] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.418352][ T5574] usb 4-1: config 0 has no interface number 0 [ 149.435917][ T5574] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 149.455869][ T5574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.468475][ T5574] usb 4-1: Product: syz [ 149.475932][ T5574] usb 4-1: Manufacturer: syz [ 149.488367][ T5574] usb 4-1: SerialNumber: syz [ 149.519619][ T5574] usb 4-1: config 0 descriptor?? [ 149.538925][ T5574] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 149.555705][ T5574] usb 4-1: No valid video chain found. [ 149.658773][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 149.737927][ T6723] overlayfs: missing 'lowerdir' [ 149.773752][ T5574] usb 4-1: USB disconnect, device number 2 [ 149.850389][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.866011][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.876300][ T28] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.879612][ T6704] loop4: detected capacity change from 0 to 131072 [ 149.897835][ T28] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.910309][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.911366][ T6704] F2FS-fs (loop4): invalid crc value [ 149.932664][ T28] usb 3-1: config 0 descriptor?? [ 149.950061][ T6704] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.013229][ T6704] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 150.108046][ T6704] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 150.385906][ T28] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x4 [ 150.501829][ T28] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 150.539006][ T28] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 150.753091][ T5574] usb 3-1: USB disconnect, device number 2 [ 150.792294][ T6731] fido_id[6731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 150.975160][ T6734] input: syz0 as /devices/virtual/input/input13 [ 151.523429][ T6729] loop3: detected capacity change from 0 to 40427 [ 151.552060][ T6729] F2FS-fs (loop3): invalid crc value [ 151.563360][ T6729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.656853][ T6742] loop2: detected capacity change from 0 to 256 [ 151.684786][ T6742] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.716735][ T6742] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 151.716835][ T6729] F2FS-fs (loop3): Start checkpoint disabled! [ 151.763285][ T6729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 151.804669][ T6742] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 152.180327][ T6749] loop4: detected capacity change from 0 to 512 [ 152.213702][ T6749] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.288296][ T6749] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 152.305271][ T6749] System zones: 1-12 [ 152.376292][ T6749] EXT4-fs (loop4): 1 truncate cleaned up [ 152.387275][ T6749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.941246][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.830134][ T6762] loop4: detected capacity change from 0 to 16 [ 153.852361][ T6762] erofs: (device loop4): mounted with root inode @ nid 36. [ 154.083069][ T49] kworker/u4:3: attempt to access beyond end of device [ 154.083069][ T49] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 154.116106][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.129488][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 154.142491][ T6767] loop2: detected capacity change from 0 to 256 [ 154.167785][ T6756] loop1: detected capacity change from 0 to 40427 [ 154.180589][ T6756] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.195343][ T6756] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.965625][ T6756] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.074356][ T6756] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.108280][ T6756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.533951][ T6783] binder: 6779:6783 ioctl 4018620d 0 returned -22 [ 155.568316][ T6783] binder: 6779:6783 unknown command 1074553619 [ 155.576318][ T6783] binder: 6779:6783 ioctl c0306201 200000000040 returned -22 [ 155.682604][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.693364][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.701432][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.738364][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.760622][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.768626][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.776678][ T5765] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 155.934636][ T6790] loop3: detected capacity change from 0 to 512 [ 155.990485][ T6790] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 156.056636][ T6790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 156.065211][ T6790] System zones: 1-12 [ 156.079720][ T6790] EXT4-fs (loop3): 1 truncate cleaned up [ 156.091137][ T6790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.641019][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.008298][ T6798] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 158.805568][ T6810] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 160.162885][ T6820] loop2: detected capacity change from 0 to 256 [ 160.184817][ T6820] FAT-fs (loop2): Unrecognized mount option "k ~58wMWVX$~%4"5D*Zn}Q.F2(cI[fVvL<J_" or missing value [ 160.250714][ T5780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 160.264267][ T6816] overlayfs: missing 'lowerdir' [ 160.391341][ T6827] loop3: detected capacity change from 0 to 512 [ 160.497524][ T6827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.551708][ T6827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 160.560995][ T6827] System zones: 1-12 [ 160.578028][ T6827] EXT4-fs (loop3): 1 truncate cleaned up [ 160.589083][ T6827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.755434][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.986383][ T6842] loop3: detected capacity change from 0 to 4096 [ 162.173935][ T6842] EXT4-fs (loop3): Test dummy encryption mode enabled [ 163.511719][ T6856] loop1: detected capacity change from 0 to 128 [ 163.551147][ T6856] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.707002][ T6856] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.725788][ T6856] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.104736][ T6842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.761305][ T6867] loop2: detected capacity change from 0 to 512 [ 166.826973][ T6867] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.893060][ T6867] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 166.902225][ T6867] System zones: 1-12 [ 166.932234][ T6867] EXT4-fs (loop2): 1 truncate cleaned up [ 166.943557][ T6867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.314593][ T5765] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.359180][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.364011][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.664864][ T6875] overlayfs: missing 'lowerdir' [ 168.010842][ T6878] loop3: detected capacity change from 0 to 4096 [ 168.057048][ T6878] EXT4-fs: inline encryption not supported [ 168.143619][ T6878] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.167175][ T6878] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c018, mo2=0003] [ 170.237109][ T6878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.596111][ T6878] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 170.813357][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.819325][ T6921] loop4: detected capacity change from 0 to 2048 [ 172.957560][ T6924] loop2: detected capacity change from 0 to 128 [ 174.657253][ T6924] EXT4-fs (loop2): Test dummy encryption mode enabled [ 175.439298][ T6927] loop3: detected capacity change from 0 to 512 [ 175.446645][ T6927] EXT4-fs: Ignoring removed nobh option [ 175.473756][ T6927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.601398][ T6924] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.614002][ T6924] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 175.653273][ T6927] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 175.723300][ T6927] EXT4-fs (loop3): 1 truncate cleaned up [ 175.835157][ T6927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.074219][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.086238][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.178625][ T6940] overlayfs: missing 'lowerdir' [ 176.349774][ T6943] loop3: detected capacity change from 0 to 1024 [ 176.447739][ T6943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.625459][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.794838][ T6953] loop3: detected capacity change from 0 to 1024 [ 176.804218][ T6953] EXT4-fs: Ignoring removed oldalloc option [ 176.852742][ T6953] EXT4-fs: Ignoring removed bh option [ 176.878730][ T6953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.938553][ T6953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.141777][ T6948] loop1: detected capacity change from 0 to 40427 [ 177.159813][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.196546][ T6948] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 177.227475][ T6948] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 177.237266][ T6948] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x7ffff [ 177.248313][ T6948] F2FS-fs (loop1): invalid crc value [ 177.270996][ T6948] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.583192][ T6962] loop4: detected capacity change from 0 to 2048 [ 177.825842][ T6962] loop4: p1 < > [ 178.118695][ T6948] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 178.159320][ T6948] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.224567][ T6970] loop3: detected capacity change from 0 to 512 [ 179.268333][ T6970] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.381903][ T6970] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 179.391265][ T6970] System zones: 1-12 [ 179.444010][ T6970] EXT4-fs (loop3): 1 truncate cleaned up [ 179.455632][ T6970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.754103][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.766432][ T5765] syz-executor: attempt to access beyond end of device [ 179.766432][ T5765] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.840069][ T5765] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 180.178273][ T6983] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 181.246567][ T6993] overlayfs: missing 'lowerdir' [ 181.928308][ T5810] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.118366][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 182.134432][ T5810] usb 2-1: config 4 has an invalid interface number: 228 but max is 0 [ 182.155693][ T5810] usb 2-1: config 4 has no interface number 0 [ 182.162726][ T5810] usb 2-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30 [ 182.192747][ T5810] usb 2-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.291768][ T7003] loop3: detected capacity change from 0 to 512 [ 182.330762][ T7003] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.355156][ T7003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 182.364533][ T7003] System zones: 1-12 [ 182.385001][ T7003] EXT4-fs (loop3): 1 truncate cleaned up [ 182.395983][ T7003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.500501][ T5810] usb 2-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 182.760140][ T5810] usb 2-1: config 4 interface 228 has no altsetting 0 [ 182.927495][ T5810] usb 2-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 182.973874][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.009967][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.044366][ T5810] usb 2-1: Product: syz [ 183.058554][ T5810] usb 2-1: Manufacturer: syz [ 183.063208][ T5810] usb 2-1: SerialNumber: syz [ 183.299233][ T7010] loop3: detected capacity change from 0 to 4096 [ 183.316773][ T7010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.426791][ T7012] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 183.697904][ T7010] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 184.038008][ T7010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.080517][ T5810] usb 2-1: USB disconnect, device number 5 [ 184.165859][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.398237][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.965932][ T7034] overlayfs: missing 'lowerdir' [ 185.034058][ T7027] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 185.424758][ T7039] loop1: detected capacity change from 0 to 512 [ 185.460005][ T7039] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 185.517357][ T7039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 185.525940][ T7039] System zones: 1-12 [ 185.625673][ T7039] EXT4-fs (loop1): 1 truncate cleaned up [ 185.638802][ T7039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.203636][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.629818][ T7057] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 188.699716][ T7057] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 188.979393][ T7060] overlayfs: failed to resolve './file0': -2 [ 189.420850][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 189.432242][ T7066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 189.441619][ T7066] 8021q: VLANs not supported on ip_vti0 [ 189.678604][ T7074] loop3: detected capacity change from 0 to 512 [ 189.695224][ T7073] overlayfs: missing 'lowerdir' [ 189.730727][ T7074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.768668][ T7074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 189.777231][ T7074] System zones: 1-12 [ 189.789767][ T7074] EXT4-fs (loop3): 1 truncate cleaned up [ 189.804889][ T7074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.295433][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.342110][ T7082] loop2: detected capacity change from 0 to 128 [ 190.352631][ T7082] EXT4-fs: Ignoring removed nobh option [ 190.452988][ T7082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.482154][ T7082] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.616708][ T5767] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.695204][ T7085] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 191.228520][ T7087] loop1: detected capacity change from 0 to 256 [ 191.287802][ T7087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 192.628284][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 192.634518][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 192.636341][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 193.090243][ T7097] loop4: detected capacity change from 0 to 40427 [ 193.152220][ T7097] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 193.160014][ T7097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 193.172865][ T7097] F2FS-fs (loop4): Image doesn't support compression [ 193.179733][ T7097] F2FS-fs (loop4): Image doesn't support compression [ 193.188458][ T7097] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x216 [ 193.202663][ T7097] F2FS-fs (loop4): invalid crc value [ 193.604048][ T7097] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 193.611239][ T7097] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 194.378414][ T28] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 194.589632][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 194.614556][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.621878][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.829887][ T7109] loop2: detected capacity change from 0 to 512 [ 194.871140][ T28] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.962651][ T7109] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 195.237376][ T7109] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 195.246638][ T7109] System zones: 1-12 [ 195.297488][ T7109] EXT4-fs (loop2): 1 truncate cleaned up [ 195.308872][ T7109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.415972][ T28] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.500008][ T28] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.507076][ T28] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 195.521210][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.522957][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.554294][ T28] usb 2-1: config 0 descriptor?? [ 195.915756][ T28] usbhid 2-1:0.0: can't add hid device: -71 [ 195.928382][ T28] usbhid: probe of 2-1:0.0 failed with error -71 [ 195.973442][ T28] usb 2-1: USB disconnect, device number 6 [ 196.905440][ T7125] loop4: detected capacity change from 0 to 512 [ 197.117815][ T7125] EXT4-fs error (device loop4): ext4_orphan_get:1424: comm syz.4.268: bad orphan inode 13 [ 197.138715][ T7125] ext4_test_bit(bit=12, block=4) = 1 [ 197.147230][ T7125] is_bad_inode(inode)=0 [ 197.221698][ T7132] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 197.313410][ T7125] NEXT_ORPHAN(inode)=0 [ 197.364443][ T7125] max_ino=32 [ 197.423315][ T7125] i_nlink=1 [ 197.560338][ T7125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.911691][ T7117] overlayfs: missing 'lowerdir' [ 197.930118][ T7125] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.268: Hash code is SIPHASH, but hash not in dirent [ 197.958421][ T7125] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.268: Corrupt directory, running e2fsck is recommended [ 197.973232][ T7125] EXT4-fs warning (device loop4): dx_probe:845: inode #2: comm syz.4.268: Hash code is SIPHASH, but hash not in dirent [ 197.986436][ T7125] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.268: Corrupt directory, running e2fsck is recommended [ 197.997001][ T7135] loop1: detected capacity change from 0 to 512 [ 198.001224][ T7125] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.268: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=0, rec_len=6, size=1024 fake=0 [ 198.018375][ T7135] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.058286][ T7135] EXT4-fs (loop1): Unsupported encryption level 86 [ 198.162134][ T5873] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.814694][ T7161] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 200.675757][ T27] audit: type=1326 audit(1774735212.113:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7164 comm="syz.2.283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d2359c819 code=0x0 [ 200.716800][ T7168] netlink: 104 bytes leftover after parsing attributes in process `syz.1.284'. [ 201.116790][ T7178] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 201.798648][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 202.098141][ T7184] loop1: detected capacity change from 0 to 512 [ 202.160853][ T7184] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 202.182537][ T7184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 202.191085][ T7184] System zones: 1-12 [ 202.198763][ T7184] EXT4-fs (loop1): 1 truncate cleaned up [ 202.209983][ T7184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.875268][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.971032][ T7189] loop1: detected capacity change from 0 to 128 [ 203.051403][ T7189] syz.1.290: attempt to access beyond end of device [ 203.051403][ T7189] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 203.186864][ T7170] loop2: detected capacity change from 0 to 40427 [ 203.205661][ T7170] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 203.264749][ T7170] F2FS-fs (loop2): invalid crc value [ 203.320815][ T7170] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.463234][ T7197] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 204.162508][ T7176] overlayfs: missing 'lowerdir' [ 204.336011][ T7202] loop2: detected capacity change from 0 to 512 [ 204.615121][ T7204] support for cryptoloop has been removed. Use dm-crypt instead. [ 205.178907][ T7200] loop3: detected capacity change from 0 to 40427 [ 205.190932][ T7200] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 205.225140][ T7200] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 205.294825][ T7214] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 205.428594][ T7200] F2FS-fs (loop3): Image doesn't support compression [ 205.537815][ T7200] F2FS-fs (loop3): Image doesn't support compression [ 205.818489][ T7200] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x216 [ 205.845462][ T7200] F2FS-fs (loop3): invalid crc value [ 206.024454][ T7220] loop2: detected capacity change from 0 to 256 [ 206.049367][ T7188] syz.1.290: attempt to access beyond end of device [ 206.049367][ T7188] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 206.082317][ T7200] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 206.098664][ T7200] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 206.107022][ T7188] syz.1.290: attempt to access beyond end of device [ 206.107022][ T7188] loop1: rw=2049, sector=202, nr_sectors = 48 limit=128 [ 206.164246][ T7220] FAT-fs (loop2): Directory bread(block 64) failed [ 206.172983][ T7220] FAT-fs (loop2): Directory bread(block 65) failed [ 206.179916][ T7220] FAT-fs (loop2): Directory bread(block 66) failed [ 206.186916][ T7220] FAT-fs (loop2): Directory bread(block 67) failed [ 206.194301][ T7220] FAT-fs (loop2): Directory bread(block 68) failed [ 206.201501][ T7220] FAT-fs (loop2): Directory bread(block 69) failed [ 206.208704][ T7220] FAT-fs (loop2): Directory bread(block 70) failed [ 206.215597][ T7220] FAT-fs (loop2): Directory bread(block 71) failed [ 206.230266][ T7220] FAT-fs (loop2): Directory bread(block 72) failed [ 206.236955][ T7220] FAT-fs (loop2): Directory bread(block 73) failed [ 206.278317][ T788] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 206.495418][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.526819][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.549251][ T788] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 206.640377][ T7226] loop1: detected capacity change from 0 to 16 [ 206.662566][ T788] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 206.706745][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.803003][ T7226] erofs: (device loop1): mounted with root inode @ nid 36. [ 206.862271][ T7226] syz.1.302: attempt to access beyond end of device [ 206.862271][ T7226] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 206.913344][ T7226] syz.1.302: attempt to access beyond end of device [ 206.913344][ T7226] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 206.943339][ T7226] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 207.060815][ T27] audit: type=1800 audit(1774735218.393:4): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 207.111940][ T788] usb 5-1: config 0 descriptor?? [ 207.517877][ T7232] overlayfs: missing 'lowerdir' [ 207.623919][ T7226] syz.1.302 (7226) used greatest stack depth: 18632 bytes left [ 207.776942][ T7235] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 208.325029][ T788] steelseries 0003:1038:1410.0003: collection stack underflow [ 208.332676][ T788] steelseries 0003:1038:1410.0003: item 0 1 0 12 parsing failed [ 208.342951][ T788] steelseries 0003:1038:1410.0003: parse failed [ 208.354562][ T788] steelseries: probe of 0003:1038:1410.0003 failed with error -22 [ 208.600565][ T5771] usb 5-1: USB disconnect, device number 5 [ 208.625516][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.306'. [ 210.496056][ T7248] loop2: detected capacity change from 0 to 128 [ 210.759635][ T7248] EXT4-fs (loop2): Test dummy encryption mode enabled [ 211.340788][ T7247] loop1: detected capacity change from 0 to 2048 [ 212.550317][ T7248] EXT4-fs: error -4 creating inode table initialization thread [ 212.558790][ T7248] EXT4-fs (loop2): mount failed [ 212.579977][ T5138] loop1: p1 < > [ 212.912726][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 213.437025][ T7266] loop4: detected capacity change from 0 to 16 [ 213.515351][ T7265] overlayfs: missing 'lowerdir' [ 213.540588][ T7266] erofs: (device loop4): mounted with root inode @ nid 36. [ 213.563513][ T7266] syz.4.312: attempt to access beyond end of device [ 213.563513][ T7266] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 213.586012][ T7266] syz.4.312: attempt to access beyond end of device [ 213.586012][ T7266] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 213.602740][ T7266] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 213.672383][ T27] audit: type=1800 audit(1774735225.053:5): pid=7266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.312" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 214.838387][ T7275] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 215.605999][ T7279] loop2: detected capacity change from 0 to 2048 [ 215.750371][ T7279] loop2: p1 < > [ 216.191375][ T7286] syz.4.318 uses obsolete (PF_INET,SOCK_PACKET) [ 216.544306][ T7291] netlink: 'syz.1.321': attribute type 25 has an invalid length. [ 217.171797][ T7299] loop4: detected capacity change from 0 to 128 [ 217.214642][ T7299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 217.298106][ T7299] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 217.314018][ T7299] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.370647][ T7311] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 219.512030][ T5873] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.927347][ T7325] loop3: detected capacity change from 0 to 256 [ 219.938134][ T7325] exfat: Deprecated parameter 'utf8' [ 219.943934][ T7325] exfat: Deprecated parameter 'namecase' [ 220.521018][ T7325] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbcde3a0f, utbl_chksum : 0xe619d30d) [ 221.171502][ T7337] loop1: detected capacity change from 0 to 2048 [ 221.587681][ T7340] loop2: detected capacity change from 0 to 256 [ 221.619137][ T7340] FAT-fs (loop2): Unrecognized mount option "k ~58wMWVX$~%4"5D*Zn}Q.F2(cI[fVvL<J_" or missing value [ 222.134082][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.338'. [ 222.146902][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.338'. [ 222.163349][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.338'. [ 222.174509][ T7343] netlink: 60 bytes leftover after parsing attributes in process `syz.4.338'. [ 222.506142][ T7347] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 222.690097][ T7348] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 223.179210][ T7362] loop1: detected capacity change from 0 to 512 [ 223.191320][ T7362] EXT4-fs: Ignoring removed oldalloc option [ 223.396345][ T7362] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.344: invalid indirect mapped block 4294967295 (level 1) [ 223.481640][ T7362] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.344: invalid indirect mapped block 4294967295 (level 1) [ 223.524635][ T7362] EXT4-fs (loop1): 2 truncates cleaned up [ 223.562034][ T7362] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.654175][ T7372] loop2: detected capacity change from 0 to 256 [ 223.684595][ T7372] FAT-fs (loop2): Unrecognized mount option "k ~58wMWVX$~%4"5D*Zn}Q.F2(cI[fVvL<J_" or missing value [ 223.788076][ T5765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.147683][ T7382] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 224.163765][ T7382] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 224.470311][ T7389] loop3: detected capacity change from 0 to 2048 [ 224.634832][ T7389] loop3: p1 < > [ 224.990582][ T5138] loop3: p1 < > [ 225.727255][ T7399] loop2: detected capacity change from 0 to 512 [ 225.759222][ T7399] EXT4-fs: Ignoring removed oldalloc option [ 226.158059][ T7399] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.359: invalid block [ 226.198866][ T7399] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.359: invalid indirect mapped block 4294967295 (level 1) [ 226.365050][ T7399] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.359: invalid indirect mapped block 4294967295 (level 1) [ 226.489984][ T7399] EXT4-fs (loop2): 2 truncates cleaned up [ 226.497506][ T7399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.575803][ T7414] [ 226.578849][ T7414] ============================= [ 226.584069][ T7414] WARNING: suspicious RCU usage [ 226.589361][ T7414] syzkaller #0 Not tainted [ 226.594286][ T7414] ----------------------------- [ 226.600083][ T7414] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 226.608821][ T7414] [ 226.608821][ T7414] other info that might help us debug this: [ 226.608821][ T7414] [ 226.619144][ T7414] [ 226.619144][ T7414] rcu_scheduler_active = 2, debug_locks = 1 [ 226.628292][ T7414] 1 lock held by syz.3.362/7414: [ 226.633819][ T7414] #0: ffffffff8d132280 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 226.644146][ T7414] [ 226.644146][ T7414] stack backtrace: [ 226.650158][ T7414] CPU: 0 PID: 7414 Comm: syz.3.362 Not tainted syzkaller #0 [ 226.657466][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.667718][ T7414] Call Trace: [ 226.671018][ T7414] [ 226.673964][ T7414] dump_stack_lvl+0x18c/0x250 [ 226.678684][ T7414] ? show_regs_print_info+0x20/0x20 [ 226.683915][ T7414] ? load_image+0x400/0x400 [ 226.688465][ T7414] lockdep_rcu_suspicious+0x1e1/0x300 [ 226.693866][ T7414] get_callchain_entry+0x2a9/0x3c0 [ 226.699010][ T7414] get_perf_callchain+0xc6/0x510 [ 226.703980][ T7414] ? put_callchain_entry+0xb0/0xb0 [ 226.709131][ T7414] __bpf_get_stack+0x2e4/0x540 [ 226.713920][ T7414] ? stack_map_get_build_id_offset+0x720/0x720 [ 226.720083][ T7414] ? __cant_sleep+0x220/0x220 [ 226.724758][ T7414] ? bpf_prog_14d9fb3786f83342+0x45/0x49 [ 226.730424][ T7414] bpf_get_stack_raw_tp+0x1a9/0x210 [ 226.735669][ T7414] bpf_prog_14d9fb3786f83342+0x45/0x49 [ 226.741164][ T7414] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 226.746548][ T7414] bpf_prog_test_run_syscall+0x317/0x4a0 [ 226.752184][ T7414] ? sock_gen_cookie+0x60/0x60 [ 226.756955][ T7414] ? sock_gen_cookie+0x60/0x60 [ 226.761714][ T7414] bpf_prog_test_run+0x321/0x390 [ 226.766663][ T7414] __sys_bpf+0x49d/0x890 [ 226.770903][ T7414] ? bpf_link_show_fdinfo+0x390/0x390 [ 226.776279][ T7414] ? lock_chain_count+0x20/0x20 [ 226.781146][ T7414] __x64_sys_bpf+0x7c/0x90 [ 226.785570][ T7414] do_syscall_64+0x55/0xa0 [ 226.790003][ T7414] ? clear_bhb_loop+0x40/0x90 [ 226.794683][ T7414] ? clear_bhb_loop+0x40/0x90 [ 226.799359][ T7414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.805248][ T7414] RIP: 0033:0x7fe43539c819 [ 226.809660][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.829281][ T7414] RSP: 002b:00007fe4361bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 226.837703][ T7414] RAX: ffffffffffffffda RBX: 00007fe435615fa0 RCX: 00007fe43539c819 [ 226.845679][ T7414] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 226.853650][ T7414] RBP: 00007fe435432c91 R08: 0000000000000000 R09: 0000000000000000 [ 226.861617][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.869583][ T7414] R13: 00007fe435616038 R14: 00007fe435615fa0 R15: 00007ffd7b590318 [ 226.877599][ T7414] [ 226.927641][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.035653][ T7419] loop2: detected capacity change from 0 to 256 [ 227.045985][ T7419] FAT-fs (loop2): Unrecognized mount option "k ~58wMWVX$~%4"5D*Zn}Q.F2(cI[fVvL<J_" or missing value