last executing test programs: 17.869298383s ago: executing program 1 (id=131): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 17.859928117s ago: executing program 1 (id=134): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@multicast1}, {@multicast1}]}, @generic={0x7, 0x4, "0403"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17.75020643s ago: executing program 4 (id=137): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, 0xffffffffffffffff) chdir(&(0x7f0000000300)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000002d00)={0x8, {"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", 0x1000}}, 0x959) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) symlinkat(&(0x7f0000000480)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x58) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000040)=""/52, 0x1010000, 0x800, 0x101, 0x1}, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 16.89713083s ago: executing program 4 (id=140): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000042, &(0x7f0000000880)={[{@jqfmt_vfsv0}, {@nodioread_nolock}, {@noblock_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@mb_optimize_scan}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x61, 0x38, 0x38, 0x30, 0x62, 0x64], 0x2d, [0x38, 0x32, 0x65, 0x37], 0x2d, [0x64, 0x63, 0x32, 0x30], 0x2d, [0x35, 0x0, 0x30, 0x63], 0x2d, [0x65, 0x31, 0x0, 0x65, 0x61, 0x61, 0x63, 0x35]}}}, {@subj_role={'subj_role', 0x3d, ']#\'[[+$]%\'/,%'}}, {@euid_lt={'euid<', r0}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") io_setup(0x66, &(0x7f0000000400)=0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r2, &(0x7f0000000640)='-', 0x1}]) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000100)={0x1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r4, 0x0, 0xfff, 0x9) write$UHID_INPUT(r4, &(0x7f0000001440)={0x8, {"715b1a6a9fca300288d0d6f164694e9be52056879d4f7f9e17a2f387a1e887ad9fea8a741f3a85292a8ca98e1512418fbd5b5beafe58966442a9c6d52bdef586966362501755a16514ded809c856f4e58261695dbfb4d87cd5d13b78c6cf696afecb55cca3e7607479bc2ceded20d446347481aa05e3083992814f23f6ba955daa8c5988fcc3e1f4a1657a94b74a6161fb233fa5146129889ae615315f974fd1e2c6db572e40a4ec1325c81eff25243f2fbe74fc9cc389297c04d98213ca54c33fe33622c7ebe8f6e9712c07be77c43bddb575411faf61123d450d3c608e581d9d1fd5562abd932bbdf70ff573330754d8f2a3c38906aefc04f438f74482b6e4ec9501b6b43d08d910bda4fc230cfbdc06b2447775f53c6aa87b73a284167aee5e05fc8d867afd4b6b8c3ec81a23be5df245d8e21aa8a630de4b680f34fee2af9de02aeaf31aa7d15edbee78a2a7a621305217678c619a19d41e927e798df495ff28a6485e978bb29cf5f82e31ee8e142134e0845f5c1eaa9664c7dbbfcfcd9dc0567fd447f25de86bea1c28e8a9973e3d5f00e74d022f2b9a97ff08f404af3911f7f086643bfd9004c2500b1684e73c885374cb382bcb37fc82a31c79991b2547fbbba3c005b4d88825488599a8cf0cdaebb4d137232516c9f897d72d034a5b69d03be18c0a0958495e3c0f9b7b31f7684236be8772de10aef1446909f13fb49b4516d00f889efe72769585f4e1ffaa5fc9c0dbfa7b05efbaa14a3e240cf7603c6a487f4155f92bc22c262f496e2f30eef1b95cf28235c0273f295a136f122539ceccb412f7c08a019efb4c270a417db7deb6973a6d0370df72d12456b2d2187c4abdb632bc6323eaaa10f6e8c829d9b556b04498de35a355907c9a17b99b2effaca8ffbfe486493740f3dded005e8bf91b417e2cde579f9232c04807dd2f2da29faf183dee67430972a0c85ee9e9319a7b55b03b3db7d2623f3b16da80eee507de1f18b298a045f32970903d4ee04f99c8a6c086c93f465ad8493f3f2e0579993374b1941818c67c448c4e218e64467ea9755042b593a33f5f909ba7eb4c14be439964ff2c5ff2367710438f2d306e721042b39499b21b034cf9a95048a43e8d96eb88c7e372ee61e7a909b6e947d416b2ac672fa3683771cf6986bda28ccd50c448e31985adf2b836349d8e1ac3ea17dd9256bac1f3c47f39953fceddef2e12b9956ad44347142d836ef531528fd9cbc0c132ac6e270c9f5e4d950d62b788dfb1e337be9629a02f945897bdd5168d73d78ec3a7651465949f5027dcd0affb6b24063499d4afb57b80aa62efaefe607fb9073c79d7083c629bf11a56527fe85a41c3b347c7ef54c85a6e6d046994101ae7627e74d14337a9bb042f5f0aeca0a6199dedb3e4b1aa30760131e8d76d43d9991ac1b3c443b25d7c4c8153d1c7763e6f2fda8c404697668f6aa61f8e28d568320ed190ca635c74d9948adcaa53776a2db303b848723b414bd192511f557f2a426822acecfa3ce6f9bfd60c0144b1a55294387238fbb196addf0502ee9af4108682d056f8965ce4fca03d8ecdcf5f302eaea2de59bf663b15bf8a20ce874ff7d3958fe6da3301b678c2930129b3cb4413400388a59ae939c58d96043d93a57a980ed6b9f35751e059ef6c06cffa4f5c3f8ba1ba67f0160390ec77311e4e67d921bb40a29d448f274da50115c2c67baa3d6f39f9ddfaf3e67392d9e3802c353f0b855c927d6a45e445f58526a09793bcc2e72163fb1b7a779d99f230bd95e5bce797cacb0b8343dcf1be080f18040fe288b157b01b074d25fe44ab6b3c0362f1931f6b174412a8d6a2a645270e7430b3884ac16930105786e469d1d8bcf9ed4010ee3accf78ecc138a8b11c15798eeb29ef4fc3bc5b376807348e1647148c35a1aa3d7ed05dc3a11274887f04f035837a9ea81fcb5eaccd4f43f2f6bbf3c426f72e1423c9175c2b234be0fd3c40c15e5e35c5c7359c894e95f82797c48fdca7ef07a6fa6f0dd0bb9a24c4aa9050000000000005c67e60f8814f67d86caba122def954662ae2c6f4f99cfbb55214c61216e8c8f84e9b172129642d754a49c923c6c6f1ba820e99a513308a03c9a080be7224244f2bc1d99d93ddcb25a3d2e0a6b4b868f877760b019c8c475c3e0b90109c21c309e7bc0ffc48753aeb70e7884c8eac52b2fb8576ae917199bfeea255da4b54667320798db03440fabaebb1e8e181506bf93ac67ba128a14c9dcc45d9f07ddfea21e7da2bf4215bc73e82e9a7187cd5fa7c17f7710f2cdf59bb22ce786328af52f17349c42ca7bce681619246b8b467b7b4c60125ea5687e1cd9bf36a67023759a8baeccb60e84c7102f284436584d0508486d96af8ea8358f7ac1f9a21c1229eda8a1a273b999a74f39d3851b6aec92d120f2c4ca0b2852844b5529eb40db91749f221568850f23f089dd704434b6fe736ab7eb67ebd52943000770e0a57c6ff7c1420a225fdeca0cddcf4083a3f5f9fb37490dfdf2c8aae282558c8a4af6ec41f7788d6340053ff69311489323c403becde20ae84c6a8968717e8923c13723be082aab3edd7cf0fd1b2a1f64692911d9e49c4d7d20f8c9364c454fdb51ff376abbae26df57ab7d458772a919879ea7caada2c17fb0011ecc8ced3d7dfa39250fc3c8cc9d0f377860d8b58fd81952f50d732adc73e470c1f5778a49d7f3d507e5ab5cb798420f3a56d9d3ad76b75e5d41921a7ae04099968867c816f6d44c4a41cefbe31623d6899a00c28454bdc0ea17f284dcb39a0221989e3c2bbcc5556e8f870bbf98be4b57be438797995d221ecd0515e4c89c431ff7b595f35527911371cc324cd4c76d4ea68cfdd1eed120ec16e89e4ec4c5ac28039de8b3aa451e1e55631d599612e94630ad3d67ba79e03c4ff023e8ddfd10c09517df736a01af5488a87f551c7e8e41dd0d0d10c58f3053cbdef2c4fd72e51c2d9724360687ab6d0395023626bbfcab24737a50bb27d78ebfe11b5e40a71b2141254074b3dca3cf45456ea1860704b0d5da04710667bf6454c81b33b5b429d2764afd13338d60b928140c05e0b7f41c6fb19b911216ca2357d8171b3673b454b5017bbf34dabdf5fd0d7fb602399ec434f40bc0450cd6e418713c68b349b7deb3ef014b8ec7a62f686b37b1c3a8b60340d0bbf09a6965013c68317d7a2e07bcd3bcaa7cd2cbf34d64534e1ff9cb4ba32d9a5cde63e2da7dfdfcc86886a0ee01fa0d95b78a12085d6dfb62d622041e97d8f03f4727e865be656d9286d628a8950b55dc71058b6dec200049738824a8200023be3f93e740f2a8d241e57deeb642ff28140ee91424db3cf2fafdd8a7d9fc80a7a54da30029ef65df2e7900059ab1141985376e7f9f46e712b4536ed49778e0629d284f56eef0906d21536427333d8a7d6d7e74591031a526eea16a627c5d9f399ec4628a26d9812b68b501716b602564504ab8f16e76a19c608ac550fa52fb80af1e81b48abf13c9996cf47f34d8e943b7d48de31c0d5d794af157c16209d3c0632c2801ab17f05de2c2fb9b9b8c0a257c18a832ac743c9341042af1e56619154fc4f7b20c8de3edbb1636f0a098ed6f6858c27905b00798fd8bedda5eaeeb12ff19943dad0a7f069a9e01dfc9730568784a07c0a6b01623b11a1e6f86cab4d95bf256cd28b00c17b5df66dd4c393471f0f18c68aeae404f5f3fb66bbfd62f1511b35caddad004408fe3b182edf81ad50ac3a639121236968c6be1ba7f7bee6409a91f4c7caf077c2a94c6d8d547cc680a1d7e6cd57c328f6e21312ab76491565c5f4271cbf64ed2be12d770e927cba3cfa0fb89452285a69fe205bc9943eee4466ca8f9998997e2c1a1fe782c9e2241c51dc008bb8f6fe9a49edefae6f43d3e0cd207439745dfd4c347058a4ec3c3bbd56f3108b9a034600f78dc5c889621a6b78e2f7256034d53ae7877de459b6895d5849eb4a8099a62a4bd50d5b4d48cf82fae64985e1e22435fe5d5a4b9119eed5d8ee03a6d1675b7b75d47b8e20a44c05812b36cc2e31947a02c48262c5a875e562dbd4a1a8d045a37afabb28079d3904f53d466e5abab09b8e5e0a56dbae4c4cd9bc6640b47cc6616b2e7cf19c6e9591d32ab0cf87880c81d63948a508ad0cbd50e348d399daf51efb2b96ef9d56a8ba89d04bf5e7d4f7353f71d1a6cb78da6644574664d08e848cf97bab16d6acf70f0e8a06dad5c741cb5eb483f809c4c35307595f00d00bf6a1474aef94cfc913d08c612387172aabc802c17753c6ccd752eaa81e7eefd61c037f958e23bcb9c1510ea47bcaefa72f070809de9f79faede74c87231411b17b353382974bcd334cf983c85ad9e1844cdbd9181a5bb976c35b6a638ae8dd20119858f8c525d735779b2f8e244ed2fc0d900445fe1fe775b4bcb1d2e8d456fd6234ddfcad7fe7abf716d9f4b4a6ee83be812cdda17ec43a895a5c03e5359cce3de61d9736f8a4d66051891b1431f2e61a324f252bd0e9b32e23bd31a5405642bbd2cdc5d3e45b56530568f05a72d475a7d3505b26d9fcdaeb30a62ddf09bcd9e59c1f34e375149782b8019a7a9883fd93397acb338af428f1e015a671b5c11651d3c0168f747fdc6e1fb084bdcbd760adce881492b2bbb76c0a1327e76c9c7ce0afff2f80ec30f2be04d9f93a9b291cc01bcc03f7b67e16a7f1bcc838aab9240df99691a2781da614fdcecf5115382e1357460f4b8e3a577d3ae922379eadc2416d40028c785905bb43a41f5fb7189a8704b8e492c86bd82d0560f81796693e74f08739b632e5226d3c3a963caf5db455ac20288d472611e7dc243531fd66718e94daa2bf93a30a38e6a497a50f2472a72bf9c4689e54105c44cd074bb87e087735791b436d6553c5f2b61ff75dc64ba597b77f7ea42a0ec14dc08107e7bbe97ae519beb5e18a8859493afd097d4609a3a2025fe9603b85f2b1350336d92e15d0bdea3a42bb8775ff2b38babf2ec27e77452c93a05a798ec789a6a012047481ea8e1a8dfc77a9f0f6ddebb9f3503702b147f663f01f70cdfc29afe0cfd7823823fa2e139ea7d1a010a67bb3a31e620aff5cbe1a99ac3cd0f91c472dd021213edf5a9225941b575e27f99c0cb94eb9598a443ec7665335305895ebc28e3f8d34adf6aa37084f823d293ba9dcb2f73d88457d0a55c9202dd309a9b36daa4e50c8f9c93ec7644a7a730b6b947f0f2381a34d67bce50e790a7655a34a2f70723f360af014befa4fd3dbbb8bc2f1461eb48b987a8b772b3ad31a1077c59ef45e4b2870739454ef56402115ab427527e67b6a6a97b2bb3d7a2c13d2a55d1032a64b83efc13939589e46abd78bcc493529cf38581fe3160b2c6eb5a9ac6cee0b05618e51450af077fba0dc943089f112e67a2c654ad94157e95295219d0bbab3a02a2c9ec08ce9d904a703760dc41a7943d52561aeb5519e82d0d390365cfd796434c3decf733d8f09789af0b990f4f9b791cf0d677f34d85fc2b3583b21737955cbaa098963bfa39755f335329f265db75c5d406a0a91ed76563a3ed5f3d2877c2b4b81dc1eaccde6d642c0d8791482e27c64103fc87a55ae91e7adf49ddc1dace5c3108d6a496d678ec5ba09b2a9e6990cb63ac3e4b787661800d11c73da87bf5d297c1fb531aa105d30464b0e023e4212a0d4a0ac119c1568280d49d084729e680a0f453a725ed08454fa874cf22f5718e2afd995a1d7acbe92e0a49307f1b322367dc12b3673708024a85fcc643bd00", 0x1000}}, 0x1006) 16.67972911s ago: executing program 1 (id=146): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001300)={0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r1, r2) fstat(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') setns(r4, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001400), 0x200, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000001440)={0xfffff800, 0x80000, 0xffffffffffffffff}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r7, 0x0, 0x2, &(0x7f0000000240)) r8 = getuid() r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x6, 0x7ff, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0x2000, 0x7ff, r10, r11, 0x3d4, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_open_dev$vcsu(&(0x7f0000001480), 0xd, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) r14 = socket$tipc(0x1e, 0x2, 0x0) r15 = fanotify_init(0x1, 0x20000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000014c0)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003540)={0x0, 0x0, 0x0}, &(0x7f0000003580)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000100)="8e21c31defffc44e75dec7ba3b98f81ad1d4d52f96ba07bf98c68d828ae419", 0x1f}, {&(0x7f0000000240)="39ba7b3db190d74c751f4d973b0092feb40d2f2dc2d8fd4357f27c1447028846df2617c2d8dc0b150fcc5589f475a39c1cd075d700410f2718bb1f93e484a5ec196793121704b5a11d89335a42551ca214557e1d1defb3172b22a068b0fd0c9947b540e26593290ebb3a1c5f37c7c99f59a3f90a6c1c34875ae6f90abff459016ece379c4a6f28c1a737a081382afc333f6618c4e0210a96d20d9a54381c40e2cfa5566e11b7777d9f7509f02acf85d297a2915c39435d849400ff4c4696cd86bbf49d", 0xc3}, {&(0x7f0000000340)="e10bac004b7f0fdf80b79f4947e879", 0xf}], 0x3, &(0x7f0000000a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x2000c804}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000b00)="59de5b7812aa7f77d6c3b287c59a197d0c9d6039cc1662ade18203b33b09cad2fa5ebcf2e887acc261c94c09d039f387fda70720a51153976006a2fa27a7af7ad93052aa0c73259a26cacb661f93899dacfcaa500130c3b7845c4e63f01ede8eb56b4edb598ed568e6276c31b5ac64f1809d84407578107dd72e111c2da725da314c550e58ed0cde791ac2a2da03340ecd4a9fad25aceb", 0x97}, {&(0x7f0000000bc0)="44110429214a54f505f3f31349af611a99faad4bcb01498317e17cf1fe55551d716c5d32052b225c3c4eb621a2146c8ac062aa0cce9d2d2d040f0c3795452150c24cba9762414dad99bfe6f7cdf9a9c1e96322a82c00316f127772c95aefcb2ec287847e7e00ee578c513a256ee830273cbee25529ade66e2925455ffcfbc697c1dc7cfd2306ef7d7d73f22bab77131f76b66bf30a14eeb0c2ac85bc38a5a6a67e821302834a8902a19d", 0xaa}, {&(0x7f0000000c80)="83e99b916a7d130ef8cd5a2af4b87663978be0bcb3369bd87733051f97d6abbe17899207765385b6400abd48bfa9332c07acb55a11df8eb417e71e22a098925e4dfc56491e910883593012f2fc6b8c5797748ac51385f811be2dc97ea22a429469", 0x61}, {&(0x7f0000000d00)="22927acd90630849646eff254253f9906cba6cc5e4f96585308fe1655d566ffc2292bf223b8b2e4e1963ec07b0c035ae9f50aeeb46eeaf14c3285d56ce44e120146e7026b0ba1532f46ca16f6ce4aef47d8f4bd98ea7b4fd64ee58a45464b293438d05ccab4b4cf98072ee3f014f5f456a58f1cc1253c155fb31b1e8838bf5a21c4f4e40d555", 0x86}, {&(0x7f0000000dc0)="d7314b01d29e3cd971794e227c1203a27f48961894234c3ad25540ff712edd297d319ba955b00819ecd8aa68d728d33c9e37ed395b3d67814d4f18e515943eebad38599f998d45437f", 0x49}, {&(0x7f0000000e40)="9fc6af314655f68dd1f9be2b4bd316b2beee3ec7b1eb2abe549e5170c641835c8a82bdfe7090267d6140f0e4a70f96bebad81980d3edf919c5f40b7740710982fbb2e3a2f344670b6abf2b45181f5d45817da6faa89f5f3c8c688b2acab8995388e03ca7066fcb80cb83d888a284bcb9908d5c3a6f14c44f7989f3253e90ba7aa5bf082607b551d0867da9a2c95a4c2212be967956ecadfa71d61ff1759231ee07879bb0a21402ac8b10c1ef77268efa3f", 0xb1}, {&(0x7f0000000f00)="33c6f709d44d415cb4b18f8e82eefe0841a42af4c2bb015f819d7a80928e89766bda37624756aad1b851562e57fe80174eeb19ccd1916fea6e168691d7014d199c9b33b4d11d1ae37f715608629208311759b06dbf1044b1368a314761627235ed", 0x61}], 0x7, &(0x7f00000035c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYBLOB="00014a98c197ddc1ccf92407", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32, @ANYRES32=r15, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x40000}}], 0x2, 0x20000800) r19 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r19, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r19, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r20, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r21, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e300000000000000000000000050053"], 0x138}}, 0x20044000) 16.488184357s ago: executing program 4 (id=149): r0 = socket$pppoe(0x18, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = inotify_init1(0x80000) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) dup(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:*\tw'], 0xa) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="63202a3a2a20726d00ecf38f4f53396427b88b22932c3992aacfd2fb7ac691aab70446b4069ea3b9a6aedf2730880db89d041b748964580427b02dcd99f7b8b2"], 0x9) mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000200)={0x0, 0x384c4150, 0x3, @stepwise={0x1, 0x6, 0xb, 0x6, 0x6, 0x5}}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r6, &(0x7f0000000000), 0x0, 0x0, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x8) getsockopt$inet_udp_int(r6, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @multicast, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'ip6tnl0\x00'}}, 0x1e) 16.352786786s ago: executing program 4 (id=151): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x5d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x2, @adiantum, 0x10, @auto="0900012000"}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000001040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) setns(r1, 0x24020000) r7 = syz_clone(0xc008080, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x87}, 0x20) 16.114357975s ago: executing program 4 (id=156): setreuid(0x0, 0xee01) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xa0, 0x42e6}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f0000000100)={&(0x7f0000000080)="fe56134e7a80f8d0187c48cf3a6cc4280a714636d4e6c344c32e671f448cc93b52119e3b5ab0748737f0", 0x2a, &(0x7f00000000c0)=""/42, 0x2a}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000955fc575c251f2b2e05a218539eb646b94c36f341d01331cf320412021b985805c3e7fd2ad3ab21f551c8a14fd"], &(0x7f0000000200)='GPL\x00', 0x80000001, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, r5, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000000000)=0x8, 0x4) setreuid(r2, r2) 15.124653579s ago: executing program 1 (id=161): r0 = syz_open_procfs(0x0, &(0x7f0000001140)='oom_adj\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) mlockall(0x6) close_range(r1, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000100)={0x200000080, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x49, 0x2, 0x457f1c9146f8f874, "4649f6441214bdf0c12f00007f9d0000310fa145d5fbffffff00", 0xb5315241}) 15.084332438s ago: executing program 1 (id=162): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x46) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@private, @in6=@initdev}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff88163209000000000000005b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000, 0x0, 0x0, 0xbb41}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map, 0x7, 0x2000000, 0xed1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) shutdown(r0, 0x1) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB='\x00|(`p'], 0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) 14.933853154s ago: executing program 1 (id=163): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10800, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r3, &(0x7f0000000000)=0x401, r2, 0x0, 0x400006, 0x0) 14.58329156s ago: executing program 4 (id=172): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001ec0)={0x0, 0x8, &(0x7f0000000ec0)="2f272ad8cb6dfa97"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x55, 0x5, 0x1, {0x200, 0x1}, {0x46, 0x2}, @cond=[{0x85ff, 0x8aba, 0x3, 0x1, 0x1, 0x6}, {0x3, 0x13, 0x5, 0x800, 0x8001, 0x1}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x84000) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_connect$uac3(0x3, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x10, 0x3c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x38, 0xc5, 0xb, "2ed1c634b18253"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x5, 0x40, {0xa, 0x25, 0x25, 0x8001, 0x3, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x6, 0xfa, 0x9, {0xa, 0x25, 0x25, 0xee, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 14.521054665s ago: executing program 32 (id=172): ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000001ec0)={0x0, 0x8, &(0x7f0000000ec0)="2f272ad8cb6dfa97"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x55, 0x5, 0x1, {0x200, 0x1}, {0x46, 0x2}, @cond=[{0x85ff, 0x8aba, 0x3, 0x1, 0x1, 0x6}, {0x3, 0x13, 0x5, 0x800, 0x8001, 0x1}]}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x84000) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) syz_usb_connect$uac3(0x3, 0x90, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x1, 0x10, 0x3c, {0x8, 0xb, 0x1, 0x0, 0x1, 0x22, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa, 0x68}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x38, 0xc5, 0xb, "2ed1c634b18253"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x5, 0x40, {0xa, 0x25, 0x25, 0x8001, 0x3, 0x8000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x6, 0xfa, 0x9, {0xa, 0x25, 0x25, 0xee, 0x3, 0x3}}}}}}}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2.402381903s ago: executing program 2 (id=342): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.295954507s ago: executing program 2 (id=344): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@grpjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@nodioread_nolock}, {@minixdf}]}, 0x3, 0x44c, &(0x7f0000000b40)="$eJzs28tvG8UfAPDv2kn6/iW/qjz6AAIFEV5Jk5bSKwgkDkVCgkM5hiStQt0GNUGiVQSBQzmiSpy4II5I/AWc4IKAExJXuKNKFcqlgZPR2ruN49hJHZws1J+PtPHM7toz390de2YnG0DPGk7/JBH7I+LXiBisZ9fuMFx/WVlenPpzeXEqiWr1jT+S2n63lxen8l3z9+3LM30RpV1JHG1R7vzVaxcnK5WZK1l+bOHSu2PzV689N3tp8sLMhZnLE2fOnDo5/sLpiee7Emca1+0jH8wdO/zqWzdemzp34+0fv07y+Jvi6JLhjTY+Ua12ubhiHWhIJ30FVoSOlOvNNPpr7X8wyrF68gbjlY8LrRywrarVavX+9puXqsA9LImiawAUI/+hT8e/+bJDXY9/hVsv1gdAadwr2VLf0helbJ/+pvFtNw1HxLmlv75Il9ie+xAAAGt8m/Z/nm3V/ytF432h/2VzKEMR8f+IOBgRpyPiUETcF1Hb94GIeLDD8psnSdb3f0o3G3PVpMMCNrE7e11Z1//Le38xVM5yB2rx9yfnZyszJ7JjMhL9u9L8eOxqW8Z3L//yabttjf2/dEnLz/uCWT1u9jV99PTkwuTWI17r1kcRR/qa4j8btQm8fCYgPeSHI+LIFsuYffqrY+22bR7/Browz1T9MuLJ+vlfijXnf/VCSzaenxzbHZWZE2P5VbHeTz9ff71d+f8o/i5Iz//eltf/nfiHksb52vlOPv3zp9K/13/7pO2YZqvX/0DyZi09kK17f3Jh4cp4xEBytl7pxvUTq+/N8/n+afwjx1u3/4OxeiSORkR6ET8UEQ9HxCNZ3R+NiMci4vgGR+GHlx5/Z+vxb680/umOzv9qYiCa17ROlC9+/82aQoc6iT89/6dqqZFszd18/91NvTq9mgEAAOC/qhQR+yMpjd5Jl0qjo/X/4T8Ue0uVufmFZ87PvXd5uv6MwFD0l/I7XYMN90PHs2F9np9oyp/M7ht/Vt5Ty49OzVWmiw4eety+Nu0/9Xu56NoB2655Hs3zW9A7tHfoXdo/9C7tH3pXi/a/p4h6ADuv1e//hwXUA9h5Te3ftB/0EON/6F1baf++M+DesGFbHti5egA7an5PbP6QvITEukSUCip9d/Gx90Ki6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vg7AAD//+yS5sM=") getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$FUSE_INIT(r2, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) sendmsg(r2, 0x0, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079106e0000000000610400000000000095000080"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x78, 0x10, 0x437, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x10c8d}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5241}, @IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 2.211282599s ago: executing program 5 (id=347): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0xffffffffffffffff, 0x8, 0xe, 0x8, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x2, 0x10}, {0x0, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x5c471000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f00000005c0)="e6ff005126e55a13e4281b04a8a09155c1a1aa6ee47b526958ae3b1206f951faf7f909238fc28d49b08e3fd832aac0d896d079b72f79e3852c58394e13ed5fe9da12ff304f4a73999cb027f0d4f3ee09f21336115b46a25e476f0ece9fb2fe6adebb639ab0d0d0ad7744fbabc0cdc4906c0dd5b9e99ee310f301b71795bafbb984a4f9884f", 0x85, 0x1) lremovexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)=@random={'trusted.', '\xdf(I\xebj\x8f\xaa\xf0\xc2'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x38, r8, 0xe7816804f9787cab, 0x70b52a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.472642231s ago: executing program 0 (id=357): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a0000000000000000817a"], 0x78}}, 0x0) 1.423595679s ago: executing program 0 (id=358): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x5c, 0x160, 0x140, 0x3e0, 0x208, 0x228, 0x25a, 0x208, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) io_setup(0x20fe, &(0x7f00000001c0)) truncate(0x0, 0xcd) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x841, 0x1) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000005c0)) 1.357298406s ago: executing program 2 (id=359): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, 0x0, 0x0, 0x40, &(0x7f0000000540)={0xa, 0x4e20, 0x4, @remote, 0x2f69}, 0x1c) 1.357177142s ago: executing program 3 (id=360): r0 = io_uring_setup(0x5d38, &(0x7f00000001c0)={0x0, 0xcf32, 0x2, 0x3, 0x109}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) close_range(r0, r0, 0x0) 1.159623909s ago: executing program 2 (id=361): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x10, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x44}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xfd}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x40, 0x5, 0x59, {0x59, 0x10, "be2ccdf41a578ecb7540ef0c744ec49e3447f0c77ee67e2402fa1af6300883dda8863e28af64009aae39a321586f84abdfb311edbd78643c7f40976c080a5e7b83b1b34ee3073ec1564c87d49e34da02e56816c3c567a4"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x1b}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0xff}, 0x0, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x3, 0xb740, 0x7, 0x6, 0x7ff, 0x3, 0x7, 0xb, 0xefb, 0x4, 0xea1d, 0x5}}, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000004c0)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000500)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.140525318s ago: executing program 5 (id=362): setxattr(0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x6}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0) copy_file_range(r4, 0x0, r2, 0x0, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'virt_wifi0\x00', @local}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x19) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x52142, 0x80) 717.152749ms ago: executing program 3 (id=363): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x402000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000200000000000000000000bbfefa"], 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB='allow_utime=00000000000000000162147,uni_xlate=0,shortname=mixed,shortname=winnt,iocharset=macturkish,nonumtail=0,io862,uni_xlate=0,iocharset=utf8,errors=continue,shortname=mixed,shortname=win95,sys_immutable,utf8=0,\x00'/226], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0), 0xfb, 0x4b6, &(0x7f0000000700)="$eJzs3E9sFNUfAPDvTFv6+wE/WvjhH5BIFY3EPwUKCgcT/yQmXjQmesDjWgrBLtTQmghppBqCFxMl8W40Xky8ePHgyZNRTyZePOjdEInhInpaM7szy7bd3a7ttlvo55MM+97uTN/7zszbefMeOwFsWCPZP0nE1oj4JSKGIiJduMJI7eXG9dnxv67PjidRqbz8R5JtFn9enx0vVk3y1y21TH/2kl5K4ukm5U6fvzBZKpcnzuX5AzNn3jgwff7CY6fPlE5NnJo4O3bs2JHDh44+MfZ4V+LcntV199tTe3Y9/+qVF8aPX3nt+y+Shko3xtEdAzHXsE8WerC7hfXc/xrSSX/bVdNVrwwdG4yoNtSBavsfir5L2+qfDcVz77bcsFKpVNaojsDqyJrxWOuP5yrAbSyJXtcA6I3iQp/d/xbLGnU91oVrz9RugLK4b+RL7aanv36jOrDg/rabZiPi+NzfH2dLrMo4BADAfN9k/Z9Hm/X/0rizYb1t1fHg/1TT2yNiR0T8P4nYGRF3RFTXvSsi7v6X5Y8syC/u/6RXlxFWx7L+35P53Fax5OUWqwz35bmsDzgcA8nJ0+WJg/k+2R8Dg1n+UNO/nkR1Eih++qBV+SMN/b9sycov+oJVg/nS4ERpprTyyGuuvROxu79Z/PkEXj6HtSsidi+zjNMPf74nqmONxTt99c+WjL+d9vNMHal8EvFQ7fjPxYL4C0nj/OTemD8/+XsWS3ni4IHirFjshx8vv9Sq/BXF3wXZ8d/c9Pyvxz+cNM7XTi/6E5uWKuPyr++1vKcZiXgq2safXu1vcv5vSl6ZV/hbpZmZc4du5ue93zDAXeSL9bP49+9r3v53xM09cU9D+fdGxN782N0XEfdHxL428X/37AOvt4m/p8f/y8ldJ6PT418ch9qJUD8j8kS2yyebfdQ3+e3XrcpfOv7s+B+ppvbn73Ty/desgs0Sy9xtAAAAcEtJI2JrJOloPZ2mo6O1/8O/Mzan5anpmUdOTr159kTtNwLDMZAWI11DeT7y8c/hWr569z1WfY24mI+XHs7HjT/q+281Pzo+VT7R6+Bhg9vSov1nfuvrde2AVdeFeTTgFtWu/X96dA0rAqy5jq7/g8veEljHFrXi+U+t8MAGuI25isPG1az9X+xBPYC11/r6P6FrALe5eiP/sIOVG37utfDHm8Ctx0UeNq6l2/+Lq/X8K6B3OvqR/LpKJMm8d+KziPZbJb2v8zIS76+ParRORLouqrHsRGllmw+ufZ37O36qxfnKxVK5/PNXKym0199MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFPAAAA///2suXs") r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) 461.531277ms ago: executing program 0 (id=364): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="010002000000fedbdf2512000000", @ANYRES32], 0x50}}, 0x24000040) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000001800000000670000000800"], 0x1c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 378.781363ms ago: executing program 0 (id=365): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x500f7a28b34d670, 0x31, 0xffffffffffffffff, 0x18873000) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x20) 329.346784ms ago: executing program 3 (id=366): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) munlockall() 329.094877ms ago: executing program 2 (id=367): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e130100c9000134bc2d18de0a7a30bf183cbbf8187e6bc1402ff9d71eaf75a0df6fb2a77d85c1617a0fc2797701417c70b33ccf906f13cf184276902ac0384a7726471c526c307b815919b6aef55f74b1d7ed0bcc94681f5a8c0394e636fd5c795748ff9098a34d770f6232b791f18d3a4f0c6bdb389999b331f982401e320f02795750ec5bd2f21fc6788a4ab17751a274d93fd1eaa6316276a8b0ef965af372"], 0x16) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x100000004, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 281.400086ms ago: executing program 3 (id=368): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r0 = getpid() setpriority(0x0, r0, 0x7f) 250.418964ms ago: executing program 0 (id=369): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2db, &(0x7f0000000480)="$eJzs3U+LG2UcB/DfZCeT+AeTgycRHNCDp9Lt1Ut6aEFcQSw5VA+62BZkE4QurPgHoyfx5hvwFQiCL0QQwYPgRfAF6K1CYWT+Ncl2zMbSrNh+Pofss8/zfDO/eWZ2dy775N3n50c38rj1xae/xXCYRG8yiLiTxDh60fo81ky+DgDg/+xOUcQfRa1j+JevNmSHO6wLANidM/7+N9Lq9Xo54/vzqw0A2I1r19967fLBwZU383wYV+dfnkyTiCi/1uOXb8X7MYubcTFGcTeielDoR/W0UDavFkWxSPPSOF6aL06mZXL+zg91/I3Xy9cyvx+jGFd99542qvyrB1f289pKflHW8WRz/EmZvxSjePZeeC1/qSMf0yxefnGl/gsxip/eiw9iFjeqIpb5z/bz/OcfIz55uyyvzCeLk+mgmrdU7LUHX5Tf9s/3OgEAAAAAAAAAAAAAAAAAAAAA8Gi50OydM4hq/56yq9l/Z+9uVNvc5K3x+v48dT5p32i5P1D0iqJYFPFNu7/OxTzPi2biMp/Gc2mzsSAAAAAAAAAAAAAAAAAAAAA85o4/+vjocDa7efuhNNrdAAYR8de1iAd9n8lKzwuxefKgOebhbNZrmutz0tWe2GvnJBEby4g04iEty1mNJ+LXPzuHvv2uM1We0XEaXUPDsw/ajwcu9enltfiwX69j5+T27jo6TLrXcJC1PcPywsXpC5dFdxn9ONWT/VOp7a243QlmnUOjf71Q2VNVY7FhTiSbfi5e+b0ue+Us1uZk1ap2xvtNYyV+6t7Y6n6OYR2//3dFYrcOAAAAAAAAAAAAAAAAAADYqeV//94/9szmaK8Y7KwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhXy8//36aRroe3SGVx+/i/OjcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeH38HAAD///4MVKc=") renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 105.258907ms ago: executing program 5 (id=370): syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x18, 0x0, 0x0, @local, @local, {[@dstopts={0x2f, 0x1, '\x00', [@generic={0x31, 0x7, "b3bca1e30eda42"}]}]}}}}}, 0x0) 105.152506ms ago: executing program 3 (id=371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0', [], 0xa, "4d08c84be3bca3335cfe77cd48c0d80187e6dd940bd9e4b1a7253a1e6c2b8f0a302fcf7f2770e5382b3481bb"}, 0x37) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x3d}) 104.965978ms ago: executing program 0 (id=372): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000004c0)={0xffffffffffffffff, 0x8, 0xe, 0x8, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xf}, {0x2, 0x10}, {0x0, 0xf}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f000014e000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x5c471000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="13d9887cfd24", @val={@val={0x88a8, 0x5, 0x1, 0x3}, {0x8100, 0x5}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xe, @remote, @multicast2, @broadcast, @multicast2}}}}, 0x0) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f00000005c0)="e6ff005126e55a13e4281b04a8a09155c1a1aa6ee47b526958ae3b1206f951faf7f909238fc28d49b08e3fd832aac0d896d079b72f79e3852c58394e13ed5fe9da12ff304f4a73999cb027f0d4f3ee09f21336115b46a25e476f0ece9fb2fe6adebb639ab0d0d0ad7744fbabc0cdc4906c0dd5b9e99ee310f301b71795bafbb984a4f9884f", 0x85, 0x1) lremovexattr(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)=@random={'trusted.', '\xdf(I\xebj\x8f\xaa\xf0\xc2'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x38, r8, 0xe7816804f9787cab, 0x70b52a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40002084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 69.127951ms ago: executing program 5 (id=373): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x29, 0x39}], 0x10}}], 0x1, 0x4000000) 52.239366ms ago: executing program 3 (id=374): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2, 0x0, 0x0, 0xa1}}], 0x1, 0x42040020, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x4e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.336471ms ago: executing program 5 (id=375): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) 1.134892ms ago: executing program 2 (id=376): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\x02\n\xea_\x8cZ7\r\x00\xdenJ\xeb\x87\x9b\x11xP\x8d\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa2cB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x19\xbfVW&\xe4D\xc06\x8f\xaa\xa0v\xb7\xb9\xd6\xd6\xac\x14\xac\xd9\x9d\x91\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fr_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa04\xd9\xbd\xd9\xaf\x12\x00\x00\x00\xba\x9d\xa7A\xed^\xa5s\x8cC\xef\xadt\xf0\xdbnZE;\xda\x1dN\xd2\vk\x95\x8f\xf4', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x7764a000) 0s ago: executing program 5 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a06e7bc45ff810500110000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa801ecff00ff07de0400201000010002081000418e00000004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 29.052290][ T4655] cgroup: Unknown subsys name 'net' [ 29.172247][ T4655] cgroup: Unknown subsys name 'cpuset' [ 29.174244][ T4655] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.373760][ T4655] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.193253][ T4676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.205170][ T4677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.206641][ T4677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.215122][ T4679] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.215938][ T4679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.216170][ T4679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.216446][ T4679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.216652][ T4679] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.216830][ T4679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.217219][ T4679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.217416][ T4679] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.217950][ T4679] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.218374][ T4679] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.218776][ T4679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.219117][ T4679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.219937][ T4679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.220307][ T4682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.220630][ T4682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.221122][ T4682] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.221574][ T4682] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.222953][ T4682] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.227131][ T4682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.229146][ T4670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.229274][ T4670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.233272][ T4682] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.604295][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.604603][ T4667] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.604676][ T4667] bridge_slave_0: entered allmulticast mode [ 30.605195][ T4667] bridge_slave_0: entered promiscuous mode [ 30.619661][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.619709][ T4667] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.619780][ T4667] bridge_slave_1: entered allmulticast mode [ 30.620228][ T4667] bridge_slave_1: entered promiscuous mode [ 30.629495][ T4667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.630594][ T4667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.653492][ T4667] team0: Port device team_slave_0 added [ 30.671442][ T4667] team0: Port device team_slave_1 added [ 30.692964][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.692993][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693007][ T4667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.696644][ T4667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.696653][ T4667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.696665][ T4667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.713838][ T4680] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.715134][ T4680] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.716423][ T4680] bridge_slave_0: entered allmulticast mode [ 30.717870][ T4680] bridge_slave_0: entered promiscuous mode [ 30.725708][ T4673] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725748][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.725806][ T4673] bridge_slave_0: entered allmulticast mode [ 30.726249][ T4673] bridge_slave_0: entered promiscuous mode [ 30.732981][ T4680] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.733053][ T4680] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.733123][ T4680] bridge_slave_1: entered allmulticast mode [ 30.733553][ T4680] bridge_slave_1: entered promiscuous mode [ 30.739433][ T4673] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.740940][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.741062][ T4673] bridge_slave_1: entered allmulticast mode [ 30.741489][ T4673] bridge_slave_1: entered promiscuous mode [ 30.744688][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.746014][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.747334][ T4674] bridge_slave_0: entered allmulticast mode [ 30.748914][ T4674] bridge_slave_0: entered promiscuous mode [ 30.752236][ T4667] hsr_slave_0: entered promiscuous mode [ 30.752593][ T4667] hsr_slave_1: entered promiscuous mode [ 30.757201][ T4680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.758187][ T4680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.763971][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.764048][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.764143][ T4674] bridge_slave_1: entered allmulticast mode [ 30.764554][ T4674] bridge_slave_1: entered promiscuous mode [ 30.776662][ T4673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.777672][ T4673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.784734][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.790619][ T4680] team0: Port device team_slave_0 added [ 30.791883][ T4680] team0: Port device team_slave_1 added [ 30.798989][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.810665][ T4674] team0: Port device team_slave_0 added [ 30.815488][ T4673] team0: Port device team_slave_0 added [ 30.818990][ T4673] team0: Port device team_slave_1 added [ 30.820148][ T4668] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.820237][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.820343][ T4668] bridge_slave_0: entered allmulticast mode [ 30.821056][ T4668] bridge_slave_0: entered promiscuous mode [ 30.822499][ T4668] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.822522][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.822609][ T4668] bridge_slave_1: entered allmulticast mode [ 30.823140][ T4668] bridge_slave_1: entered promiscuous mode [ 30.824058][ T4674] team0: Port device team_slave_1 added [ 30.827250][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.827258][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.827271][ T4680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.827995][ T4680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.828003][ T4680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.828016][ T4680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.849633][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.849655][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.849667][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.855228][ T4668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.856281][ T4668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.859142][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859151][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.859163][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.862593][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.862601][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.862613][ T4673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.863225][ T4673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.863233][ T4673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.863249][ T4673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.884728][ T4668] team0: Port device team_slave_0 added [ 30.885836][ T4668] team0: Port device team_slave_1 added [ 30.899048][ T4680] hsr_slave_0: entered promiscuous mode [ 30.900124][ T4680] hsr_slave_1: entered promiscuous mode [ 30.900348][ T4680] debugfs: 'hsr0' already exists in 'hsr' [ 30.900383][ T4680] Cannot create hsr debugfs directory [ 30.905511][ T4673] hsr_slave_0: entered promiscuous mode [ 30.905862][ T4673] hsr_slave_1: entered promiscuous mode [ 30.906048][ T4673] debugfs: 'hsr0' already exists in 'hsr' [ 30.906057][ T4673] Cannot create hsr debugfs directory [ 30.915761][ T4674] hsr_slave_0: entered promiscuous mode [ 30.916071][ T4674] hsr_slave_1: entered promiscuous mode [ 30.916249][ T4674] debugfs: 'hsr0' already exists in 'hsr' [ 30.916258][ T4674] Cannot create hsr debugfs directory [ 30.930201][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.931190][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.931210][ T4668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.931794][ T4668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.931801][ T4668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.931812][ T4668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.942243][ T4668] hsr_slave_0: entered promiscuous mode [ 30.942543][ T4668] hsr_slave_1: entered promiscuous mode [ 30.942744][ T4668] debugfs: 'hsr0' already exists in 'hsr' [ 30.942753][ T4668] Cannot create hsr debugfs directory [ 31.055711][ T4667] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.058591][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.066087][ T4667] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.068236][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.068557][ T4667] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.070341][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.077638][ T4667] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.080593][ T4667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.093645][ T4667] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.093696][ T4667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.093869][ T4667] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.093902][ T4667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.099839][ T4674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.101989][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.103607][ T4674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.105721][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.107271][ T4674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.109196][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.115640][ T4674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.118013][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.140029][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.140079][ T4674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.140179][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.140213][ T4674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.144563][ T4680] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.146442][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.152263][ T4680] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.154418][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.155752][ T4680] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.157789][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.161322][ T4680] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.163374][ T4680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.182745][ T4667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.197756][ T4667] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.197934][ T4673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.199907][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.200196][ T4673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.202147][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.205771][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.207143][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.210311][ T1462] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.213211][ T1462] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.222509][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.224321][ T4673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.226394][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.226696][ T4673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.228509][ T4673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.240564][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.240615][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.242940][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.259995][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.260044][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.264933][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.264983][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.273401][ T4668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.274535][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.274813][ T4668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.277943][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.282113][ T4668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.284537][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.286156][ T4668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.288624][ T4668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.301218][ T4680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.324593][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.324634][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.341405][ T4680] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.359178][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.359220][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.374053][ T4680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.375971][ T4680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.379552][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.379599][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.392674][ T4673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.398782][ T4673] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.417424][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.432848][ T4668] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.435901][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.435951][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.445127][ T1462] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445168][ T1462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.458466][ T1462] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.458513][ T1462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.466930][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.466975][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.503127][ T4667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.506348][ T4668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.533225][ T4667] veth0_vlan: entered promiscuous mode [ 31.536123][ T4667] veth1_vlan: entered promiscuous mode [ 31.558064][ T4667] veth0_macvtap: entered promiscuous mode [ 31.574094][ T4667] veth1_macvtap: entered promiscuous mode [ 31.579888][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.587881][ T4667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.599172][ T1296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.599293][ T1296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.599347][ T1296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.599392][ T1296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.644380][ T4680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.654477][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.666108][ T4680] veth0_vlan: entered promiscuous mode [ 31.677612][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.677643][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.693109][ T4680] veth1_vlan: entered promiscuous mode [ 31.698402][ T4680] veth0_macvtap: entered promiscuous mode [ 31.699518][ T4680] veth1_macvtap: entered promiscuous mode [ 31.706137][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.716882][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.716920][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.730137][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.753326][ T445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753554][ T445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753574][ T445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753590][ T445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.758816][ T4668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.785160][ T4667] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.813750][ T4668] veth0_vlan: entered promiscuous mode [ 31.817220][ T4849] block nbd0: not configured, cannot reconfigure [ 31.838608][ T4673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.847745][ T4674] veth0_vlan: entered promiscuous mode [ 31.863379][ T4673] veth0_vlan: entered promiscuous mode [ 31.868389][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.870480][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.870509][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.879210][ T445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.879250][ T445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.880275][ T4668] veth1_vlan: entered promiscuous mode [ 31.885063][ T4674] veth1_vlan: entered promiscuous mode [ 31.886796][ T4673] veth1_vlan: entered promiscuous mode [ 31.916665][ T4668] veth0_macvtap: entered promiscuous mode [ 31.926137][ T4674] veth0_macvtap: entered promiscuous mode [ 31.927993][ T4668] veth1_macvtap: entered promiscuous mode [ 31.938640][ T4674] veth1_macvtap: entered promiscuous mode [ 31.950491][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.955138][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.956268][ T4856] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 31.957894][ T4668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.966595][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.036176][ T4858] Zero length message leads to an empty skb [ 32.249103][ T4860] loop1: detected capacity change from 0 to 1024 [ 32.251133][ T4669] Bluetooth: hci3: command tx timeout [ 32.251223][ T4669] Bluetooth: hci4: command tx timeout [ 32.251290][ T4669] Bluetooth: hci2: command tx timeout [ 32.251353][ T4669] Bluetooth: hci0: command tx timeout [ 32.256650][ T4860] EXT4-fs: Ignoring removed orlov option [ 32.257734][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.266587][ T4673] veth0_macvtap: entered promiscuous mode [ 32.269169][ T4673] veth1_macvtap: entered promiscuous mode [ 32.274358][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.281538][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.286781][ T4860] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.295425][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295483][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295503][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295521][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295537][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295553][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.295568][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.308255][ T4860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.315202][ T1462] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.315498][ T1462] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.315528][ T1462] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.315550][ T1462] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.331060][ T4682] Bluetooth: hci1: command tx timeout [ 32.373987][ T3741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.375973][ T3741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.395441][ T3741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.395467][ T3741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.405539][ T1462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.405563][ T1462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.424162][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.424177][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.437202][ T1462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.437230][ T1462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.447967][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.448187][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.557728][ T4680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.871282][ T4876] loop3: detected capacity change from 0 to 2048 [ 32.872566][ T4875] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 32.915107][ T4876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.024753][ T4883] loop0: detected capacity change from 0 to 256 [ 33.274447][ T4883] FAT-fs (loop0): Directory bread(block 64) failed [ 33.274490][ T4883] FAT-fs (loop0): Directory bread(block 65) failed [ 33.274531][ T4883] FAT-fs (loop0): Directory bread(block 66) failed [ 33.274547][ T4883] FAT-fs (loop0): Directory bread(block 67) failed [ 33.274569][ T4883] FAT-fs (loop0): Directory bread(block 68) failed [ 33.274580][ T4883] FAT-fs (loop0): Directory bread(block 69) failed [ 33.274601][ T4883] FAT-fs (loop0): Directory bread(block 70) failed [ 33.274611][ T4883] FAT-fs (loop0): Directory bread(block 71) failed [ 33.274632][ T4883] FAT-fs (loop0): Directory bread(block 72) failed [ 33.274643][ T4883] FAT-fs (loop0): Directory bread(block 73) failed [ 33.406599][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.436408][ T4892] syz.2.13 (4892) used obsolete PPPIOCDETACH ioctl [ 33.471315][ T4896] loop0: detected capacity change from 0 to 512 [ 33.498366][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.502207][ T4892] loop2: detected capacity change from 0 to 512 [ 33.502582][ T4892] ======================================================= [ 33.502582][ T4892] WARNING: The mand mount option has been deprecated and [ 33.502582][ T4892] and is ignored by this kernel. Remove the mand [ 33.502582][ T4892] option from the mount to silence this warning. [ 33.502582][ T4892] ======================================================= [ 33.510370][ T4892] EXT4-fs (loop2): bad geometry: first data block 2 is beyond end of filesystem (0) [ 33.567495][ T4667] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.585664][ T4904] loop2: detected capacity change from 0 to 1024 [ 33.596346][ T4904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.645292][ T4892] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13: bg 0: block 112: padding at end of block bitmap is not set [ 33.653732][ T4892] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 33.653761][ T4892] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.653761][ T4892] [ 33.653783][ T4892] EXT4-fs (loop2): Total free blocks count 0 [ 33.653797][ T4892] EXT4-fs (loop2): Free/Dirty block details [ 33.653814][ T4892] EXT4-fs (loop2): free_blocks=0 [ 33.653829][ T4892] EXT4-fs (loop2): dirty_blocks=16 [ 33.653839][ T4892] EXT4-fs (loop2): Block reservation details [ 33.653849][ T4892] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 33.673578][ T4892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 33.677656][ T4894] Injecting memory failure for pfn 0x135601 at process virtual address 0x20001000 [ 33.683541][ T4894] Memory failure: 0x135601: Sending SIGBUS to syz.4.10:4894 due to hardware memory corruption [ 33.683613][ T4894] Memory failure: 0x135601: recovery action for unsplit thp: Failed [ 33.692514][ T4894] xt_hashlimit: size too large, truncated to 1048576 [ 33.815573][ T4668] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 33.816424][ T4668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.330879][ T4669] Bluetooth: hci2: command tx timeout [ 34.330928][ T4669] Bluetooth: hci4: command tx timeout [ 34.330955][ T4669] Bluetooth: hci3: command tx timeout [ 34.334172][ T4682] Bluetooth: hci0: command tx timeout [ 34.411524][ T4682] Bluetooth: hci1: command tx timeout [ 34.449548][ T4903] loop3: detected capacity change from 0 to 512 [ 34.598366][ T4931] netlink: 332 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.462749][ T4903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.481125][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 35.481188][ T4936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 35.482038][ T1081] IPVS: starting estimator thread 0... [ 35.618649][ T4938] IPVS: using max 59 ests per chain, 141600 per kthread [ 35.973869][ T4950] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 36.411817][ T4670] Bluetooth: hci3: command tx timeout [ 36.411858][ T4670] Bluetooth: hci4: command tx timeout [ 36.411888][ T4670] Bluetooth: hci2: command tx timeout [ 36.415872][ T4682] Bluetooth: hci0: command tx timeout [ 36.418973][ T4954] xt_hashlimit: size too large, truncated to 1048576 [ 36.491198][ T4682] Bluetooth: hci1: command tx timeout [ 36.564947][ T4967] loop2: detected capacity change from 0 to 512 [ 36.568533][ T4965] loop4: detected capacity change from 0 to 512 [ 36.568866][ T4965] EXT4-fs: Ignoring removed bh option [ 36.575235][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.578642][ T4967] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.30: corrupted inode contents [ 36.579744][ T4967] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #2: comm syz.2.30: mark_inode_dirty error [ 36.579958][ T4967] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.30: corrupted inode contents [ 36.580114][ T4967] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.30: mark_inode_dirty error [ 36.833707][ T4971] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.30: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 36.833707][ T4971] [ 36.838732][ T4971] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #2: comm syz.2.30: corrupted inode contents [ 36.855329][ T4971] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.30: mark_inode_dirty error [ 36.857536][ T4971] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 36.857881][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.936893][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.978343][ T4979] loop3: detected capacity change from 0 to 4096 [ 36.979333][ T4979] ext4: Unknown parameter 'fsname' [ 37.002555][ T4668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.013018][ T4682] Bluetooth: Frame is too long (len 10, expected len 8) [ 37.038149][ T4983] Soft offlining pfn 0x21d09f at process virtual address 0x201c0000 [ 37.046947][ T4983] Memory failure: 0x21d09f: unhandlable page. [ 37.083060][ T4985] FAT-fs (loop2): Directory bread(block 64) failed [ 37.083101][ T4985] FAT-fs (loop2): Directory bread(block 65) failed [ 37.083131][ T4985] FAT-fs (loop2): Directory bread(block 66) failed [ 37.083143][ T4985] FAT-fs (loop2): Directory bread(block 67) failed [ 37.083166][ T4985] FAT-fs (loop2): Directory bread(block 68) failed [ 37.083177][ T4985] FAT-fs (loop2): Directory bread(block 69) failed [ 37.083198][ T4985] FAT-fs (loop2): Directory bread(block 70) failed [ 37.083208][ T4985] FAT-fs (loop2): Directory bread(block 71) failed [ 37.083301][ T4985] FAT-fs (loop2): Directory bread(block 72) failed [ 37.083319][ T4985] FAT-fs (loop2): Directory bread(block 73) failed [ 37.092121][ T4979] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'. [ 37.154505][ T4991] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.154544][ T4991] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 37.154568][ T4991] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.35: Corrupt directory, running e2fsck is recommended [ 37.155691][ T4991] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 37.155835][ T4991] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.35: corrupted in-inode xattr: invalid ea_ino [ 37.155898][ T4991] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.156543][ T4991] EXT4-fs (loop1): Remounting filesystem read-only [ 37.157070][ T4991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.162889][ T4991] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.162908][ T4991] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 37.162918][ T4991] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.35: Corrupt directory, running e2fsck is recommended [ 37.163683][ T4991] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.163703][ T4991] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 37.163713][ T4991] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.35: Corrupt directory, running e2fsck is recommended [ 37.166007][ T4991] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.166027][ T4991] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 37.166039][ T4991] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.35: Corrupt directory, running e2fsck is recommended [ 37.166264][ T4991] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 37.269073][ T4998] set_capacity_and_notify: 3 callbacks suppressed [ 37.269108][ T4998] loop2: detected capacity change from 0 to 256 [ 37.300066][ T4998] FAT-fs (loop2): Directory bread(block 64) failed [ 37.300100][ T4998] FAT-fs (loop2): Directory bread(block 65) failed [ 37.300137][ T4998] FAT-fs (loop2): Directory bread(block 66) failed [ 37.300153][ T4998] FAT-fs (loop2): Directory bread(block 67) failed [ 37.300181][ T4998] FAT-fs (loop2): Directory bread(block 68) failed [ 37.300196][ T4998] FAT-fs (loop2): Directory bread(block 69) failed [ 37.300223][ T4998] FAT-fs (loop2): Directory bread(block 70) failed [ 37.300238][ T4998] FAT-fs (loop2): Directory bread(block 71) failed [ 37.300262][ T4998] FAT-fs (loop2): Directory bread(block 72) failed [ 37.300276][ T4998] FAT-fs (loop2): Directory bread(block 73) failed [ 37.375098][ T5003] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 38.202055][ T4674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.271161][ T4680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.294196][ T5013] loop4: detected capacity change from 0 to 8 [ 38.332715][ T5013] SQUASHFS error: Unable to read inode 0xe3 [ 38.443892][ T5022] binder: 5019:5022 tried to acquire reference to desc 0, got 1 instead [ 38.495027][ T4669] Bluetooth: hci2: command tx timeout [ 38.495194][ T4669] Bluetooth: hci4: command tx timeout [ 38.495382][ T4669] Bluetooth: hci3: command tx timeout [ 38.498673][ T4682] Bluetooth: hci0: command tx timeout [ 38.571091][ T4682] Bluetooth: hci1: command tx timeout [ 38.722520][ T5022] binder: 5019:5022 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 38.722555][ T5022] binder: 5022 RLIMIT_NICE not set [ 38.734612][ T5025] loop0: detected capacity change from 0 to 512 [ 38.738759][ T5025] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 38.753302][ T5025] EXT4-fs (loop0): invalid journal inode [ 38.753383][ T5025] EXT4-fs (loop0): can't get journal size [ 38.760618][ T5025] EXT4-fs (loop0): 1 truncate cleaned up [ 38.767039][ T5025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.773724][ T5022] binder: 5022 RLIMIT_NICE not set [ 38.784096][ T5025] EXT4-fs (loop0): shut down requested (1) [ 38.809980][ T4756] binder: release 5019:5029 transaction 5 out, still active [ 38.810017][ T4756] binder: undelivered TRANSACTION_COMPLETE [ 38.849338][ T4756] binder: release 5019:5022 transaction 5 in, still active [ 38.849381][ T4756] binder: send failed reply for transaction 5, target dead [ 38.906900][ T5035] input: syz1 as /devices/virtual/input/input3 [ 39.011808][ T5041] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop0 blocksize: 1024 [ 39.012113][ T5041] grow_buffers: requested out-of-range block 144115188075855872 for device loop0 [ 39.012267][ T5041] EXT4-fs warning (device loop0): ext4_resize_fs:2018: can't read last block, resize aborted [ 39.346457][ T5056] loop4: detected capacity change from 0 to 512 [ 39.349330][ T5056] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.349358][ T5056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.358086][ T5056] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.52: inode has both inline data and extents flags [ 39.360415][ T5056] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.360751][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 39.360784][ C0] EXT4-fs (loop4): initial error at time 39: ext4_orphan_get:1397: inode 15 [ 39.360821][ C0] EXT4-fs (loop4): last error at time 39: ext4_orphan_get:1397: inode 15 [ 39.434565][ T5063] FAULT_INJECTION: forcing a failure. [ 39.434565][ T5063] name failslab, interval 1, probability 0, space 0, times 1 [ 39.434626][ T5063] CPU: 0 UID: 0 PID: 5063 Comm: syz.1.50 Not tainted syzkaller #0 PREEMPT [ 39.434639][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 39.434645][ T5063] Call trace: [ 39.434648][ T5063] show_stack+0x2c/0x3c (C) [ 39.434666][ T5063] __dump_stack+0x30/0x40 [ 39.434676][ T5063] dump_stack_lvl+0xd8/0x12c [ 39.434685][ T5063] dump_stack+0x1c/0x28 [ 39.434693][ T5063] should_fail_ex+0x414/0x588 [ 39.434704][ T5063] should_failslab+0xc4/0x124 [ 39.434716][ T5063] __kmalloc_node_track_caller_noprof+0x100/0x6c4 [ 39.434728][ T5063] krealloc_node_align_noprof+0x1b8/0x3d4 [ 39.434738][ T5063] kvrealloc_node_align_noprof+0x8c/0x100 [ 39.434748][ T5063] bpf_iarray_realloc+0x40/0xa8 [ 39.434758][ T5063] bpf_check+0x250/0x3c88 [ 39.434765][ T5063] bpf_prog_load+0xf40/0x1434 [ 39.434774][ T5063] __sys_bpf+0x3f4/0x5f0 [ 39.434783][ T5063] __arm64_sys_bpf+0x80/0x98 [ 39.434791][ T5063] invoke_syscall+0x98/0x244 [ 39.434800][ T5063] el0_svc_common+0xe8/0x23c [ 39.434809][ T5063] do_el0_svc+0x48/0x58 [ 39.434817][ T5063] el0_svc+0x60/0x25c [ 39.434826][ T5063] el0t_64_sync_handler+0x48/0x148 [ 39.434835][ T5063] el0t_64_sync+0x198/0x19c [ 39.575760][ T5056] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.52: couldn't read orphan inode 15 (err -117) [ 39.575838][ T5056] loop4: lost filesystem error report for type 5 error -117 [ 39.579757][ T5056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.626722][ T4667] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.669798][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.54'. [ 39.674227][ T5071] capability: warning: `syz.0.54' uses deprecated v2 capabilities in a way that may be insecure [ 39.683999][ T4674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.728384][ T5069] loop3: detected capacity change from 0 to 256 [ 39.744428][ T5076] syzkaller0: entered promiscuous mode [ 39.744457][ T5076] syzkaller0: entered allmulticast mode [ 39.796498][ T5069] FAT-fs (loop3): Directory bread(block 64) failed [ 39.796536][ T5069] FAT-fs (loop3): Directory bread(block 65) failed [ 39.796575][ T5069] FAT-fs (loop3): Directory bread(block 66) failed [ 39.800910][ T5069] FAT-fs (loop3): Directory bread(block 67) failed [ 39.800980][ T5069] FAT-fs (loop3): Directory bread(block 68) failed [ 39.801016][ T5069] FAT-fs (loop3): Directory bread(block 69) failed [ 39.801115][ T5069] FAT-fs (loop3): Directory bread(block 70) failed [ 39.801134][ T5069] FAT-fs (loop3): Directory bread(block 71) failed [ 39.801162][ T5069] FAT-fs (loop3): Directory bread(block 72) failed [ 39.801177][ T5069] FAT-fs (loop3): Directory bread(block 73) failed [ 40.131798][ T5087] loop1: detected capacity change from 0 to 512 [ 40.137528][ T5087] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.137577][ T5087] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 40.145483][ T5087] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 40.146399][ T5087] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 40.146439][ T5087] System zones: 0-2, 18-18, 34-35 [ 40.152372][ T5087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.188396][ T5087] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 40.462209][ T4680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.478761][ T5100] loop1: detected capacity change from 0 to 128 [ 40.523137][ T5104] loop1: detected capacity change from 0 to 1024 [ 40.542831][ T5104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.546469][ T5104] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: block 3: comm syz.1.64: lblock 3 mapped to illegal pblock 3 (length 3) [ 40.547484][ T5104] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 40.547512][ T5104] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.547512][ T5104] [ 40.548072][ T5104] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.64: bg 0: block 112: padding at end of block bitmap is not set [ 40.549582][ T5104] EXT4-fs error (device loop1): ext4_ext_remove_space:2969: inode #15: comm syz.1.64: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 40.551417][ T5104] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 40.589239][ T5108] loop0: detected capacity change from 0 to 8 [ 40.598155][ T4680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.605871][ T5110] loop2: detected capacity change from 0 to 512 [ 40.609748][ T5108] SQUASHFS error: Unable to read inode 0xe3 [ 40.625626][ T5110] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 40.637138][ T5110] EXT4-fs (loop2): invalid journal inode [ 40.637211][ T5110] EXT4-fs (loop2): can't get journal size [ 40.649778][ T5110] EXT4-fs (loop2): 1 truncate cleaned up [ 40.650272][ T5110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.691697][ T5110] EXT4-fs (loop2): shut down requested (1) [ 40.735663][ T5123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.740649][ T5123] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.70: bad orphan inode 131083 [ 40.740679][ T5123] loop4: lost filesystem error report for type 5 error -117 [ 40.749924][ T5126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.753417][ T5123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.763944][ T5126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.796587][ T4674] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.886727][ T5135] FAULT_INJECTION: forcing a failure. [ 40.886727][ T5135] name failslab, interval 1, probability 0, space 0, times 0 [ 40.886765][ T5135] CPU: 1 UID: 0 PID: 5135 Comm: syz.4.73 Not tainted syzkaller #0 PREEMPT [ 40.886778][ T5135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 40.886785][ T5135] Call trace: [ 40.886788][ T5135] show_stack+0x2c/0x3c (C) [ 40.886807][ T5135] __dump_stack+0x30/0x40 [ 40.886818][ T5135] dump_stack_lvl+0xd8/0x12c [ 40.886828][ T5135] dump_stack+0x1c/0x28 [ 40.886837][ T5135] should_fail_ex+0x414/0x588 [ 40.886848][ T5135] should_failslab+0xc4/0x124 [ 40.886858][ T5135] __kmalloc_noprof+0x100/0x638 [ 40.886868][ T5135] genl_family_rcv_msg_attrs_parse+0xcc/0x270 [ 40.886878][ T5135] genl_family_rcv_msg_doit+0xd8/0x2d8 [ 40.886885][ T5135] genl_rcv_msg+0x444/0x620 [ 40.886893][ T5135] netlink_rcv_skb+0x22c/0x410 [ 40.886903][ T5135] genl_rcv+0x38/0x50 [ 40.886909][ T5135] netlink_unicast+0x610/0x800 [ 40.886919][ T5135] netlink_sendmsg+0x63c/0x920 [ 40.886931][ T5135] __sock_sendmsg+0xc8/0x138 [ 40.886940][ T5135] ____sys_sendmsg+0x418/0x70c [ 40.886948][ T5135] ___sys_sendmsg+0x198/0x224 [ 40.886956][ T5135] __sys_sendmsg+0x160/0x214 [ 40.886965][ T5135] __arm64_sys_sendmsg+0x80/0x94 [ 40.886973][ T5135] invoke_syscall+0x98/0x244 [ 40.886982][ T5135] el0_svc_common+0xe8/0x23c [ 40.886991][ T5135] do_el0_svc+0x48/0x58 [ 40.887000][ T5135] el0_svc+0x60/0x25c [ 40.887009][ T5135] el0t_64_sync_handler+0x48/0x148 [ 40.887017][ T5135] el0t_64_sync+0x198/0x19c [ 40.969634][ T5139] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop2 blocksize: 1024 [ 40.969708][ T5139] grow_buffers: requested out-of-range block 144115188075855872 for device loop2 [ 40.969764][ T5139] EXT4-fs warning (device loop2): ext4_resize_fs:2018: can't read last block, resize aborted [ 41.160327][ T5141] SQUASHFS error: Unable to read inode 0xe3 [ 41.179268][ T5143] netlink: 'syz.0.77': attribute type 11 has an invalid length. [ 41.233583][ T5145] binder: 5144:5145 unknown command 0 [ 41.233613][ T5145] binder: 5144:5145 ioctl c0306201 20000080 returned -22 [ 41.233725][ T5147] binder: 5144:5147 got transaction to invalid handle, 1 [ 41.233736][ T5147] binder: 5144:5147 cannot find target node [ 41.233748][ T5147] binder: 5144:5147 transaction call to 0:0 failed 8/29201/-22, code 0 size 104-3992 line 3236 [ 41.244379][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.324029][ T5158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.329791][ T5155] SQUASHFS error: Unable to read inode 0xe3 [ 41.340805][ T5158] EXT4-fs (loop3): 1 truncate cleaned up [ 41.342033][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.354731][ T4659] udevd[4659]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 41.360128][ T5158] EXT4-fs (loop3): shut down requested (2) [ 41.388348][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.492095][ T4668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.550419][ T5173] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 41.554480][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 41.563060][ T4889] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.563194][ T4889] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.563223][ T4889] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.563237][ T4889] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.570186][ T5173] netlink: 'syz.0.88': attribute type 11 has an invalid length. [ 41.571635][ T5173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 41.581314][ T5175] FAULT_INJECTION: forcing a failure. [ 41.581314][ T5175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.581350][ T5175] CPU: 0 UID: 0 PID: 5175 Comm: syz.1.89 Not tainted syzkaller #0 PREEMPT [ 41.581364][ T5175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 41.581369][ T5175] Call trace: [ 41.581372][ T5175] show_stack+0x2c/0x3c (C) [ 41.581391][ T5175] __dump_stack+0x30/0x40 [ 41.581403][ T5175] dump_stack_lvl+0xd8/0x12c [ 41.581412][ T5175] dump_stack+0x1c/0x28 [ 41.581421][ T5175] should_fail_ex+0x414/0x588 [ 41.581433][ T5175] should_fail+0x14/0x24 [ 41.581441][ T5175] should_fail_usercopy+0x20/0x30 [ 41.581451][ T5175] _copy_from_iter+0x19c/0x1030 [ 41.581462][ T5175] netlink_sendmsg+0x56c/0x920 [ 41.581471][ T5175] __sock_sendmsg+0xc8/0x138 [ 41.581479][ T5175] ____sys_sendmsg+0x418/0x70c [ 41.581487][ T5175] ___sys_sendmsg+0x198/0x224 [ 41.581495][ T5175] __sys_sendmsg+0x160/0x214 [ 41.581503][ T5175] __arm64_sys_sendmsg+0x80/0x94 [ 41.581511][ T5175] invoke_syscall+0x98/0x244 [ 41.581522][ T5175] el0_svc_common+0xe8/0x23c [ 41.581531][ T5175] do_el0_svc+0x48/0x58 [ 41.581540][ T5175] el0_svc+0x60/0x25c [ 41.581551][ T5175] el0t_64_sync_handler+0x48/0x148 [ 41.581560][ T5175] el0t_64_sync+0x198/0x19c [ 41.754858][ T5185] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843e02c, mo2=0142] [ 41.754935][ T5185] System zones: 1-12 [ 41.760670][ T5185] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.90: invalid indirect mapped block 8 (level 2) [ 41.760686][ T5185] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 41.761999][ T5185] EXT4-fs (loop2): Remounting filesystem read-only [ 41.762456][ T5185] EXT4-fs (loop2): 1 truncate cleaned up [ 41.833224][ T5194] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 42.540537][ T5185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.635511][ T5204] set_capacity_and_notify: 6 callbacks suppressed [ 42.639155][ T5204] loop1: detected capacity change from 0 to 512 [ 42.647520][ T5205] loop0: detected capacity change from 0 to 512 [ 42.649227][ T5205] vfat: Unknown parameter 'ÿÿÿÿ' [ 42.656786][ T5204] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 42.666184][ T5204] EXT4-fs (loop1): invalid journal inode [ 42.666256][ T5204] EXT4-fs (loop1): can't get journal size [ 42.687381][ T5204] EXT4-fs (loop1): 1 truncate cleaned up [ 42.687871][ T5204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.703654][ T4668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.712234][ T5204] EXT4-fs (loop1): shut down requested (1) [ 42.773345][ T5209] loop2: detected capacity change from 0 to 512 [ 42.778430][ T5209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.796229][ T5209] EXT4-fs (loop2): 1 truncate cleaned up [ 42.797611][ T5209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.824275][ T4661] udevd[4661]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 43.151948][ T5221] FAULT_INJECTION: forcing a failure. [ 43.151948][ T5221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.151985][ T5221] CPU: 1 UID: 0 PID: 5221 Comm: syz.0.103 Tainted: G L syzkaller #0 PREEMPT [ 43.152001][ T5221] Tainted: [L]=SOFTLOCKUP [ 43.152005][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 43.152010][ T5221] Call trace: [ 43.152013][ T5221] show_stack+0x2c/0x3c (C) [ 43.152032][ T5221] __dump_stack+0x30/0x40 [ 43.152042][ T5221] dump_stack_lvl+0xd8/0x12c [ 43.152051][ T5221] dump_stack+0x1c/0x28 [ 43.152059][ T5221] should_fail_ex+0x414/0x588 [ 43.152070][ T5221] should_fail+0x14/0x24 [ 43.152078][ T5221] should_fail_usercopy+0x20/0x30 [ 43.152088][ T5221] copy_to_sockptr+0x80/0x1b4 [ 43.152097][ T5221] do_tcp_getsockopt+0x10a4/0x1cac [ 43.152106][ T5221] tcp_getsockopt+0x6c/0xe8 [ 43.152114][ T5221] sock_common_getsockopt+0xa8/0xc4 [ 43.152122][ T5221] do_sock_getsockopt+0x354/0x790 [ 43.152131][ T5221] __sys_getsockopt+0xfc/0x168 [ 43.152138][ T5221] __arm64_sys_getsockopt+0xb8/0xd4 [ 43.152147][ T5221] invoke_syscall+0x98/0x244 [ 43.152156][ T5221] el0_svc_common+0xe8/0x23c [ 43.152165][ T5221] do_el0_svc+0x48/0x58 [ 43.152173][ T5221] el0_svc+0x60/0x25c [ 43.152182][ T5221] el0t_64_sync_handler+0x48/0x148 [ 43.152191][ T5221] el0t_64_sync+0x198/0x19c [ 43.160467][ T5224] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop1 blocksize: 1024 [ 43.160518][ T5224] grow_buffers: requested out-of-range block 144115188075855872 for device loop1 [ 43.160573][ T5224] EXT4-fs warning (device loop1): ext4_resize_fs:2018: can't read last block, resize aborted [ 43.221357][ T5220] binder: 5219:5220 ioctl 4018620d 0 returned -22 [ 43.221497][ T5220] binder: 5219:5220 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.221509][ T5220] binder: 5220 RLIMIT_NICE not set [ 43.277789][ T5225] binder: 5219:5225 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.280214][ T5225] binder: 5225 RLIMIT_NICE not set [ 43.288787][ T5226] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input4 [ 43.435389][ T5230] EXT4-fs (loop2): shut down requested (2) [ 43.509084][ T5237] loop3: detected capacity change from 0 to 128 [ 43.515727][ T5237] FAT-fs (loop3): bogus number of FAT sectors [ 43.515759][ T5237] FAT-fs (loop3): Can't find a valid FAT filesystem [ 43.522000][ T4680] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.530642][ T4659] udevd[4659]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory [ 43.589670][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 43.795908][ T4668] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.819471][ T5259] netlink: 25 bytes leftover after parsing attributes in process `syz.2.116'. [ 43.823861][ T5259] netlink: 'syz.2.116': attribute type 13 has an invalid length. [ 43.825449][ T5259] netlink: 'syz.2.116': attribute type 17 has an invalid length. [ 43.829541][ T5259] gretap0: refused to change device tx_queue_len [ 43.831286][ T5259] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.910928][ T5260] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 44.750963][ T5264] nbd: must specify a device to reconfigure [ 45.071885][ T5279] FAULT_INJECTION: forcing a failure. [ 45.071885][ T5279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.076998][ T5279] CPU: 1 UID: 0 PID: 5279 Comm: syz.1.123 Tainted: G L syzkaller #0 PREEMPT [ 45.077016][ T5279] Tainted: [L]=SOFTLOCKUP [ 45.077020][ T5279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 45.077026][ T5279] Call trace: [ 45.077029][ T5279] show_stack+0x2c/0x3c (C) [ 45.077052][ T5279] __dump_stack+0x30/0x40 [ 45.077065][ T5279] dump_stack_lvl+0xd8/0x12c [ 45.077075][ T5279] dump_stack+0x1c/0x28 [ 45.077084][ T5279] should_fail_ex+0x414/0x588 [ 45.077094][ T5279] should_fail+0x14/0x24 [ 45.077102][ T5279] should_fail_usercopy+0x20/0x30 [ 45.077112][ T5279] copy_folio_from_iter_atomic+0x38c/0x1450 [ 45.077123][ T5279] generic_perform_write+0x4c0/0x7b8 [ 45.077133][ T5279] shmem_file_write_iter+0x10c/0x134 [ 45.077141][ T5279] vfs_write+0x52c/0xa14 [ 45.077151][ T5279] ksys_write+0x12c/0x224 [ 45.077159][ T5279] __arm64_sys_write+0x7c/0x90 [ 45.077168][ T5279] invoke_syscall+0x98/0x244 [ 45.077177][ T5279] el0_svc_common+0xe8/0x23c [ 45.077186][ T5279] do_el0_svc+0x48/0x58 [ 45.077195][ T5279] el0_svc+0x60/0x25c [ 45.077204][ T5279] el0t_64_sync_handler+0x48/0x148 [ 45.077213][ T5279] el0t_64_sync+0x198/0x19c [ 45.217956][ T5279] loop1: detected capacity change from 0 to 8 [ 45.242807][ T5279] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 45.242830][ T5279] unable to read xattr id index table [ 45.245885][ T5279] squashfs image failed sanity check [ 45.254828][ T5283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'. [ 45.309413][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.311366][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.311937][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 45.333568][ T5291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.127'. [ 45.334413][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 45.385805][ T5299] loop3: detected capacity change from 0 to 512 [ 45.386209][ T5299] EXT4-fs: Ignoring removed orlov option [ 45.388516][ T5299] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.388557][ T5299] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 45.428862][ T5303] nbd: must specify a device to reconfigure [ 45.527548][ T5310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.135'. [ 45.565592][ T5324] loop4: detected capacity change from 0 to 128 [ 45.647395][ T5326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 46.362547][ T5332] tls_set_device_offload: netdev not found [ 46.382635][ T5333] loop2: detected capacity change from 0 to 512 [ 46.566038][ T5344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 46.566397][ T5344] fuse: Bad value for 'fd' [ 46.641199][ T5349] nbd: must specify a device to reconfigure [ 46.696455][ T5348] loop3: detected capacity change from 0 to 4096 [ 46.717572][ T5348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.729765][ T5355] loop4: detected capacity change from 0 to 1024 [ 46.736354][ T5355] EXT4-fs: Ignoring removed oldalloc option [ 46.736426][ T5355] ext4: Unknown parameter 'fsuuid' [ 46.739619][ T5348] fs-verity (loop3, inode 16): Unknown hash algorithm number: 5632 [ 46.743300][ T5363] process 'syz.0.139' launched './file2' with NULL argv: empty string added [ 46.745165][ T5355] binder: 5353:5355 ioctl c018620c 20000100 returned -22 [ 46.747212][ T5359] netlink: 'syz.2.147': attribute type 1 has an invalid length. [ 46.757754][ T4659] udevd[4659]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory [ 46.775497][ T5359] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 46.785681][ T5359] bond1 (unregistering): Released all slaves [ 46.789539][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.857226][ T5370] vhci_hcd vhci_hcd.3: invalid port number 129 [ 46.858868][ T5370] vhci_hcd vhci_hcd.3: invalid port number 129 [ 46.865883][ T5370] binder: 5369:5370 tried to acquire reference to desc 0, got 1 instead [ 46.867774][ T5370] binder: 5369:5370 got reply transaction with bad transaction stack, transaction 14 has target 5369:0 [ 46.870016][ T5370] binder: 5369:5370 transaction reply to 0:0 failed 21/29201/-71, code 0 size 0-0 line 3154 [ 46.872017][ T5370] binder: 5369:5370 ioctl c0306201 20000380 returned -14 [ 46.948019][ T1081] binder: release 5369:5370 transaction 14 out, still active [ 46.948053][ T1081] binder: undelivered TRANSACTION_COMPLETE [ 46.948078][ T1081] binder: undelivered TRANSACTION_ERROR: 29201 [ 46.973476][ T5373] EXT4-fs: Ignoring removed nobh option [ 46.973726][ T5376] EXT4-fs: old and new quota format mixing [ 46.974737][ T1081] binder: send failed reply for transaction 14, target dead [ 46.989569][ T5373] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.036848][ T5381] FAULT_INJECTION: forcing a failure. [ 47.036848][ T5381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.036890][ T5381] CPU: 1 UID: 0 PID: 5381 Comm: syz.3.152 Tainted: G L syzkaller #0 PREEMPT [ 47.036910][ T5381] Tainted: [L]=SOFTLOCKUP [ 47.036913][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.036918][ T5381] Call trace: [ 47.036921][ T5381] show_stack+0x2c/0x3c (C) [ 47.036946][ T5381] __dump_stack+0x30/0x40 [ 47.036957][ T5381] dump_stack_lvl+0xd8/0x12c [ 47.036965][ T5381] dump_stack+0x1c/0x28 [ 47.036974][ T5381] should_fail_ex+0x414/0x588 [ 47.036984][ T5381] should_fail+0x14/0x24 [ 47.036993][ T5381] should_fail_usercopy+0x20/0x30 [ 47.037002][ T5381] simple_read_from_buffer+0xc4/0x240 [ 47.037011][ T5381] proc_fail_nth_read+0x1a8/0x248 [ 47.037019][ T5381] vfs_read+0x230/0x8e4 [ 47.037029][ T5381] ksys_read+0x12c/0x224 [ 47.037037][ T5381] __arm64_sys_read+0x7c/0x90 [ 47.037046][ T5381] invoke_syscall+0x98/0x244 [ 47.037055][ T5381] el0_svc_common+0xe8/0x23c [ 47.037064][ T5381] do_el0_svc+0x48/0x58 [ 47.037073][ T5381] el0_svc+0x60/0x25c [ 47.037082][ T5381] el0t_64_sync_handler+0x48/0x148 [ 47.037090][ T5381] el0t_64_sync+0x198/0x19c [ 47.077127][ T5383] EXT4-fs (loop2): filesystem is read-only [ 47.077161][ T5383] EXT4-fs (loop2): Unsupported encryption level 6 [ 47.155433][ T5373] fscrypt (loop4, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32 [ 47.158012][ T5373] overlayfs: failed to resolve './bus': -2 [ 47.196003][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 1024 [ 47.199145][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 5120 [ 47.200107][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 7168 [ 47.200291][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 8192 [ 47.200427][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.200441][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 9216 [ 47.200673][ T4674] EXT4-fs error (device loop4): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 47.205518][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 1024 [ 47.205692][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 5120 [ 47.205830][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 7168 [ 47.205970][ T4674] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path /28/mnt/lost+found: directory fails checksum at offset 8192 [ 47.206101][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.207547][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.216253][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.217549][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.219063][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.222428][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.225326][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.227620][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.230395][ T4674] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 47.305362][ T5395] EXT4-fs: Invalid want_extra_isize 13 [ 47.505845][ T5399] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 48.573786][ T5417] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 48.575501][ T1081] IPVS: starting estimator thread 0... [ 48.583376][ T5420] set_capacity_and_notify: 4 callbacks suppressed [ 48.583413][ T5420] loop3: detected capacity change from 0 to 1024 [ 48.622068][ T5420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.632854][ T5420] EXT4-fs warning (device loop3): ext4_rmdir:3192: inode #11: comm syz.3.168: empty directory 'file1' has too many links (111) [ 48.661235][ T5421] IPVS: using max 59 ests per chain, 141600 per kthread [ 48.671655][ T5427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.673716][ T5427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.702724][ T4674] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.715871][ T4933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.732717][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.768780][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.768994][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.795836][ T4933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.830270][ T4670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.831160][ T4670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.831465][ T4670] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.831831][ T4670] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.832085][ T4670] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.851866][ T4933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.902200][ T4933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.202774][ T5460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.205052][ T5460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.223808][ T4933] bridge_slave_1: left allmulticast mode [ 49.223853][ T4933] bridge_slave_1: left promiscuous mode [ 49.224334][ T4933] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.228601][ T4933] bridge_slave_0: left allmulticast mode [ 49.229855][ T4933] bridge_slave_0: left promiscuous mode [ 49.231236][ T4933] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.314639][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.314837][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.324701][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.324886][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.327524][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.332791][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.393806][ T4933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.413715][ T4933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.443916][ T4933] bond0 (unregistering): Released all slaves [ 49.465682][ T4357] 8021q: adding VLAN 0 to HW filter on device eth0 [ 49.478315][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.492916][ T5432] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.493056][ T5432] bridge_slave_0: entered allmulticast mode [ 49.493798][ T5432] bridge_slave_0: entered promiscuous mode [ 49.494713][ T5432] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.494759][ T5432] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.494820][ T5432] bridge_slave_1: entered allmulticast mode [ 49.495280][ T5432] bridge_slave_1: entered promiscuous mode [ 49.508032][ T5432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.509003][ T5432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.525711][ T5432] team0: Port device team_slave_0 added [ 49.531264][ T5432] team0: Port device team_slave_1 added [ 49.534647][ T5462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.544046][ T5462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.612053][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.612080][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.612108][ T5432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.612772][ T5432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.612786][ T5432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.612804][ T5432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.653035][ T5432] hsr_slave_0: entered promiscuous mode [ 49.654443][ T5432] hsr_slave_1: entered promiscuous mode [ 49.656012][ T5432] debugfs: 'hsr0' already exists in 'hsr' [ 49.657170][ T5432] Cannot create hsr debugfs directory [ 49.731051][ T4430] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.734135][ T4357] 8021q: adding VLAN 0 to HW filter on device eth1 [ 49.752466][ T5432] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.755432][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.758323][ T5432] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.763545][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.787846][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.788049][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.793040][ T5432] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.795682][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.797340][ T5432] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.800639][ T5432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.809257][ T4933] hsr_slave_0: left promiscuous mode [ 49.810616][ T4933] hsr_slave_1: left promiscuous mode [ 49.812863][ T4933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.814107][ T4933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.815905][ T4933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.817347][ T4933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.829648][ T4933] veth1_macvtap: left promiscuous mode [ 49.829696][ T4933] veth0_macvtap: left promiscuous mode [ 49.829748][ T4933] veth1_vlan: left promiscuous mode [ 49.829820][ T4933] veth0_vlan: left promiscuous mode [ 49.885137][ T4430] usb 1-1: Using ep0 maxpacket: 16 [ 49.887434][ T4430] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.887476][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 49.887495][ T4430] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 49.887511][ T4430] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 49.887526][ T4430] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.888239][ T4430] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 49.888249][ T4430] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 49.888257][ T4430] usb 1-1: Manufacturer: syz [ 49.894200][ T4430] usb 1-1: config 0 descriptor?? [ 50.002658][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.002859][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.032956][ T4933] team0 (unregistering): Port device team_slave_1 removed [ 50.053654][ T4933] team0 (unregistering): Port device team_slave_0 removed [ 50.110444][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.110663][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.180089][ T4357] 8021q: adding VLAN 0 to HW filter on device eth2 [ 50.232617][ T5432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.238377][ T5432] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.243454][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.243498][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.247204][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.247248][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.259873][ T5432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 50.259906][ T5432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.303009][ T4430] Registered IR keymap rc-hauppauge [ 50.351406][ T4430] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 50.351523][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.370923][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.388774][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.388970][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.398613][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.398812][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.399463][ T4430] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 50.400011][ T4430] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 50.414596][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.430873][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.438823][ T5432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.450962][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.472927][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.491482][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.504414][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.504631][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.510994][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.528129][ T4357] 8021q: adding VLAN 0 to HW filter on device eth3 [ 50.532788][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.558405][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.572044][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.573031][ T5432] veth0_vlan: entered promiscuous mode [ 50.575147][ T5432] veth1_vlan: entered promiscuous mode [ 50.588882][ T5432] veth0_macvtap: entered promiscuous mode [ 50.590177][ T5432] veth1_macvtap: entered promiscuous mode [ 50.591969][ T4430] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 50.596929][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.610421][ T5432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.612571][ T4430] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 50.612605][ T4430] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 50.620175][ T4951] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.620231][ T4951] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.620252][ T4951] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.620269][ T4951] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.624325][ T4430] usb 1-1: USB disconnect, device number 2 [ 50.694687][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.694882][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.712154][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.712186][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.738360][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.738394][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.805465][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.805669][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.894926][ T4682] Bluetooth: hci3: command tx timeout [ 50.998606][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.002272][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.243924][ T5553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.244126][ T5553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.271874][ T4430] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.335203][ T5555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.335814][ T5555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.421824][ T4430] usb 1-1: Using ep0 maxpacket: 16 [ 51.423892][ T4430] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.423930][ T4430] usb 1-1: config 0 interface 0 has no altsetting 0 [ 51.423950][ T4430] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 51.423965][ T4430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.433351][ T4430] usb 1-1: config 0 descriptor?? [ 51.531618][ T5557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.533825][ T5557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.820056][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.820268][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.823260][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.823435][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.824585][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.824755][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.827414][ T5563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.827590][ T5563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.849764][ T4430] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 52.056228][ T5567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.056431][ T5567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.112659][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.112860][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.114405][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.115735][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.116224][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.116375][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.256981][ T26] usb 1-1: USB disconnect, device number 3 [ 52.317446][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.317655][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.318596][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.318752][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.320135][ T5565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.320301][ T5565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.356340][ T5569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.356529][ T5569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.699856][ T5584] netlink: 'syz.2.196': attribute type 3 has an invalid length. [ 52.724656][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.725088][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.728018][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.728231][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.731385][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.731558][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.735089][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.735284][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.738562][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.738761][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.742673][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.742864][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.818838][ T5590] loop0: detected capacity change from 0 to 256 [ 52.884144][ T5592] xt_hashlimit: size too large, truncated to 1048576 [ 52.904262][ T14] kworker/u8:1: attempt to access beyond end of device [ 52.904262][ T14] loop0: rw=1, sector=256, nr_sectors = 8 limit=256 [ 52.970794][ T4682] Bluetooth: hci3: command tx timeout [ 53.020504][ T5602] loop3: detected capacity change from 0 to 128 [ 53.526490][ T5643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.704700][ T5660] fuse: Unknown parameter '¶' [ 53.705607][ T5660] cgroup: subsys name conflicts with all [ 53.727759][ T5663] __nla_validate_parse: 1 callbacks suppressed [ 53.729069][ T5663] netlink: 36 bytes leftover after parsing attributes in process `syz.5.231'. [ 53.979351][ T5683] loop3: detected capacity change from 0 to 2048 [ 54.524905][ T30] audit: type=1326 audit(54.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5701 comm="syz.5.248" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.525887][ T30] audit: type=1326 audit(54.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5701 comm="syz.5.248" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.526116][ T30] audit: type=1326 audit(54.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5701 comm="syz.5.248" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.526183][ T30] audit: type=1326 audit(54.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5701 comm="syz.5.248" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.553599][ T30] audit: type=1326 audit(54.540:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.553645][ T30] audit: type=1326 audit(54.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.553666][ T30] audit: type=1326 audit(54.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.553688][ T30] audit: type=1326 audit(54.540:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9355b8ac code=0x7ffc0000 [ 54.569803][ T30] audit: type=1326 audit(54.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.575388][ T30] audit: type=1326 audit(54.560:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5704 comm="syz.5.249" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff935789e8 code=0x7ffc0000 [ 54.791243][ T5709] loop0: detected capacity change from 0 to 2048 [ 54.809148][ T5709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.844836][ T5709] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.251: bg 0: block 234: padding at end of block bitmap is not set [ 54.848814][ T5709] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 54.852618][ T5709] EXT4-fs (loop0): This should not happen!! Data will be lost [ 54.852618][ T5709] [ 54.854792][ T5709] EXT4-fs (loop0): Total free blocks count 0 [ 54.856141][ T5709] EXT4-fs (loop0): Free/Dirty block details [ 54.857351][ T5709] EXT4-fs (loop0): free_blocks=0 [ 54.858664][ T5709] EXT4-fs (loop0): dirty_blocks=32 [ 54.859876][ T5709] EXT4-fs (loop0): Block reservation details [ 54.861413][ T5709] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 54.872581][ T4933] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 54.875894][ T4667] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 54.996117][ T5720] binder: 5719:5720 tried to acquire reference to desc 0, got 1 instead [ 54.996394][ T5720] binder: 5719:5720 got new transaction with bad transaction stack, transaction 26 has target 5719:0 [ 54.996412][ T5720] binder: 5719:5720 transaction call to 5719:0 failed 27/29201/-71, code 0 size 0-0 line 3296 [ 54.996604][ T26] binder: release 5719:5720 transaction 26 out, still active [ 54.996614][ T26] binder: undelivered TRANSACTION_COMPLETE [ 54.996623][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 55.006182][ T26] binder: send failed reply for transaction 26, target dead [ 55.050842][ T4682] Bluetooth: hci3: command tx timeout [ 55.137904][ T5730] loop0: detected capacity change from 0 to 128 [ 55.139380][ T5730] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.166653][ T5730] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.173680][ T5732] loop3: detected capacity change from 0 to 1024 [ 55.175412][ T5732] EXT4-fs: Ignoring removed oldalloc option [ 55.242516][ T5732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.347942][ T5748] loop2: detected capacity change from 0 to 256 [ 55.613157][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.613198][ T5748] FAT-fs (loop2): Filesystem has been set read-only [ 55.613259][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.613273][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617593][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617613][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617638][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617650][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617671][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617683][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 55.617703][ T5748] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 56.039545][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.730251][ T5802] 9p: Bad value for 'rfdno' [ 57.047690][ T5821] warning: `syz.5.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.201506][ T4682] Bluetooth: hci3: command tx timeout [ 57.432001][ T5830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.432627][ T5830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.842508][ T5833] batadv_slave_1: entered promiscuous mode [ 58.099312][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 58.515050][ T5862] loop3: detected capacity change from 0 to 512 [ 58.520306][ T5862] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.309: inode has both inline data and extents flags [ 58.526524][ T5862] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.527444][ T5862] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.309: couldn't read orphan inode 15 (err -117) [ 58.527476][ T5862] loop3: lost filesystem error report for type 5 error -117 [ 58.531561][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 58.531576][ C1] EXT4-fs (loop3): initial error at time 58: ext4_orphan_get:1397: inode 15 [ 58.531592][ C1] EXT4-fs (loop3): last error at time 58: ext4_orphan_get:1397: inode 15 [ 58.538518][ T5862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.560052][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.099218][ T5873] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 59.239623][ T5882] netlink: 620 bytes leftover after parsing attributes in process `syz.5.317'. [ 60.276801][ T5901] loop0: detected capacity change from 0 to 512 [ 60.277231][ T5901] EXT4-fs: Ignoring removed nobh option [ 60.296332][ T5901] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 60.298720][ T5901] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.325: invalid indirect mapped block 256 (level 1) [ 60.298770][ T5901] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.300734][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 60.300749][ C0] EXT4-fs (loop0): initial error at time 60: ext4_free_branches:1023: inode 13 [ 60.300767][ C0] EXT4-fs (loop0): last error at time 60: ext4_free_branches:1023: inode 13 [ 60.312389][ T5901] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.325: invalid indirect mapped block 2683928664 (level 1) [ 60.312434][ T5901] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 60.315832][ T5901] EXT4-fs (loop0): 1 truncate cleaned up [ 60.316344][ T5901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.342307][ T5901] EXT4-fs (loop0): shut down requested (2) [ 60.362603][ T4667] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.441140][ T5833] batadv_slave_1: left promiscuous mode [ 60.462514][ T4682] Bluetooth: hci2: adv larger than maximum supported [ 60.463197][ T4682] Bluetooth: hci2: Malformed LE Event: 0x0d [ 60.547331][ T5917] loop3: detected capacity change from 0 to 2048 [ 60.596747][ T5920] loop2: detected capacity change from 0 to 512 [ 60.607736][ T5917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.634610][ T5922] netlink: 'syz.5.334': attribute type 13 has an invalid length. [ 60.638105][ T5920] loop2: detected capacity change from 0 to 128 [ 60.649079][ T5920] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.659611][ T5920] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.690406][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.738798][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 60.738837][ T30] audit: type=1326 audit(60.720:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.751983][ T30] audit: type=1326 audit(60.740:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752019][ T30] audit: type=1326 audit(60.740:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752047][ T30] audit: type=1326 audit(60.740:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=26 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752066][ T30] audit: type=1326 audit(60.740:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752084][ T30] audit: type=1326 audit(60.740:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752102][ T30] audit: type=1326 audit(60.740:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752119][ T30] audit: type=1326 audit(60.740:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752136][ T30] audit: type=1326 audit(60.740:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.752153][ T30] audit: type=1326 audit(60.740:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5925 comm="syz.3.335" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff881789e8 code=0x7ffc0000 [ 60.887693][ T5943] loop3: detected capacity change from 0 to 512 [ 60.912186][ T5943] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.341: iget: immutable or append flags not allowed on symlinks [ 60.912222][ T5943] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 60.912342][ T5943] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.341: couldn't read orphan inode 17 (err -117) [ 60.912358][ T5943] loop3: lost filesystem error report for type 5 error -117 [ 60.994104][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.000241][ T5948] 9p: Bad value for 'wfdno' [ 61.028031][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.064797][ T5953] loop2: detected capacity change from 0 to 512 [ 61.074829][ T5953] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.075052][ T5953] EXT4-fs warning (device loop2): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 61.231078][ T5963] loop3: detected capacity change from 0 to 8 [ 61.244735][ T5963] SQUASHFS error: Failed to read block 0x4de: -5 [ 61.247923][ T5963] SQUASHFS error: zlib decompression failed, data probably corrupt [ 61.248307][ T5963] SQUASHFS error: Failed to read block 0x4de: -5 [ 61.248580][ T5963] SQUASHFS error: Failed to read block 0x4de: -5 [ 61.248595][ T5963] SQUASHFS error: Unable to read data cache entry [4de] [ 61.248607][ T5963] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 61.492124][ T5963] SQUASHFS error: Unable to read data cache entry [4de] [ 61.503704][ T5963] SQUASHFS error: Unable to read page, block 4de, size 1000000 [ 61.598250][ T5972] loop3: detected capacity change from 0 to 512 [ 61.615007][ T5972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.634785][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.297692][ T6015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.297999][ T6015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.491661][ T4682] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 62.491884][ T4682] Bluetooth: hci2: Injecting HCI hardware error event [ 62.495191][ T4670] Bluetooth: hci2: hardware error 0x00 [ 62.758590][ T6029] loop3: detected capacity change from 0 to 512 [ 62.760320][ T6029] vfat: Unknown parameter 'io862' [ 62.769590][ T6029] loop3: detected capacity change from 0 to 512 [ 62.790334][ T6029] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.363: bad orphan inode 17 [ 62.790367][ T6029] loop3: lost filesystem error report for type 5 error -117 [ 62.790755][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 62.790773][ C0] EXT4-fs (loop3): initial error at time 62: ext4_orphan_get:1423 [ 62.790788][ C0] EXT4-fs (loop3): last error at time 62: ext4_orphan_get:1423 [ 62.798740][ T6029] ext4_test_bit(bit=16, block=4) = 1 [ 62.798772][ T6029] is_bad_inode(inode)=0 [ 62.798792][ T6029] NEXT_ORPHAN(inode)=0 [ 62.798797][ T6029] max_ino=32 [ 62.798802][ T6029] i_nlink=1 [ 62.799313][ T6029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.952215][ T4673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.026310][ T4682] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 63.026344][ T4682] CPU: 1 UID: 0 PID: 4682 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT [ 63.026362][ T4682] Tainted: [L]=SOFTLOCKUP [ 63.026366][ T4682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 63.026372][ T4682] Workqueue: hci1 hci_rx_work [ 63.026393][ T4682] Call trace: [ 63.026396][ T4682] show_stack+0x2c/0x3c (C) [ 63.026413][ T4682] __dump_stack+0x30/0x40 [ 63.026424][ T4682] dump_stack_lvl+0xd8/0x12c [ 63.026434][ T4682] dump_stack+0x1c/0x28 [ 63.026444][ T4682] sysfs_warn_dup+0x9c/0xb8 [ 63.026457][ T4682] sysfs_create_dir_ns+0x190/0x1f4 [ 63.026468][ T4682] kobject_add_internal+0x28c/0x6e8 [ 63.026481][ T4682] kobject_add_varg+0x98/0xe4 [ 63.026492][ T4682] kobject_add+0x110/0x1cc [ 63.026503][ T4682] device_add+0x390/0x9e4 [ 63.026513][ T4682] hci_conn_add_sysfs+0xc0/0x1f4 [ 63.026522][ T4682] le_conn_complete_evt+0xc3c/0x109c [ 63.026530][ T4682] hci_le_conn_complete_evt+0x114/0x40c [ 63.026543][ T4682] hci_le_meta_evt+0x2d4/0x49c [ 63.026552][ T4682] hci_event_packet+0x4e4/0xa00 [ 63.026560][ T4682] hci_rx_work+0x2fc/0xd1c [ 63.026571][ T4682] process_one_work+0x78c/0x173c [ 63.026582][ T4682] process_scheduled_works+0xdc/0x13c [ 63.026592][ T4682] worker_thread+0x770/0xbd0 [ 63.026603][ T4682] kthread+0x2f0/0x3c0 [ 63.026612][ T4682] ret_from_fork+0x10/0x20 [ 63.027018][ T4682] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 63.027050][ T4682] Bluetooth: hci1: failed to register connection device [ 63.311993][ T6081] ------------[ cut here ]------------ [ 63.312010][ T6081] WARNING: fs/exec.c:119 at path_noexec+0x1a4/0x1d4, CPU#1: syz.2.376/6081 [ 63.314467][ T6081] Modules linked in: [ 63.315128][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.2.376 Tainted: G L syzkaller #0 PREEMPT [ 63.316878][ T6081] Tainted: [L]=SOFTLOCKUP [ 63.317601][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 63.319401][ T6081] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 63.320763][ T6081] pc : path_noexec+0x1a4/0x1d4 [ 63.321602][ T6081] lr : path_noexec+0x1a4/0x1d4 [ 63.322398][ T6081] sp : ffff800098747a50 [ 63.323115][ T6081] x29: ffff800098747a50 x28: dfff800000000000 x27: ffff0000d467ec88 [ 63.324463][ T6081] x26: 0000000000000011 x25: 0000000000000000 x24: 0000000020ffc000 [ 63.325835][ T6081] x23: 0000000000001000 x22: 1fffe0001a8cfd98 x21: dfff800000000000 [ 63.327177][ T6081] x20: 0000000000000000 x19: ffff0000d467ecc0 x18: 0000000000000000 [ 63.328581][ T6081] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 63.329888][ T6081] x14: 0000000000000000 x13: 0000000000000004 x12: 0000000000000000 [ 63.331228][ T6081] x11: 0000000000000000 x10: 0000000000080000 x9 : 00000000000000ee [ 63.332640][ T6081] x8 : ffff80009bc1e000 x7 : 0000000000000000 x6 : 000000000007764a [ 63.334019][ T6081] x5 : 0000000000000070 x4 : 0000000000000008 x3 : ffff800080c6b224 [ 63.335388][ T6081] x2 : 0000000000000000 x1 : ffff0000cd6a0000 x0 : 0000000000000001 [ 63.336661][ T6081] Call trace: [ 63.337156][ T6081] path_noexec+0x1a4/0x1d4 (P) [ 63.337966][ T6081] do_mmap+0xac4/0xeb8 [ 63.338646][ T6081] vm_mmap_pgoff+0x2e4/0x470 [ 63.339458][ T6081] ksys_mmap_pgoff+0x398/0x5b4 [ 63.340291][ T6081] __arm64_sys_mmap+0xf8/0x110 [ 63.341159][ T6081] invoke_syscall+0x98/0x244 [ 63.341886][ T6081] el0_svc_common+0xe8/0x23c [ 63.342664][ T6081] do_el0_svc+0x48/0x58 [ 63.343403][ T6081] el0_svc+0x60/0x25c [ 63.344086][ T6081] el0t_64_sync_handler+0x48/0x148 [ 63.345005][ T6081] el0t_64_sync+0x198/0x19c [ 63.345818][ T6081] irq event stamp: 296 [ 63.346457][ T6081] hardirqs last enabled at (295): [] local_daif_restore+0x1c/0x3c [ 63.347915][ T6081] hardirqs last disabled at (296): [] el1_brk64+0x20/0x54 [ 63.349286][ T6081] softirqs last enabled at (290): [] local_bh_enable+0x10/0x34 [ 63.350857][ T6081] softirqs last disabled at (288): [] local_bh_disable+0x10/0x34 [ 63.352488][ T6081] ---[ end trace 0000000000000000 ]--- [ 64.494023][ T1575] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494083][ T1575] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.495519][ T10] cfg80211: failed to load regulatory.db [ 64.810834][ T4670] Bluetooth: hci2: Opcode 0x0c03 failed: -110