last executing test programs: 2m1.733849885s ago: executing program 32 (id=377): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x200080c0) 1m45.854094381s ago: executing program 3 (id=649): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) 1m45.822536991s ago: executing program 3 (id=650): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000880)=ANY=[@ANYBLOB="2001"], 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) 1m45.788880502s ago: executing program 3 (id=651): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f00000001c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 1m45.535540863s ago: executing program 3 (id=662): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m45.218360306s ago: executing program 3 (id=670): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd"], 0x0) 1m44.943408247s ago: executing program 3 (id=671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) 1m44.857476138s ago: executing program 33 (id=671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) 1m19.341428249s ago: executing program 2 (id=929): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000280)={0x40, 0xc, 0x5, {0x5, 0x22, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m19.14418478s ago: executing program 5 (id=933): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000000440)={[{@size={'size', 0x3d, [0x6b]}}, {}, {@inode32}, {@mode={'mode', 0x3d, 0x5}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x30, 0x35, 0x8]}}]}) setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x2) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x20000015) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x7, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0xfffffffd, @remote}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000020000000c000000001400007077194cf70a0d302a4723b56e4ba61aec2d491cb9fdf943f96b8a0b"], 0x48) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x5) syz_usb_control_io(r2, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x4, 0xcb78, {{0x18, 0x4, 0x2, 0x38, 0x60, 0x65, 0x0, 0x6, 0x29, 0x0, @local, @loopback, {[@rr={0x7, 0xf, 0xae, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp={0x44, 0x28, 0xe0, 0x0, 0x0, [0xffff, 0x4, 0x800, 0x8, 0x1, 0x5, 0x5, 0x2, 0x5]}, @end, @timestamp_addr={0x44, 0x14, 0xc2, 0x1, 0x7, [{@broadcast, 0xfffffff3}, {@private=0xa010102, 0x7819a7e9}]}]}}}}}) syz_open_procfs(0x0, &(0x7f0000000340)='net/igmp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_load(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x10) 1m18.411674435s ago: executing program 1 (id=935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893e9"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1m18.389725915s ago: executing program 1 (id=936): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m18.251883746s ago: executing program 1 (id=938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x8}]}, 0x10) bind$packet(r1, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000001f00)=ANY=[], 0x0) 1m18.204590446s ago: executing program 1 (id=940): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m17.979201508s ago: executing program 1 (id=946): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c000000130009eeffffff001e0000ffff000000", @ANYRES32=r6, @ANYBLOB="144004000020000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x855}, 0x0) fcntl$lock(r3, 0x23, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x10, r0}) openat$cgroup_devices(r4, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x2028060}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='1-0:', @ANYRESHEX], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="8c9394f4cfec6f15c7c5d0b3474a73471800"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m17.73357342s ago: executing program 1 (id=949): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m17.485217781s ago: executing program 34 (id=949): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m17.106058294s ago: executing program 2 (id=953): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = epoll_create(0x4) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x60002010}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xffffffff, 0x0, 0x0) 1m17.027595454s ago: executing program 2 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1m16.955146375s ago: executing program 2 (id=957): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m16.932088555s ago: executing program 5 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) stat(0x0, 0x0) 1m16.908355165s ago: executing program 5 (id=959): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c000000130009eeffffff001e0000ffff000000", @ANYRES32=r6, @ANYBLOB="144004000020000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x855}, 0x0) fcntl$lock(r3, 0x23, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x10, r0}) openat$cgroup_devices(r4, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x2028060}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='1-0:', @ANYRESHEX], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="8c9394f4cfec6f15c7c5d0b3474a73471800"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m16.27395271s ago: executing program 2 (id=960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r0}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xff, 0x0) 1m16.013634391s ago: executing program 2 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1m16.013379801s ago: executing program 35 (id=966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1m15.959802181s ago: executing program 5 (id=970): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m15.703620713s ago: executing program 5 (id=975): sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x154}}, 0x20040044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10001, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 1m15.451977875s ago: executing program 5 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m15.434229225s ago: executing program 36 (id=976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x6}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m7.492121788s ago: executing program 7 (id=1079): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20003af1}, 0xa}], 0x400000000000172, 0x4000300) 1m7.451222738s ago: executing program 7 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x94}}}}}}, 0x0) 1m7.440494118s ago: executing program 7 (id=1082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r1, &(0x7f00000000c0)={'system_u:object_r:adjtime_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x8}, 0x43) 1m7.397909699s ago: executing program 7 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@noacl}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 1m7.061965481s ago: executing program 7 (id=1085): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m6.941583612s ago: executing program 7 (id=1086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 1m6.940885612s ago: executing program 37 (id=1086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff017f000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_POLL(r3, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) 2.356527944s ago: executing program 0 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 1.873154248s ago: executing program 9 (id=2061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.872812567s ago: executing program 8 (id=2062): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 1.847775588s ago: executing program 8 (id=2063): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) 1.813307278s ago: executing program 8 (id=2064): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 1.788631578s ago: executing program 8 (id=2065): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=ANY=[@ANYBLOB="0c000000130009eeffffff001e0000ffff000000", @ANYRES32=r6, @ANYBLOB="144004000020000008001300", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x855}, 0x0) fcntl$lock(r3, 0x23, &(0x7f00000003c0)={0x0, 0x0, 0x6, 0x10, r0}) r7 = openat$cgroup_devices(r4, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000380)={'a', ' *:* ', 'wm\x00'}, 0x9) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x2028060}}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='1-0:', @ANYRESHEX], 0x27) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="8c9394f4cfec6f15c7c5d0b3474a73471800"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.780841068s ago: executing program 9 (id=2066): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.766446188s ago: executing program 9 (id=2067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 1.741955538s ago: executing program 9 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 1.692564619s ago: executing program 9 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018600000000000000000000000776b0018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) 1.681821689s ago: executing program 9 (id=2070): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 1.582934019s ago: executing program 4 (id=2071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.48966957s ago: executing program 4 (id=2072): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c5"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rwm\x00'}, 0xa) 1.46910577s ago: executing program 0 (id=2073): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 1.45550971s ago: executing program 0 (id=2074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) write$cgroup_pid(r1, &(0x7f0000000300), 0x20000312) 1.415708371s ago: executing program 4 (id=2075): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)='%-5lx \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x0, @void}}}}}}}, 0x0) 1.41511094s ago: executing program 4 (id=2076): sched_setscheduler(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[], 0x154}}, 0x20040044) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x10001, 0x40) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) 1.313283721s ago: executing program 0 (id=2077): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r1, &(0x7f00000005c0), 0x2, 0x0) 1.304179461s ago: executing program 0 (id=2078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r0}, 0x10) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.258947772s ago: executing program 0 (id=2079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000e00)={0x2c, &(0x7f0000000280)={0x40, 0xc, 0x5, {0x5, 0x22, "820027"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 888.422854ms ago: executing program 8 (id=2083): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 468.980877ms ago: executing program 4 (id=2086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 363.369688ms ago: executing program 6 (id=2087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 321.553708ms ago: executing program 4 (id=2088): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 297.520508ms ago: executing program 6 (id=2089): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 257.007869ms ago: executing program 6 (id=2090): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f00000005c0), 0x2, 0x0) 213.579239ms ago: executing program 6 (id=2091): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000001000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x3301}) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) 151.376949ms ago: executing program 6 (id=2092): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0xff, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000000), 0x20000000}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 125.173539ms ago: executing program 6 (id=2093): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) 0s ago: executing program 8 (id=2094): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): entered blocking state [ 96.739369][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.777732][ T312] device bridge_slave_1 left promiscuous mode [ 96.783697][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.793633][ T30] audit: type=1326 audit(1731982483.066:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 96.817169][ T312] device bridge_slave_0 left promiscuous mode [ 96.823346][ T30] audit: type=1326 audit(1731982483.116:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 96.830741][ T2920] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 96.846772][ T30] audit: type=1326 audit(1731982483.116:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 96.854675][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.877101][ T30] audit: type=1326 audit(1731982483.116:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 96.903994][ T2920] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 96.907533][ T30] audit: type=1326 audit(1731982483.126:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ada3c30f0 code=0x7ffc0000 [ 96.937077][ T312] device veth1_macvtap left promiscuous mode [ 96.937267][ T30] audit: type=1326 audit(1731982483.136:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 96.944249][ T312] device veth0_vlan left promiscuous mode [ 97.017491][ T30] audit: type=1326 audit(1731982483.136:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 97.046437][ T30] audit: type=1326 audit(1731982483.136:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2949 comm="syz.7.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 97.130762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.138613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.173409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.184334][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.475347][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.482230][ T2945] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.489707][ T2945] device bridge_slave_0 entered promiscuous mode [ 97.496440][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.504620][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.513125][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.521142][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.531737][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.538619][ T2945] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.545957][ T2945] device bridge_slave_1 entered promiscuous mode [ 97.556176][ T2924] device veth0_vlan entered promiscuous mode [ 97.576120][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.584648][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.600530][ T2924] device veth1_macvtap entered promiscuous mode [ 97.617324][ T6] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.648072][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.664615][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.711837][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.720431][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.730953][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.732431][ T2972] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2972 comm=syz.7.983 [ 97.861132][ T2945] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.868038][ T2945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.868159][ T2945] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.882082][ T2945] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.917596][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.925267][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.934720][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.004089][ T2945] device veth0_vlan entered promiscuous mode [ 98.041527][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.051085][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.065530][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.074195][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.083547][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.092697][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.100992][ T337] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 98.109196][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.116092][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.123700][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.131629][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.141258][ T2945] device veth1_macvtap entered promiscuous mode [ 98.155030][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.157832][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.164112][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.173825][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.191437][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.200488][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.210664][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.213035][ T6] usb 1-1: config 0 descriptor?? [ 98.219112][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.352857][ T2993] overlayfs: failed to resolve './file2': -2 [ 98.367290][ T337] usb 9-1: Using ep0 maxpacket: 16 [ 98.372403][ T530] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 98.478636][ T312] device bridge_slave_1 left promiscuous mode [ 98.484718][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.492032][ T312] device bridge_slave_0 left promiscuous mode [ 98.498093][ T337] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.498147][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.508452][ T337] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.524356][ T312] device veth1_macvtap left promiscuous mode [ 98.530330][ T312] device veth0_vlan left promiscuous mode [ 98.637304][ T530] usb 8-1: Using ep0 maxpacket: 8 [ 98.669267][ T2998] loop6: detected capacity change from 0 to 256 [ 98.691229][ T2998] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 98.707635][ T337] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.716684][ T337] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.725190][ T337] usb 9-1: Product: syz [ 98.729509][ T337] usb 9-1: Manufacturer: syz [ 98.734310][ T337] usb 9-1: SerialNumber: syz [ 98.788756][ T530] usb 8-1: config 0 has no interfaces? [ 98.797711][ T6] usbhid 1-1:0.0: can't add hid device: -71 [ 98.805188][ T6] usbhid: probe of 1-1:0.0 failed with error -71 [ 98.813207][ T6] usb 1-1: USB disconnect, device number 6 [ 98.968064][ T530] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.980023][ T530] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.994006][ T530] usb 8-1: Product: syz [ 99.001143][ T530] usb 8-1: Manufacturer: syz [ 99.009642][ T530] usb 8-1: SerialNumber: syz [ 99.020391][ T530] usb 8-1: config 0 descriptor?? [ 99.132094][ T3020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3020 comm=syz.9.1002 [ 99.218259][ T2978] SELinux: failed to load policy [ 99.257711][ T337] usb 9-1: 0:2 : does not exist [ 99.272529][ T6] usb 8-1: USB disconnect, device number 2 [ 99.362412][ T337] usb 9-1: USB disconnect, device number 2 [ 99.372938][ T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 99.437338][ T300] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 99.569917][ T3046] syz.0.1012[3046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.570258][ T3046] syz.0.1012[3046] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.767277][ T300] usb 10-1: Using ep0 maxpacket: 16 [ 99.902644][ T3051] overlayfs: failed to resolve './file2': -2 [ 99.907367][ T300] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 99.916440][ T3057] loop6: detected capacity change from 0 to 1024 [ 99.916822][ T300] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.933078][ T300] usb 10-1: config 0 has no interface number 0 [ 99.998656][ T3057] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 100.023277][ T3057] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 100.097364][ T300] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 100.106501][ T300] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.117093][ T300] usb 10-1: Product: syz [ 100.121240][ T300] usb 10-1: Manufacturer: syz [ 100.125758][ T300] usb 10-1: SerialNumber: syz [ 100.131157][ T300] usb 10-1: config 0 descriptor?? [ 100.175204][ T300] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 100.181629][ T300] usb 10-1: No valid video chain found. [ 100.191975][ T3074] syz.6.1022[3074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.192099][ T3074] syz.6.1022[3074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.369430][ T6] usb 10-1: USB disconnect, device number 2 [ 100.567290][ T337] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 100.837286][ T337] usb 7-1: Using ep0 maxpacket: 16 [ 100.846333][ T3092] device bridge_slave_1 left promiscuous mode [ 100.852431][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.860196][ T3092] device bridge_slave_0 left promiscuous mode [ 100.866120][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.957793][ T337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.977860][ T337] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.996866][ T337] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 101.022475][ T337] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.039934][ T337] usb 7-1: config 0 descriptor?? [ 101.081930][ T3095] kvm: emulating exchange as write [ 101.109783][ T3110] loop7: detected capacity change from 0 to 2048 [ 101.140923][ T3097] loop9: detected capacity change from 0 to 256 [ 101.154039][ T3110] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 101.182642][ T3115] device pim6reg1 entered promiscuous mode [ 101.189817][ T3097] exfat: Bad value for 'uid' [ 101.338057][ T3125] 9pnet: Insufficient options for proto=fd [ 101.344608][ T3119] overlayfs: failed to resolve './file2': -2 [ 101.541097][ T337] hid-multitouch 0003:1FD2:6007.000A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 101.738710][ T300] usb 7-1: USB disconnect, device number 2 [ 102.305723][ T3155] device pim6reg1 entered promiscuous mode [ 102.401258][ T3159] 9pnet: Insufficient options for proto=fd [ 102.593157][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 102.593173][ T30] audit: type=1326 audit(1731982488.976:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3174 comm="syz.6.1059" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31c99cc759 code=0x0 [ 102.674386][ T3176] syz.0.1056[3176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.674715][ T3176] syz.0.1056[3176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.694972][ T3176] fuse: Bad value for 'fd' [ 103.409046][ T3190] 9pnet: Insufficient options for proto=fd [ 103.475990][ T3192] loop9: detected capacity change from 0 to 128 [ 103.689577][ T30] audit: type=1326 audit(1731982490.066:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.715069][ T30] audit: type=1326 audit(1731982490.076:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.762275][ T30] audit: type=1326 audit(1731982490.076:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.833152][ T30] audit: type=1326 audit(1731982490.076:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.862950][ T30] audit: type=1326 audit(1731982490.076:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.886522][ T30] audit: type=1326 audit(1731982490.076:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 103.914336][ T30] audit: type=1326 audit(1731982490.076:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.6.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 104.137267][ T337] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.137290][ T300] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 104.172285][ T3217] device bridge0 entered promiscuous mode [ 104.247360][ T30] audit: type=1326 audit(1731982490.606:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3220 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 104.324592][ T30] audit: type=1326 audit(1731982490.606:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3220 comm="syz.7.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ada3c4759 code=0x7ffc0000 [ 104.330080][ T3225] fuse: Bad value for 'fd' [ 104.356502][ T3225] 9pnet: Insufficient options for proto=fd [ 104.479614][ T3241] loop7: detected capacity change from 0 to 512 [ 104.567338][ T300] usb 9-1: Using ep0 maxpacket: 16 [ 104.572999][ T3241] EXT4-fs (loop7): Mount option "noacl" will be removed by 3.5 [ 104.572999][ T3241] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 104.572999][ T3241] [ 104.590757][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.601785][ T3241] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 104.611514][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.621731][ T337] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 104.634595][ T3243] syz.9.1083[3243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.634927][ T3243] syz.9.1083[3243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.679002][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.711218][ T337] usb 1-1: config 0 descriptor?? [ 104.743814][ T3241] EXT4-fs (loop7): 1 truncate cleaned up [ 104.749568][ T3241] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable,noacl,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 104.877385][ T300] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.907051][ T300] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.003419][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.010605][ T3250] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.018124][ T3250] device bridge_slave_0 entered promiscuous mode [ 105.032825][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.048649][ T3250] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.063151][ T3250] device bridge_slave_1 entered promiscuous mode [ 105.080073][ T3255] syz.6.1087[3255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.080631][ T3255] syz.6.1087[3255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.307406][ T300] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.340173][ T3250] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.347106][ T3250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.354176][ T3250] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.361040][ T3250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.373507][ T300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.392082][ T300] usb 9-1: Product: syz [ 105.396127][ T300] usb 9-1: Manufacturer: syz [ 105.401146][ T300] usb 9-1: SerialNumber: syz [ 105.406061][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.414119][ T1326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.422223][ T337] usbhid 1-1:0.0: can't add hid device: -71 [ 105.428269][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.428481][ T337] usbhid: probe of 1-1:0.0 failed with error -71 [ 105.494808][ T3263] loop9: detected capacity change from 0 to 128 [ 105.654646][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.705399][ T1777] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.712295][ T1777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.764049][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.780320][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.791784][ T337] usb 1-1: USB disconnect, device number 7 [ 105.806378][ T3250] device veth0_vlan entered promiscuous mode [ 105.812767][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.822848][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.831008][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.838975][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.865213][ T3250] device veth1_macvtap entered promiscuous mode [ 105.885540][ T3206] SELinux: failed to load policy [ 105.917418][ T300] usb 9-1: 0:2 : does not exist [ 105.921740][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.930793][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.939031][ T3274] fuse: Bad value for 'fd' [ 105.939851][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.945430][ T3274] 9pnet: Insufficient options for proto=fd [ 106.000846][ T300] usb 9-1: USB disconnect, device number 3 [ 106.008711][ T3283] loop4: detected capacity change from 0 to 1024 [ 106.039146][ T3283] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 106.243412][ T3290] syz.4.1099[3290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.243737][ T3290] syz.4.1099[3290] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.290026][ T1326] device bridge_slave_1 left promiscuous mode [ 106.308793][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.320543][ T1326] device bridge_slave_0 left promiscuous mode [ 106.327305][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.376554][ T1326] device veth1_macvtap left promiscuous mode [ 106.383309][ T1326] device veth0_vlan left promiscuous mode [ 107.127760][ T3309] fuse: Bad value for 'fd' [ 107.136779][ T3309] 9pnet: Insufficient options for proto=fd [ 107.275652][ T3321] loop6: detected capacity change from 0 to 128 [ 107.700671][ T39] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.712871][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 107.712885][ T30] audit: type=1326 audit(1731982494.096:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 107.745072][ T3341] syz.4.1115[3341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.745416][ T3341] syz.4.1115[3341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.763248][ T30] audit: type=1326 audit(1731982494.096:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 107.871438][ T30] audit: type=1326 audit(1731982494.196:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 107.927686][ T30] audit: type=1326 audit(1731982494.206:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 107.953634][ T30] audit: type=1326 audit(1731982494.216:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 107.979553][ T30] audit: type=1326 audit(1731982494.216:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 108.027258][ T30] audit: type=1326 audit(1731982494.216:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 108.053660][ T30] audit: type=1326 audit(1731982494.216:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 108.076986][ T30] audit: type=1326 audit(1731982494.216:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 108.101318][ T30] audit: type=1326 audit(1731982494.226:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3337 comm="syz.8.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 108.160575][ T3351] fuse: Bad value for 'fd' [ 108.165534][ T3351] 9pnet: Insufficient options for proto=fd [ 108.177460][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.191011][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.201001][ T39] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 108.210170][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.218949][ T39] usb 1-1: config 0 descriptor?? [ 109.297670][ T3374] syz.9.1131[3374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.297754][ T3374] syz.9.1131[3374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.311341][ T3374] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1131'. [ 109.343203][ T3374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.457506][ T39] hid (null): global environment stack underflow [ 109.464854][ T39] uclogic 0003:5543:0522.000B: global environment stack underflow [ 109.588911][ T39] uclogic 0003:5543:0522.000B: item 0 1 1 11 parsing failed [ 109.620668][ T39] uclogic 0003:5543:0522.000B: parse failed [ 109.711121][ T39] uclogic: probe of 0003:5543:0522.000B failed with error -22 [ 109.849393][ T39] usb 1-1: USB disconnect, device number 8 [ 110.003440][ T3384] loop9: detected capacity change from 0 to 40427 [ 110.074132][ T3400] bpf_get_probe_write_proto: 2 callbacks suppressed [ 110.074171][ T3400] syz.4.1139[3400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.081561][ T3400] syz.4.1139[3400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.262839][ T3384] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 110.281816][ T3384] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 110.298581][ T3384] F2FS-fs (loop9): invalid crc value [ 110.318991][ T3384] F2FS-fs (loop9): Found nat_bits in checkpoint [ 110.381633][ T3384] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 110.388802][ T3384] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 110.400368][ T300] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 111.459703][ T3420] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.466693][ T3420] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.476173][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.483095][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.490236][ T3420] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.497086][ T3420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.509179][ T3420] device bridge0 entered promiscuous mode [ 111.900692][ T8] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 111.917318][ T300] usb 9-1: Using ep0 maxpacket: 8 [ 111.918441][ T8] F2FS-fs (loop9): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 111.964868][ T3431] syz.4.1149[3431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.964948][ T3431] syz.4.1149[3431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.037349][ T300] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.038537][ T3437] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3437 comm=syz.0.1152 [ 112.067285][ T300] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.087500][ T300] usb 9-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 112.108014][ T300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.120183][ T300] usb 9-1: config 0 descriptor?? [ 113.464326][ T530] Bluetooth: hci0: command 0x1003 tx timeout [ 113.470240][ T352] Bluetooth: hci0: sending frame failed (-49) [ 113.488019][ T1777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.610206][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 113.610221][ T30] audit: type=1326 audit(1731982499.996:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 113.667320][ T300] usbhid 9-1:0.0: can't add hid device: -71 [ 113.674324][ T300] usbhid: probe of 9-1:0.0 failed with error -71 [ 113.677266][ T30] audit: type=1326 audit(1731982500.026:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 113.711502][ T300] usb 9-1: USB disconnect, device number 4 [ 113.738657][ T30] audit: type=1326 audit(1731982500.026:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 113.766899][ T30] audit: type=1326 audit(1731982500.026:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 113.795088][ T30] audit: type=1326 audit(1731982500.026:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 113.834181][ T30] audit: type=1326 audit(1731982500.026:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3471 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 113.867617][ T30] audit: type=1326 audit(1731982500.026:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3471 comm="syz.0.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 113.905786][ T30] audit: type=1326 audit(1731982500.036:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 114.280332][ T30] audit: type=1326 audit(1731982500.036:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 114.309216][ T30] audit: type=1326 audit(1731982500.036:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3468 comm="syz.9.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 114.340467][ T3431] loop4: detected capacity change from 0 to 131072 [ 114.432558][ T3431] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.803247][ T3431] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 115.015944][ T3527] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.022872][ T3527] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.029944][ T3527] device bridge0 left promiscuous mode [ 115.037062][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.043949][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.051038][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.057824][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.065670][ T3527] device bridge0 entered promiscuous mode [ 115.110103][ T3533] device pim6reg1 entered promiscuous mode [ 115.286545][ T3539] loop4: detected capacity change from 0 to 128 [ 115.559214][ T39] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 115.566699][ T337] Bluetooth: hci0: command 0x1001 tx timeout [ 115.572780][ T352] Bluetooth: hci0: sending frame failed (-49) [ 115.847297][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 116.017383][ T39] usb 9-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 16 [ 116.027369][ T39] usb 9-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 16 [ 116.037117][ T39] usb 9-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.050441][ T39] usb 9-1: config 1 interface 0 has no altsetting 0 [ 116.077305][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.217334][ T39] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.226395][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.334559][ T39] usb 9-1: Product: syz [ 116.340329][ T39] usb 9-1: Manufacturer: syz [ 116.344781][ T39] usb 9-1: SerialNumber: syz [ 116.367343][ T3519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.374212][ T3519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.557755][ T3580] loop9: detected capacity change from 0 to 1024 [ 116.628849][ T3580] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,lazytime,noblock_validity,,errors=continue. Quota mode: none. [ 116.835092][ T3600] loop9: detected capacity change from 0 to 512 [ 116.960165][ T3600] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.971623][ T3600] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 116.981605][ T3600] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1212: Corrupt directory, running e2fsck is recommended [ 116.994478][ T3600] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 117.002982][ T3600] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1212: corrupted in-inode xattr [ 117.017520][ T3600] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1212: couldn't read orphan inode 15 (err -117) [ 117.029774][ T3600] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 117.064880][ T39] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 117.071866][ T3610] syz.0.1215[3610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.071953][ T3610] syz.0.1215[3610] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.087305][ T39] usb 9-1: USB disconnect, device number 5 [ 117.309879][ T3618] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.321278][ T3618] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 117.331294][ T3618] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1212: Corrupt directory, running e2fsck is recommended [ 117.346192][ T3618] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.357606][ T3618] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 117.367565][ T3618] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1212: Corrupt directory, running e2fsck is recommended [ 117.380467][ T3618] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 3: comm syz.9.1212: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 117.598185][ T530] Bluetooth: hci0: command 0x1009 tx timeout [ 117.881425][ T3674] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1244'. [ 117.892733][ T3674] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.075562][ T3691] syz.0.1245[3691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.075914][ T3691] syz.0.1245[3691] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.373400][ T3685] syz.9.1247[3685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.399732][ T3685] syz.9.1247[3685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.499753][ T3707] device pim6reg1 entered promiscuous mode [ 118.545793][ T3716] device pim6reg1 entered promiscuous mode [ 118.777760][ T30] kauditd_printk_skb: 186 callbacks suppressed [ 118.777776][ T30] audit: type=1326 audit(1731982505.166:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.807443][ T30] audit: type=1326 audit(1731982505.166:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.831007][ T30] audit: type=1326 audit(1731982505.166:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.854515][ T30] audit: type=1326 audit(1731982505.166:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.878234][ T30] audit: type=1326 audit(1731982505.166:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.901610][ T30] audit: type=1326 audit(1731982505.166:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.924931][ T30] audit: type=1326 audit(1731982505.186:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.948210][ T30] audit: type=1326 audit(1731982505.196:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.971539][ T30] audit: type=1326 audit(1731982505.196:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 118.994790][ T30] audit: type=1326 audit(1731982505.196:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3732 comm="syz.0.1266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 119.107270][ T337] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.248072][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.254998][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.261986][ T3739] device bridge0 left promiscuous mode [ 119.269599][ T3739] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.276448][ T3739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.283584][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.290434][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.297827][ T3739] device bridge0 entered promiscuous mode [ 119.357287][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 119.413608][ T3747] device pim6reg1 entered promiscuous mode [ 119.490872][ T3754] fuse: Bad value for 'fd' [ 119.495647][ T3754] 9pnet: Insufficient options for proto=fd [ 119.508969][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.519754][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.529884][ T337] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 119.538950][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.548624][ T337] usb 1-1: config 0 descriptor?? [ 119.627278][ T421] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.739932][ T3771] device pim6reg1 entered promiscuous mode [ 119.810564][ T3775] device pim6reg1 entered promiscuous mode [ 119.877313][ T421] usb 5-1: Using ep0 maxpacket: 8 [ 119.902360][ T3784] fuse: Bad value for 'fd' [ 119.907856][ T3784] 9pnet: Insufficient options for proto=fd [ 119.997337][ T421] usb 5-1: config 0 has no interfaces? [ 120.038840][ T337] hid-multitouch 0003:1FD2:6007.000C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 120.157414][ T421] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.166619][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.174467][ T421] usb 5-1: Product: syz [ 120.178414][ T421] usb 5-1: Manufacturer: syz [ 120.182848][ T421] usb 5-1: SerialNumber: syz [ 120.188007][ T421] usb 5-1: config 0 descriptor?? [ 120.238419][ T421] usb 1-1: USB disconnect, device number 9 [ 120.269712][ T3798] loop8: detected capacity change from 0 to 512 [ 120.358118][ T3798] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5 [ 120.358118][ T3798] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.358118][ T3798] [ 120.375695][ T3798] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 120.386794][ T3798] EXT4-fs (loop8): 1 truncate cleaned up [ 120.392309][ T3798] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable,noacl,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 120.408382][ T3798] overlayfs: missing 'lowerdir' [ 120.429150][ T2702] usb 5-1: USB disconnect, device number 5 [ 120.669983][ T3810] syz.8.1297[3810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.670057][ T3810] syz.8.1297[3810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.685566][ T3813] device pim6reg1 entered promiscuous mode [ 121.273858][ T3844] syz.0.1309[3844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.273950][ T3844] syz.0.1309[3844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.328102][ T3847] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.346129][ T3847] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.353247][ T3847] device bridge0 left promiscuous mode [ 121.363550][ T3847] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.370458][ T3847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.377584][ T3847] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.384426][ T3847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.391839][ T3847] device bridge0 entered promiscuous mode [ 121.767294][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.027263][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 122.147346][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.165949][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.887472][ T3902] loop8: detected capacity change from 0 to 128 [ 123.073664][ T6] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 123.082744][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.121244][ T6] usb 5-1: config 0 descriptor?? [ 123.977299][ T3907] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 124.170611][ T6] hid-multitouch 0003:1FD2:6007.000D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 124.337338][ T3907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.348136][ T3907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.357786][ T3907] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.366690][ T3907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.376359][ T3907] usb 1-1: config 0 descriptor?? [ 124.381513][ T26] usb 5-1: USB disconnect, device number 6 [ 124.450130][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 124.450145][ T30] audit: type=1326 audit(1731982510.836:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.481329][ T30] audit: type=1326 audit(1731982510.836:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.509899][ T30] audit: type=1326 audit(1731982510.836:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.533379][ T30] audit: type=1326 audit(1731982510.836:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.557764][ T30] audit: type=1326 audit(1731982510.836:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.581598][ T30] audit: type=1326 audit(1731982510.836:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.605637][ T30] audit: type=1326 audit(1731982510.836:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.629632][ T30] audit: type=1326 audit(1731982510.836:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.657914][ T30] audit: type=1326 audit(1731982510.836:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.659970][ T3944] device pim6reg1 entered promiscuous mode [ 124.687302][ T30] audit: type=1326 audit(1731982510.836:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.9.1340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 124.785498][ T3951] loop9: detected capacity change from 0 to 512 [ 124.796917][ T3951] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 124.809326][ T3951] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 124.824726][ T3951] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1348: Corrupt directory, running e2fsck is recommended [ 124.839280][ T3951] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 124.848686][ T3951] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1348: corrupted in-inode xattr [ 124.877764][ T3907] hid (null): bogus close delimiter [ 124.914779][ T3951] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1348: couldn't read orphan inode 15 (err -117) [ 124.928428][ T3951] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 126.176570][ T3974] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.187961][ T3974] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 126.197862][ T3974] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1348: Corrupt directory, running e2fsck is recommended [ 126.210977][ T3974] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 126.222329][ T3974] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 126.232230][ T3974] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1348: Corrupt directory, running e2fsck is recommended [ 126.244939][ T3974] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 3: comm syz.9.1348: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 126.319746][ T3907] usb 1-1: string descriptor 0 read error: -22 [ 126.374492][ T3983] device pim6reg1 entered promiscuous mode [ 126.397579][ T3907] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 126.472640][ T3988] device pim6reg1 entered promiscuous mode [ 126.611874][ T4008] loop6: detected capacity change from 0 to 256 [ 126.631573][ T39] usb 1-1: USB disconnect, device number 10 [ 127.545649][ T4049] device pim6reg1 entered promiscuous mode [ 127.557834][ T4055] : renamed from ipvlan1 [ 127.585220][ T4059] bpf_get_probe_write_proto: 2 callbacks suppressed [ 127.585239][ T4059] syz.9.1391[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.591991][ T4059] syz.9.1391[4059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.707140][ T4073] loop8: detected capacity change from 0 to 256 [ 128.135719][ T4092] syz.9.1404[4092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.135799][ T4092] syz.9.1404[4092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.157485][ T421] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 128.537554][ T421] usb 5-1: Using ep0 maxpacket: 16 [ 128.621940][ T4120] syz.0.1415[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.622003][ T4120] syz.0.1415[4120] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 128.677404][ T421] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 128.696825][ T421] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.706809][ T421] usb 5-1: config 0 has no interface number 0 [ 128.827259][ T58] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 129.177478][ T421] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 129.186471][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.194420][ T421] usb 5-1: Product: syz [ 129.198500][ T421] usb 5-1: Manufacturer: syz [ 129.202878][ T421] usb 5-1: SerialNumber: syz [ 129.215435][ T421] usb 5-1: config 0 descriptor?? [ 129.237379][ T58] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.247923][ T58] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.261054][ T58] usb 10-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 129.268043][ T421] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 129.272631][ T58] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.278562][ T421] usb 5-1: No valid video chain found. [ 129.302797][ T58] usb 10-1: config 0 descriptor?? [ 129.347862][ T58] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 129.473651][ T6] usb 5-1: USB disconnect, device number 7 [ 129.508698][ T4164] syz.6.1433[4164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.508756][ T4164] syz.6.1433[4164] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.642029][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 129.642047][ T30] audit: type=1326 audit(1731982516.026:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 129.682747][ T30] audit: type=1326 audit(1731982516.026:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 129.707300][ T30] audit: type=1326 audit(1731982516.026:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4177 comm="syz.0.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fb54714e759 code=0x7ffc0000 [ 130.159745][ T4196] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1448'. [ 130.168737][ T4196] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 130.589803][ T4211] 9pnet: Insufficient options for proto=fd [ 130.795638][ T4219] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 130.804913][ T4219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.592217][ T421] usb 10-1: USB disconnect, device number 3 [ 131.622505][ T4233] syz.8.1461[4233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.622586][ T4233] syz.8.1461[4233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.635169][ T4233] fuse: Bad value for 'fd' [ 131.709369][ T4252] : renamed from ipvlan1 [ 132.824722][ T4246] loop9: detected capacity change from 0 to 40427 [ 132.837265][ T4284] : renamed from ipvlan1 [ 132.859130][ T4246] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 132.866739][ T4246] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 132.876007][ T4246] F2FS-fs (loop9): invalid crc value [ 132.930418][ T4246] F2FS-fs (loop9): Found nat_bits in checkpoint [ 132.987290][ T3907] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.261672][ T4246] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 133.335383][ T4246] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 133.397664][ T4302] syz.6.1487[4302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.397756][ T4302] syz.6.1487[4302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.447407][ T3907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.493029][ T3907] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.518124][ T3907] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 133.535200][ T3907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.549744][ T3907] usb 1-1: config 0 descriptor?? [ 133.587906][ T3907] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.773299][ T4309] fuse: Bad value for 'fd' [ 133.827925][ T4313] device pim6reg1 entered promiscuous mode [ 133.841307][ T30] audit: type=1400 audit(1731982520.226:2318): avc: denied { read } for pid=4316 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 133.918193][ T4323] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4323 comm=syz.8.1497 [ 133.949460][ T30] audit: type=1326 audit(1731982520.336:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4327 comm="syz.9.1499" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406c518759 code=0x0 [ 135.003320][ T4336] loop6: detected capacity change from 0 to 512 [ 135.021992][ T4336] EXT4-fs (loop6): Ignoring removed nobh option [ 135.034891][ T4336] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.075590][ T4345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1503'. [ 135.085126][ T4336] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 135.117461][ T4345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 135.136962][ T4336] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.177728][ T4336] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1500: bg 0: block 224: padding at end of block bitmap is not set [ 135.239608][ T4342] loop9: detected capacity change from 0 to 40427 [ 135.247475][ T4336] EXT4-fs (loop6): Remounting filesystem read-only [ 135.254240][ T4336] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 135.301001][ T4342] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 135.317246][ T4342] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 135.336452][ T4342] F2FS-fs (loop9): invalid crc value [ 135.379333][ T4342] F2FS-fs (loop9): Found nat_bits in checkpoint [ 135.436255][ T4347] loop8: detected capacity change from 0 to 40427 [ 135.453158][ T4342] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 135.460650][ T4342] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 135.469550][ T4366] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4366 comm=syz.4.1509 [ 135.496726][ T4347] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 135.517829][ T4347] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 135.548840][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 135.557582][ T4347] F2FS-fs (loop8): invalid crc value [ 135.564383][ T4347] F2FS-fs (loop8): Found nat_bits in checkpoint [ 135.608220][ T4347] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 135.615187][ T4347] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 136.602664][ T39] usb 1-1: USB disconnect, device number 11 [ 136.620848][ T30] audit: type=1326 audit(1731982523.006:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4381 comm="syz.0.1512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb54714e759 code=0x0 [ 137.091978][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.108765][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.118679][ T58] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 137.127773][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.143686][ T30] audit: type=1326 audit(1731982523.526:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.151055][ T58] usb 7-1: config 0 descriptor?? [ 137.183736][ T30] audit: type=1326 audit(1731982523.556:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.218064][ T30] audit: type=1326 audit(1731982523.556:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.242028][ T30] audit: type=1326 audit(1731982523.556:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.265587][ T30] audit: type=1326 audit(1731982523.556:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.289272][ T30] audit: type=1326 audit(1731982523.556:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.312854][ T30] audit: type=1326 audit(1731982523.556:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.336890][ T30] audit: type=1326 audit(1731982523.556:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.360716][ T30] audit: type=1326 audit(1731982523.556:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.9.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 137.388067][ T4403] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4403 comm=syz.9.1520 [ 137.520243][ T4422] loop9: detected capacity change from 0 to 512 [ 137.557423][ T58] usbhid 7-1:0.0: can't add hid device: -71 [ 137.570124][ T58] usbhid: probe of 7-1:0.0 failed with error -71 [ 137.698291][ T58] usb 7-1: USB disconnect, device number 3 [ 137.846386][ T4422] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.857811][ T4422] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 137.868068][ T4422] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1529: Corrupt directory, running e2fsck is recommended [ 137.880937][ T4422] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 137.889640][ T4422] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1529: corrupted in-inode xattr [ 137.903622][ T4422] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1529: couldn't read orphan inode 15 (err -117) [ 137.923318][ T4436] device pim6reg1 entered promiscuous mode [ 137.925621][ T4422] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 138.173253][ T4447] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 138.184667][ T4447] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 138.194884][ T4447] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1529: Corrupt directory, running e2fsck is recommended [ 138.209332][ T4447] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 138.220698][ T4447] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 138.230625][ T4447] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1529: Corrupt directory, running e2fsck is recommended [ 138.243667][ T4447] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 3: comm syz.9.1529: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 138.501710][ T4469] loop9: detected capacity change from 0 to 512 [ 138.717094][ T4469] EXT4-fs (loop9): Ignoring removed nobh option [ 138.739443][ T4469] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.774787][ T4469] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 138.794052][ T4469] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.808340][ T4469] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1546: bg 0: block 224: padding at end of block bitmap is not set [ 138.822791][ T4469] EXT4-fs (loop9): Remounting filesystem read-only [ 138.829591][ T4469] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 139.041126][ T4491] device pim6reg1 entered promiscuous mode [ 139.117293][ T2702] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 139.170484][ T4497] device pim6reg1 entered promiscuous mode [ 139.507370][ T2702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.529072][ T2702] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.543491][ T2702] usb 10-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 139.553485][ T2702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.563780][ T2702] usb 10-1: config 0 descriptor?? [ 139.667301][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 139.856208][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1586'. [ 139.865311][ T4560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 139.907292][ T2702] usbhid 10-1:0.0: can't add hid device: -71 [ 139.907351][ T58] usb 7-1: Using ep0 maxpacket: 16 [ 139.913227][ T2702] usbhid: probe of 10-1:0.0 failed with error -71 [ 139.938755][ T2702] usb 10-1: USB disconnect, device number 4 [ 140.037288][ T58] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 140.045491][ T58] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.055622][ T58] usb 7-1: config 0 has no interface number 0 [ 140.217344][ T58] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 140.226224][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.234130][ T58] usb 7-1: Product: syz [ 140.238136][ T58] usb 7-1: Manufacturer: syz [ 140.242531][ T58] usb 7-1: SerialNumber: syz [ 140.247810][ T58] usb 7-1: config 0 descriptor?? [ 140.287919][ T58] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 140.294176][ T58] usb 7-1: No valid video chain found. [ 140.320669][ T312] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 140.489309][ T58] usb 7-1: USB disconnect, device number 4 [ 140.666702][ T4594] syz.9.1601[4594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.666783][ T4594] syz.9.1601[4594] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.037294][ T4617] overlayfs: missing 'workdir' [ 141.670616][ T4624] syz.0.1612[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.670695][ T4624] syz.0.1612[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.673229][ T4630] loop6: detected capacity change from 0 to 512 [ 141.773232][ T30] kauditd_printk_skb: 143 callbacks suppressed [ 141.773249][ T30] audit: type=1326 audit(1731982528.156:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.8.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 141.809588][ T4630] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.824608][ T30] audit: type=1326 audit(1731982528.156:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.8.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 141.851617][ T30] audit: type=1326 audit(1731982528.156:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.8.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7ff7d7cb6759 code=0x7ffc0000 [ 141.885996][ T4630] EXT4-fs (loop6): 1 truncate cleaned up [ 141.892600][ T4630] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 142.982746][ T4672] syz.8.1630[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.982837][ T4672] syz.8.1630[4672] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.119660][ T4676] loop4: detected capacity change from 0 to 512 [ 143.235370][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1638'. [ 143.253217][ T4676] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 143.265065][ T4676] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 143.275143][ T4676] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1629: Corrupt directory, running e2fsck is recommended [ 143.288130][ T4695] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 143.300358][ T4676] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 143.312903][ T4676] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.1629: corrupted in-inode xattr [ 143.334731][ T4697] syz.0.1632[4697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.334830][ T4697] syz.0.1632[4697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.381847][ T4676] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1629: couldn't read orphan inode 15 (err -117) [ 143.423164][ T4676] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 144.018270][ T4715] overlayfs: missing 'workdir' [ 144.152594][ T4706] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.163998][ T4706] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 144.173982][ T4706] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1629: Corrupt directory, running e2fsck is recommended [ 144.188730][ T4706] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.200096][ T4706] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 144.209988][ T4706] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1629: Corrupt directory, running e2fsck is recommended [ 144.222889][ T4706] EXT4-fs error (device loop4): ext4_find_dest_de:2113: inode #2: block 3: comm syz.4.1629: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 144.494644][ T4725] syz.6.1646[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.494730][ T4725] syz.6.1646[4725] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.507275][ T4725] fuse: Bad value for 'fd' [ 144.920367][ T4760] device bridge_slave_1 left promiscuous mode [ 144.926422][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.929276][ T4759] loop8: detected capacity change from 0 to 512 [ 144.944480][ T4760] device bridge_slave_0 left promiscuous mode [ 144.955792][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.987511][ T4759] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.025240][ T4759] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 145.064126][ T4759] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1662: Corrupt directory, running e2fsck is recommended [ 145.154744][ T30] audit: type=1326 audit(1731982531.536:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 145.174323][ T4759] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 145.180501][ T30] audit: type=1326 audit(1731982531.566:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4766 comm="syz.6.1665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f31c99cc759 code=0x7ffc0000 [ 145.216908][ T4759] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz.8.1662: corrupted in-inode xattr [ 145.229323][ T4759] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.1662: couldn't read orphan inode 15 (err -117) [ 145.242488][ T4759] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 145.584489][ T4782] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.595975][ T4782] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 145.605949][ T4782] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1662: Corrupt directory, running e2fsck is recommended [ 145.621070][ T4782] EXT4-fs warning (device loop8): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 145.632493][ T4782] EXT4-fs warning (device loop8): dx_probe:881: Enable large directory feature to access it [ 145.642537][ T4782] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.1662: Corrupt directory, running e2fsck is recommended [ 145.655709][ T4782] EXT4-fs error (device loop8): ext4_find_dest_de:2113: inode #2: block 3: comm syz.8.1662: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 145.759818][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 145.768970][ T4786] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 145.883872][ T30] audit: type=1400 audit(1731982532.266:2477): avc: denied { relabelfrom } for pid=4789 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 145.904261][ T30] audit: type=1400 audit(1731982532.266:2478): avc: denied { relabelto } for pid=4789 comm="syz.4.1673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 146.007273][ T421] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.153723][ T4802] bpf_get_probe_write_proto: 2 callbacks suppressed [ 146.153745][ T4802] syz.4.1675[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.160362][ T4802] syz.4.1675[4802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.172909][ T4802] fuse: Bad value for 'fd' [ 146.254908][ T4803] syz.6.1676[4803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.254993][ T4803] syz.6.1676[4803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.382282][ T4805] loop9: detected capacity change from 0 to 512 [ 146.397275][ T421] usb 1-1: Using ep0 maxpacket: 8 [ 146.410035][ T4796] loop8: detected capacity change from 0 to 40427 [ 146.438072][ T4805] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 146.449556][ T4805] EXT4-fs (loop9): 1 truncate cleaned up [ 146.455052][ T4805] EXT4-fs (loop9): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 146.526973][ T4796] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 146.534939][ T421] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 16 [ 146.537288][ T4796] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 146.549538][ T421] usb 1-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 16 [ 146.554312][ T4796] F2FS-fs (loop8): invalid crc value [ 146.563433][ T421] usb 1-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.572586][ T4796] F2FS-fs (loop8): Found nat_bits in checkpoint [ 146.580892][ T421] usb 1-1: config 1 interface 0 has no altsetting 0 [ 146.630445][ T4796] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 146.647282][ T4796] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 146.777383][ T421] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.786670][ T421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.795178][ T421] usb 1-1: Product: syz [ 146.799680][ T421] usb 1-1: Manufacturer: syz [ 146.804175][ T421] usb 1-1: SerialNumber: syz [ 146.927369][ T4781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.949652][ T4781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.115230][ T4822] kvm [4821]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86 [ 147.158681][ T4822] kvm [4821]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 147.403400][ T4833] ------------[ cut here ]------------ [ 147.409250][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.418529][ T4833] trace type BPF program uses run-time allocation [ 147.427641][ T4833] WARNING: CPU: 1 PID: 4833 at kernel/bpf/verifier.c:11698 check_map_prog_compatibility+0x6f1/0x890 [ 147.460624][ T4833] Modules linked in: [ 147.464498][ T4833] CPU: 1 PID: 4833 Comm: syz.6.1686 Not tainted 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 147.477383][ T421] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 147.489898][ T421] usb 1-1: USB disconnect, device number 12 [ 147.532597][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 147.548191][ T4833] RIP: 0010:check_map_prog_compatibility+0x6f1/0x890 [ 147.555196][ T4833] Code: db e9 f9 fc ff ff e8 3e 31 ed ff 31 db e9 ed fc ff ff e8 32 31 ed ff c6 05 de 5e a3 05 01 48 c7 c7 00 ef 87 85 e8 4f 7b be ff <0f> 0b e9 5a fb ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 f9 ff [ 147.574871][ T4833] RSP: 0018:ffffc9000121f328 EFLAGS: 00010246 [ 147.580946][ T4833] RAX: 8a620d4604223400 RBX: 0000000000000001 RCX: 0000000000040000 [ 147.588818][ T4833] RDX: ffffc90002546000 RSI: 00000000000008fa RDI: 00000000000008fb [ 147.596552][ T4833] RBP: ffffc9000121f370 R08: ffffffff81579195 R09: ffffed103ee265e8 [ 147.604495][ T4833] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000011 [ 147.636714][ T4833] R13: ffff888124d80000 R14: ffffc9000018b000 R15: dffffc0000000000 [ 147.679951][ T39] usb 5-1: Using ep0 maxpacket: 8 [ 147.726195][ T4833] FS: 00007f31c86456c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 147.761652][ T4833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.769582][ T4833] CR2: 00007f406b18ffe0 CR3: 0000000112b36000 CR4: 00000000003506a0 [ 147.779023][ T4833] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.786926][ T4833] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.796561][ T4833] Call Trace: [ 147.800243][ T39] usb 5-1: config 0 has no interfaces? [ 147.807699][ T4833] [ 147.810564][ T4833] ? show_regs+0x58/0x60 [ 147.839344][ T4833] ? __warn+0x160/0x2f0 [ 147.843392][ T4833] ? check_map_prog_compatibility+0x6f1/0x890 [ 147.849300][ T4833] ? report_bug+0x3d9/0x5b0 [ 147.853598][ T4833] ? check_map_prog_compatibility+0x6f1/0x890 [ 147.859534][ T4833] ? handle_bug+0x41/0x70 [ 147.863672][ T4833] ? exc_invalid_op+0x1b/0x50 [ 147.868203][ T4833] ? asm_exc_invalid_op+0x1b/0x20 [ 147.873042][ T4833] ? __wake_up_klogd+0xd5/0x110 [ 147.877753][ T4833] ? check_map_prog_compatibility+0x6f1/0x890 [ 147.883629][ T4833] ? check_map_prog_compatibility+0x6f1/0x890 [ 147.889632][ T4833] resolve_pseudo_ldimm64+0x682/0x1240 [ 147.894948][ T4833] ? check_attach_btf_id+0xef0/0xef0 [ 147.900080][ T4833] ? __mark_reg_known+0x1b0/0x1b0 [ 147.904922][ T4833] ? security_capable+0x87/0xb0 [ 147.909650][ T4833] bpf_check+0x3174/0x12bf0 [ 147.913957][ T4833] ? 0xffffffffa0032000 [ 147.917999][ T4833] ? is_bpf_text_address+0x172/0x190 [ 147.923066][ T4833] ? stack_trace_save+0x1c0/0x1c0 [ 147.927952][ T4833] ? __kernel_text_address+0x9b/0x110 [ 147.933133][ T4833] ? unwind_get_return_address+0x4d/0x90 [ 147.938806][ T4833] ? bpf_get_btf_vmlinux+0x60/0x60 [ 147.943854][ T4833] ? arch_stack_walk+0xf3/0x140 [ 147.948500][ T4833] ? stack_trace_save+0x113/0x1c0 [ 147.953355][ T4833] ? stack_trace_snprint+0xf0/0xf0 [ 147.958358][ T4833] ? stack_trace_snprint+0xf0/0xf0 [ 147.963352][ T4833] ? __stack_depot_save+0x34/0x470 [ 147.968320][ T4833] ? ____kasan_kmalloc+0xed/0x110 [ 147.973207][ T4833] ? ____kasan_kmalloc+0xdb/0x110 [ 147.977354][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.978058][ T4833] ? __kasan_kmalloc+0x9/0x10 [ 147.987257][ T1484] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 147.991447][ T4833] ? kmem_cache_alloc_trace+0x115/0x210 [ 148.004188][ T4833] ? selinux_bpf_prog_alloc+0x51/0x140 [ 148.007405][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.009511][ T4833] ? security_bpf_prog_alloc+0x62/0x90 [ 148.022569][ T4833] ? bpf_prog_load+0x9ee/0x1b50 [ 148.027370][ T4833] ? __sys_bpf+0x4bc/0x760 [ 148.027489][ T39] usb 5-1: Product: syz [ 148.031655][ T4833] ? __x64_sys_bpf+0x7c/0x90 [ 148.035603][ T39] usb 5-1: Manufacturer: syz [ 148.035620][ T39] usb 5-1: SerialNumber: syz [ 148.049373][ T39] usb 5-1: config 0 descriptor?? [ 148.049998][ T4833] ? x64_sys_call+0x87f/0x9a0 [ 148.058928][ T4833] ? do_syscall_64+0x3b/0xb0 [ 148.063472][ T4833] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.069612][ T4833] ? __kasan_kmalloc+0x9/0x10 [ 148.074246][ T4833] ? memset+0x35/0x40 [ 148.078267][ T4833] ? bpf_obj_name_cpy+0x196/0x1e0 [ 148.083257][ T4833] bpf_prog_load+0x12ac/0x1b50 [ 148.088025][ T4833] ? map_freeze+0x370/0x370 [ 148.092420][ T4833] ? selinux_bpf+0xcb/0x100 [ 148.096743][ T4833] ? security_bpf+0x82/0xb0 [ 148.101309][ T4833] __sys_bpf+0x4bc/0x760 [ 148.105432][ T4833] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 148.110794][ T4833] ? __kasan_check_write+0x14/0x20 [ 148.115855][ T4833] ? switch_fpu_return+0x15f/0x2e0 [ 148.121017][ T4833] __x64_sys_bpf+0x7c/0x90 [ 148.125317][ T4833] x64_sys_call+0x87f/0x9a0 [ 148.129851][ T4833] do_syscall_64+0x3b/0xb0 [ 148.134157][ T4833] ? clear_bhb_loop+0x35/0x90 [ 148.138816][ T4833] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.144656][ T4833] RIP: 0033:0x7f31c99cc759 [ 148.149104][ T4833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.168787][ T4833] RSP: 002b:00007f31c8645038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.177762][ T4833] RAX: ffffffffffffffda RBX: 00007f31c9b83f80 RCX: 00007f31c99cc759 [ 148.185783][ T4833] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 148.193800][ T4833] RBP: 00007f31c9a3f75e R08: 0000000000000000 R09: 0000000000000000 [ 148.201824][ T4833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.213844][ T4833] R13: 0000000000000000 R14: 00007f31c9b83f80 R15: 00007ffd81fc79d8 [ 148.230111][ T4833] [ 148.233034][ T4833] ---[ end trace eb18fbc715ea944b ]--- [ 148.257264][ T1484] usb 10-1: Using ep0 maxpacket: 16 [ 148.291060][ T421] usb 5-1: USB disconnect, device number 8 [ 148.397398][ T1484] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 148.408871][ T1484] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.425365][ T1484] usb 10-1: config 0 has no interface number 0 [ 148.602452][ T4890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4890 comm=syz.6.1710 [ 148.637322][ T1484] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 148.665698][ T1484] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.766715][ T1484] usb 10-1: Product: syz [ 148.795801][ T1484] usb 10-1: Manufacturer: syz [ 148.885327][ T1484] usb 10-1: SerialNumber: syz [ 148.940094][ T1484] usb 10-1: config 0 descriptor?? [ 148.987815][ T1484] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 148.994407][ T1484] usb 10-1: No valid video chain found. [ 149.098073][ T4916] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4916 comm=syz.6.1722 [ 149.188951][ T39] usb 10-1: USB disconnect, device number 5 [ 149.217380][ T58] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 149.217539][ T421] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.407283][ T2702] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 149.467336][ T421] usb 5-1: Using ep0 maxpacket: 16 [ 149.587317][ T421] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.597347][ T58] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.597497][ T421] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.615382][ T58] usb 9-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 149.629257][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.638373][ T58] usb 9-1: config 0 descriptor?? [ 149.667341][ T2702] usb 7-1: Using ep0 maxpacket: 8 [ 149.672946][ T4940] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4940 comm=syz.0.1733 [ 149.678486][ T58] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 149.777414][ T421] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.786736][ T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.795978][ T421] usb 5-1: Product: syz [ 149.800261][ T2702] usb 7-1: config 0 has no interfaces? [ 149.805590][ T421] usb 5-1: Manufacturer: syz [ 149.810031][ T421] usb 5-1: SerialNumber: syz [ 149.976331][ T30] audit: type=1326 audit(1731982536.356:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.1739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb54714e759 code=0x0 [ 150.167324][ T2702] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 150.169476][ T4957] loop9: detected capacity change from 0 to 40427 [ 150.176411][ T2702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.190382][ T2702] usb 7-1: Product: syz [ 150.194365][ T2702] usb 7-1: Manufacturer: syz [ 150.198854][ T2702] usb 7-1: SerialNumber: syz [ 150.204649][ T2702] usb 7-1: config 0 descriptor?? [ 150.257640][ T4957] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 150.269705][ T4957] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 150.278978][ T4957] F2FS-fs (loop9): invalid crc value [ 150.285554][ T4957] F2FS-fs (loop9): Found nat_bits in checkpoint [ 150.292432][ T4900] SELinux: failed to load policy [ 150.321162][ T4957] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 150.327363][ T421] usb 5-1: 0:2 : does not exist [ 150.328146][ T4957] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 150.412014][ T421] usb 5-1: USB disconnect, device number 9 [ 150.450503][ T2702] usb 7-1: USB disconnect, device number 5 [ 150.858499][ T4975] loop4: detected capacity change from 0 to 512 [ 150.947994][ T4975] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.957278][ T4975] EXT4-fs (loop4): Ignoring removed oldalloc option [ 150.969446][ T4975] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.977554][ T4975] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1745: invalid block [ 150.988937][ T4975] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1745: couldn't read orphan inode 11 (err -117) [ 151.001424][ T4975] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 151.042890][ T4975] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 151.051809][ T4975] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1745: Directory hole found for htree leaf block 0 [ 151.128420][ T30] audit: type=1326 audit(1731982537.506:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4989 comm="syz.9.1751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406c518759 code=0x0 [ 151.151427][ T2702] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.281048][ T4995] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1745: Directory hole found for htree leaf block 0 [ 151.497254][ T2702] usb 1-1: Using ep0 maxpacket: 16 [ 151.617414][ T2702] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 151.625501][ T2702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.635511][ T2702] usb 1-1: config 0 has no interface number 0 [ 151.781046][ T5026] 9pnet: Insufficient options for proto=fd [ 151.797341][ T2702] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 151.806641][ T2702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.817914][ T2702] usb 1-1: Product: syz [ 151.826595][ T2702] usb 1-1: Manufacturer: syz [ 151.831090][ T2702] usb 1-1: SerialNumber: syz [ 151.858361][ T2702] usb 1-1: config 0 descriptor?? [ 151.901111][ T2702] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 151.908918][ T2702] usb 1-1: No valid video chain found. [ 151.941011][ T58] usb 9-1: USB disconnect, device number 6 [ 152.066971][ T5052] 9pnet: Insufficient options for proto=fd [ 152.109585][ T39] usb 1-1: USB disconnect, device number 13 [ 152.196713][ T5065] loop6: detected capacity change from 0 to 512 [ 152.208561][ T5065] EXT4-fs (loop6): Ignoring removed nobh option [ 152.215929][ T5065] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.239980][ T5040] loop4: detected capacity change from 0 to 40427 [ 152.249639][ T5065] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 152.268912][ T5065] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.281346][ T5065] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1784: bg 0: block 224: padding at end of block bitmap is not set [ 152.296159][ T5065] EXT4-fs (loop6): Remounting filesystem read-only [ 152.302732][ T5065] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 152.316541][ T312] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 152.326860][ T312] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 152.347860][ T5040] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.423503][ T5040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.511891][ T5040] F2FS-fs (loop4): invalid crc value [ 152.674009][ T5040] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.726868][ T5040] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.733796][ T5040] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.737274][ T2702] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 152.908145][ T5098] 9pnet: Insufficient options for proto=fd [ 153.109832][ T5110] loop9: detected capacity change from 0 to 512 [ 153.127530][ T2702] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.137471][ T2702] usb 9-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 153.146795][ T2702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.155854][ T2702] usb 9-1: config 0 descriptor?? [ 153.167834][ T5110] EXT4-fs (loop9): Ignoring removed nobh option [ 153.173973][ T5110] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 153.199147][ T2702] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 153.211583][ T5110] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard,. Quota mode: writeback. [ 153.235867][ T5115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 153.236624][ T5110] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.245063][ T5115] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.271759][ T5110] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.1797: bg 0: block 224: padding at end of block bitmap is not set [ 153.286394][ T5110] EXT4-fs (loop9): Remounting filesystem read-only [ 153.293059][ T5110] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 153.307054][ T312] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 153.317060][ T312] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 153.620192][ T5135] kvm [5134]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86 [ 153.630514][ T5135] kvm [5134]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 153.639506][ T5135] kvm [5134]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x876 [ 153.648494][ T5135] kvm [5134]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8da [ 153.659138][ T5135] kvm [5134]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd5 [ 153.729831][ T5138] loop6: detected capacity change from 0 to 40427 [ 153.759467][ T5138] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 153.767127][ T5138] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 153.776631][ T5138] F2FS-fs (loop6): invalid crc value [ 153.800410][ T5138] F2FS-fs (loop6): Found nat_bits in checkpoint [ 153.856529][ T5138] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 153.865687][ T5138] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 154.069819][ T30] audit: type=1326 audit(1731982540.456:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5169 comm="syz.0.1820" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb54714e759 code=0x0 [ 154.498804][ T5144] loop9: detected capacity change from 0 to 131072 [ 154.556983][ T5178] fuse: Unknown parameter 'group_id00000000000000000000' [ 154.582921][ T5144] F2FS-fs (loop9): Found nat_bits in checkpoint [ 154.655761][ T5144] F2FS-fs (loop9): Mounted with checkpoint version = 753bd00b [ 154.706721][ T5195] loop6: detected capacity change from 0 to 512 [ 154.812545][ T5195] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 154.824020][ T5195] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 154.834251][ T5195] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1830: Corrupt directory, running e2fsck is recommended [ 154.847591][ T5195] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 154.855541][ T5195] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.1830: corrupted in-inode xattr [ 154.867754][ T5195] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1830: couldn't read orphan inode 15 (err -117) [ 154.881722][ T5195] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 155.098873][ T5210] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 155.110251][ T5210] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 155.120338][ T5210] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1830: Corrupt directory, running e2fsck is recommended [ 155.134731][ T5210] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 155.146105][ T5210] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 155.155978][ T5210] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1830: Corrupt directory, running e2fsck is recommended [ 155.168869][ T5210] EXT4-fs error (device loop6): ext4_find_dest_de:2113: inode #2: block 3: comm syz.6.1830: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 155.248623][ T1484] usb 9-1: USB disconnect, device number 7 [ 155.297087][ T5220] fuse: Bad value for 'user_id' [ 155.437297][ T4385] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 155.805023][ T5246] fuse: Bad value for 'user_id' [ 155.907313][ T4385] usb 1-1: Using ep0 maxpacket: 16 [ 155.929917][ T5264] loop9: detected capacity change from 0 to 512 [ 155.952403][ T5264] EXT4-fs (loop9): Test dummy encryption mode enabled [ 155.959214][ T5264] EXT4-fs (loop9): Ignoring removed oldalloc option [ 155.965712][ T5264] EXT4-fs (loop9): Test dummy encryption mode enabled [ 155.973486][ T5264] EXT4-fs error (device loop9): __ext4_iget:4903: inode #11: block 1: comm syz.9.1857: invalid block [ 155.984525][ T5264] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1857: couldn't read orphan inode 11 (err -117) [ 155.996806][ T5264] EXT4-fs (loop9): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 156.024820][ T5264] EXT4-fs error (device loop9): ext4_add_entry:2484: inode #2: comm syz.9.1857: Directory hole found for htree leaf block 0 [ 156.028628][ T4385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.047843][ T4385] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.280973][ T5273] EXT4-fs error (device loop9): ext4_add_entry:2484: inode #2: comm syz.9.1857: Directory hole found for htree leaf block 0 [ 156.403873][ T4385] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 156.509849][ T4385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.518751][ T4385] usb 1-1: Product: syz [ 156.523812][ T4385] usb 1-1: Manufacturer: syz [ 156.529320][ T4385] usb 1-1: SerialNumber: syz [ 156.622925][ T5280] syz.6.1859[5280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.623292][ T5280] syz.6.1859[5280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.872679][ T5296] loop8: detected capacity change from 0 to 128 [ 157.090912][ T5202] SELinux: failed to load policy [ 157.127335][ T4385] usb 1-1: 0:2 : does not exist [ 157.137075][ T5324] syz.6.1879[5324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.137156][ T5324] syz.6.1879[5324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.236213][ T5324] syz.6.1879[5324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.250386][ T5324] syz.6.1879[5324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.269648][ T4385] usb 1-1: USB disconnect, device number 14 [ 157.334651][ T5330] syz.9.1880[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.334733][ T5330] syz.9.1880[5330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.347291][ T5330] fuse: Bad value for 'fd' [ 158.063668][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x86 [ 158.082550][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xe8 [ 158.117682][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x876 [ 158.139959][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x8da [ 158.163904][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xd5 [ 158.445611][ T5385] loop4: detected capacity change from 0 to 512 [ 158.517872][ T5385] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.526826][ T5385] EXT4-fs (loop4): Ignoring removed oldalloc option [ 158.544231][ T5385] EXT4-fs (loop4): Test dummy encryption mode enabled [ 158.565579][ T5385] EXT4-fs error (device loop4): __ext4_iget:4903: inode #11: block 1: comm syz.4.1902: invalid block [ 158.577626][ T5385] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1902: couldn't read orphan inode 11 (err -117) [ 158.602415][ T5385] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 158.631711][ T5352] kvm_set_msr_common: 63 callbacks suppressed [ 158.631732][ T5352] kvm [5351]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x7 [ 158.676525][ T5385] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1902: Directory hole found for htree leaf block 0 [ 158.873011][ T5410] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1902: Directory hole found for htree leaf block 0 [ 159.938383][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.607481][ T337] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 160.857262][ T337] usb 7-1: Using ep0 maxpacket: 16 [ 160.877283][ T6] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 161.017320][ T337] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.027269][ T337] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.117333][ T6] usb 9-1: Using ep0 maxpacket: 8 [ 161.197645][ T337] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.206586][ T337] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.214389][ T337] usb 7-1: Product: syz [ 161.218341][ T337] usb 7-1: Manufacturer: syz [ 161.222738][ T337] usb 7-1: SerialNumber: syz [ 161.258472][ T6] usb 9-1: config 0 has no interfaces? [ 161.273202][ T5490] loop9: detected capacity change from 0 to 512 [ 161.320029][ T5490] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.331465][ T5490] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 161.341409][ T5490] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1943: Corrupt directory, running e2fsck is recommended [ 161.354148][ T4385] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 161.357389][ T5490] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 161.369556][ T5490] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1943: corrupted in-inode xattr [ 161.381677][ T5490] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1943: couldn't read orphan inode 15 (err -117) [ 161.393553][ T5490] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 161.427308][ T6] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.436273][ T6] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.444259][ T6] usb 9-1: Product: syz [ 161.448380][ T6] usb 9-1: Manufacturer: syz [ 161.452877][ T6] usb 9-1: SerialNumber: syz [ 161.458870][ T6] usb 9-1: config 0 descriptor?? [ 161.600824][ T5495] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.612356][ T5495] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 161.622349][ T5495] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1943: Corrupt directory, running e2fsck is recommended [ 161.636914][ T5495] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.648309][ T5495] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 161.658267][ T5495] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1943: Corrupt directory, running e2fsck is recommended [ 161.671239][ T5495] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 3: comm syz.9.1943: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 161.727749][ T5470] SELinux: failed to load policy [ 161.735054][ T6] usb 9-1: USB disconnect, device number 8 [ 161.777758][ T337] usb 7-1: 0:2 : does not exist [ 161.887371][ T4385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.897172][ T4385] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 161.902882][ T337] usb 7-1: USB disconnect, device number 6 [ 161.910242][ T4385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.924535][ T4385] usb 1-1: config 0 descriptor?? [ 161.968806][ T4385] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 161.997297][ T1484] Bluetooth: hci0: command 0x1003 tx timeout [ 162.003397][ T352] Bluetooth: hci0: sending frame failed (-49) [ 162.027811][ T5507] syz.9.1947[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.027894][ T5507] syz.9.1947[5507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.040495][ T5507] fuse: Bad value for 'fd' [ 162.379280][ T5509] loop6: detected capacity change from 0 to 512 [ 162.439183][ T5509] EXT4-fs (loop6): Test dummy encryption mode enabled [ 162.458365][ T5509] EXT4-fs (loop6): Ignoring removed oldalloc option [ 162.465600][ T5509] EXT4-fs (loop6): Test dummy encryption mode enabled [ 162.490494][ T5509] EXT4-fs error (device loop6): __ext4_iget:4903: inode #11: block 1: comm syz.6.1949: invalid block [ 162.501841][ T5509] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1949: couldn't read orphan inode 11 (err -117) [ 162.516421][ T5509] EXT4-fs (loop6): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,oldalloc,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 162.565051][ T5509] EXT4-fs error (device loop6): ext4_add_entry:2484: inode #2: comm syz.6.1949: Directory hole found for htree leaf block 0 [ 162.810870][ T5524] EXT4-fs error (device loop6): ext4_add_entry:2484: inode #2: comm syz.6.1949: Directory hole found for htree leaf block 0 [ 163.273209][ T5550] : renamed from ipvlan1 [ 163.407120][ T5548] loop8: detected capacity change from 0 to 40427 [ 163.422688][ T5548] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 163.430626][ T5548] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 163.448135][ T5548] F2FS-fs (loop8): invalid crc value [ 163.454544][ T5560] syz.6.1968[5560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.454617][ T5560] syz.6.1968[5560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.455276][ T5548] F2FS-fs (loop8): Found nat_bits in checkpoint [ 163.527254][ T5548] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 163.534114][ T5548] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 164.025305][ T5590] loop9: detected capacity change from 0 to 512 [ 164.077270][ T4385] Bluetooth: hci0: command 0x1001 tx timeout [ 164.083153][ T352] Bluetooth: hci0: sending frame failed (-49) [ 164.094458][ T58] usb 1-1: USB disconnect, device number 15 [ 164.123415][ T5590] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.136750][ T5590] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 164.151653][ T5590] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1978: Corrupt directory, running e2fsck is recommended [ 164.176463][ T5590] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 164.186243][ T5590] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.1978: corrupted in-inode xattr [ 164.198381][ T5590] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.1978: couldn't read orphan inode 15 (err -117) [ 164.210086][ T6] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 164.217598][ T5590] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.barrier,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 164.460952][ T5607] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.472345][ T5607] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 164.482396][ T5607] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1978: Corrupt directory, running e2fsck is recommended [ 164.496893][ T5607] EXT4-fs warning (device loop9): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.508292][ T5607] EXT4-fs warning (device loop9): dx_probe:881: Enable large directory feature to access it [ 164.518323][ T5607] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.1978: Corrupt directory, running e2fsck is recommended [ 164.531236][ T5607] EXT4-fs error (device loop9): ext4_find_dest_de:2113: inode #2: block 3: comm syz.9.1978: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 164.657297][ T6] usb 7-1: Using ep0 maxpacket: 16 [ 164.777339][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.788117][ T6] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.797828][ T6] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 164.806700][ T6] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.816558][ T6] usb 7-1: config 0 descriptor?? [ 165.215659][ T5635] syz.0.1994[5635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.215720][ T5635] syz.0.1994[5635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.261031][ T5641] device pim6reg1 entered promiscuous mode [ 165.299619][ T6] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 165.715204][ T6] usb 7-1: USB disconnect, device number 7 [ 165.833243][ T5654] fuse: Unknown parameter 'use00000000000000000000' [ 165.850674][ T5655] loop8: detected capacity change from 0 to 128 [ 166.003014][ T30] audit: type=1326 audit(1731982552.386:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.032572][ T30] audit: type=1326 audit(1731982552.386:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.056423][ T30] audit: type=1326 audit(1731982552.386:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.088313][ T30] audit: type=1326 audit(1731982552.386:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.111649][ T30] audit: type=1326 audit(1731982552.386:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.139315][ T30] audit: type=1326 audit(1731982552.386:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.165905][ T6] Bluetooth: hci0: command 0x1009 tx timeout [ 166.172425][ T30] audit: type=1326 audit(1731982552.386:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.9.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406c518759 code=0x7ffc0000 [ 166.307632][ T5681] fuse: Unknown parameter 'use00000000000000000000' [ 166.772888][ T5696] : renamed from ipvlan1 [ 166.953071][ T5714] loop8: detected capacity change from 0 to 512 [ 166.989079][ T5714] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 167.059717][ T5714] EXT4-fs (loop8): 1 truncate cleaned up [ 167.067384][ T5714] EXT4-fs (loop8): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 167.719333][ T5742] fuse: Unknown parameter 'user_i00000000000000000000' [ 168.607246][ T4385] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 169.179710][ T5767] syz.9.2040[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.179794][ T5767] syz.9.2040[5767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.287878][ T4385] usb 7-1: Using ep0 maxpacket: 16 [ 169.329344][ T5778] syz.0.2045[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.330002][ T5778] syz.0.2045[5778] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.356887][ T5779] fuse: Unknown parameter 'user_i00000000000000000000' [ 169.467310][ T4385] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 169.478469][ T4385] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.491026][ T4385] usb 7-1: config 0 has no interface number 0 [ 169.706300][ T5801] overlayfs: failed to resolve './file2': -2 [ 170.007312][ T4385] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 170.016548][ T5811] syz.9.2061[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.016626][ T5811] syz.9.2061[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.033324][ T4385] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.059425][ T4385] usb 7-1: Product: syz [ 170.063473][ T4385] usb 7-1: Manufacturer: syz [ 170.069461][ T4385] usb 7-1: SerialNumber: syz [ 170.075470][ T4385] usb 7-1: config 0 descriptor?? [ 170.117833][ T4385] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 170.125066][ T4385] usb 7-1: No valid video chain found. [ 170.292413][ T5832] syz.8.2065[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.292495][ T5832] syz.8.2065[5832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.305534][ T5832] fuse: Bad value for 'fd' [ 170.327462][ T4385] usb 7-1: USB disconnect, device number 8 [ 170.477294][ T2702] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 170.926706][ T5856] syz.6.2080[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.926761][ T5856] syz.6.2080[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.047333][ T337] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 171.156666][ T5868] overlayfs: failed to resolve './file2': -2 [ 171.173303][ T2702] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.215489][ T2702] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 171.250044][ T2702] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 171.263180][ T2702] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.398348][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 171.507503][ T2702] usb 10-1: config 0 descriptor?? [ 171.537349][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.547878][ T2702] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 171.563460][ T337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.581063][ T337] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 171.590601][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.618330][ T337] usb 1-1: config 0 descriptor?? [ 171.682351][ T5883] : renamed from ipvlan1 [ 272.627147][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 272.633948][ C1] (detected by 1, t=10002 jiffies, g=24349, q=303) [ 272.640366][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294964480-4294954477), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 272.653554][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g24349 f0x2 RCU_GP_INIT(4) ->state=0x0 ->cpu=0 [ 272.664232][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 272.674038][ C1] rcu: RCU grace-period kthread stack dump: [ 272.679766][ C1] task:rcu_preempt state:R running task stack:28224 pid: 14 ppid: 2 flags:0x00004000 [ 272.690356][ C1] Call Trace: [ 272.693486][ C1] [ 272.696258][ C1] __schedule+0xccc/0x1590 [ 272.700511][ C1] ? release_firmware_map_entry+0x190/0x190 [ 272.706237][ C1] ? __kasan_check_write+0x14/0x20 [ 272.711187][ C1] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 272.716134][ C1] ? preempt_schedule+0xd9/0xe0 [ 272.720817][ C1] preempt_schedule_common+0x9b/0xf0 [ 272.725943][ C1] preempt_schedule+0xd9/0xe0 [ 272.730457][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 272.735923][ C1] ? irqentry_exit+0x30/0x40 [ 272.740346][ C1] ? sysvec_reschedule_ipi+0x7d/0x150 [ 272.745555][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 272.751025][ C1] preempt_schedule_thunk+0x16/0x18 [ 272.756061][ C1] _raw_spin_unlock_irq+0x61/0x70 [ 272.760917][ C1] rcu_gp_init+0x9cf/0xc30 [ 272.765176][ C1] rcu_gp_kthread+0x184/0x350 [ 272.769683][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 272.774373][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 272.778882][ C1] ? __kasan_check_read+0x11/0x20 [ 272.783745][ C1] ? __kthread_parkme+0xb2/0x200 [ 272.788517][ C1] kthread+0x421/0x510 [ 272.792422][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 272.796933][ C1] ? kthread_blkcg+0xd0/0xd0 [ 272.801364][ C1] ret_from_fork+0x1f/0x30 [ 272.805618][ C1] [ 272.808478][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 272.814655][ C1] Sending NMI from CPU 1 to CPUs 0: [ 272.819776][ C0] NMI backtrace for cpu 0 [ 272.819787][ C0] CPU: 0 PID: 5886 Comm: syz.6.2093 Tainted: G W 5.15.167-syzkaller-00348-g2e66050fb753 #0 [ 272.819806][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 272.819819][ C0] RIP: 0010:copy_user_generic_unrolled+0x81/0xc0 [ 272.819848][ C0] Code: 28 4c 8b 56 30 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 [ 272.819862][ C0] RSP: 0018:ffffc90000c77c38 EFLAGS: 00040246 [ 272.819877][ C0] RAX: ffffffff8265c301 RBX: 0000000000000030 RCX: 0000000000000030 [ 272.819894][ C0] RDX: 0000000000000000 RSI: ffffc90000c77e00 RDI: 00007ffd81fc70f0 [ 272.819906][ C0] RBP: ffffc90000c77c68 R08: dffffc0000000000 R09: fffff5200018efc6 [ 272.819919][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00007ffffffff000 [ 272.819931][ C0] R13: 00007ffd81fc7120 R14: ffffc90000c77e00 R15: 00007ffd81fc70f0 [ 272.819944][ C0] FS: 0000555589085500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 272.819959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.819971][ C0] CR2: 00007fffe983f028 CR3: 0000000134fa4000 CR4: 00000000003506b0 [ 272.819986][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.819996][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.820006][ C0] Call Trace: [ 272.820010][ C0] [ 272.820015][ C0] ? show_regs+0x58/0x60 [ 272.820033][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 272.820054][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 272.820075][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820094][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820113][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 272.820131][ C0] ? nmi_handle+0xa8/0x280 [ 272.820149][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820168][ C0] ? default_do_nmi+0x69/0x160 [ 272.820185][ C0] ? exc_nmi+0xad/0x100 [ 272.820200][ C0] ? end_repeat_nmi+0x16/0x31 [ 272.820218][ C0] ? _copy_to_user+0x11/0x90 [ 272.820234][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820254][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820273][ C0] ? copy_user_generic_unrolled+0x81/0xc0 [ 272.820292][ C0] [ 272.820297][ C0] [ 272.820302][ C0] ? _copy_to_user+0x78/0x90 [ 272.820317][ C0] copy_siginfo_to_user+0x24/0x80 [ 272.820335][ C0] arch_do_signal_or_restart+0x889/0x1680 [ 272.820357][ C0] ? get_sigframe_size+0x10/0x10 [ 272.820373][ C0] ? __ia32_sys_sigaltstack+0x70/0x70 [ 272.820394][ C0] ? __do_sys_rt_sigreturn+0x160/0x1e0 [ 272.820412][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 272.820430][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 272.820447][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 272.820465][ C0] do_syscall_64+0x47/0xb0 [ 272.820479][ C0] ? clear_bhb_loop+0x35/0x90 [ 272.820494][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.820510][ C0] RIP: 0033:0x7f31c988e3c0 [ 272.820530][ C0] Code: 10 83 e0 01 83 e2 01 88 15 2a 53 e2 00 88 05 27 53 e2 00 c3 50 48 8d 35 a6 13 1b 00 48 8d 3d ac 13 1b 00 31 c0 e8 a0 f9 ff ff <53> 89 fb 48 83 ec 10 64 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 [ 272.820544][ C0] RSP: 002b:00007ffd81fc7578 EFLAGS: 00000246 [ 272.820556][ C0] RAX: 0000000000000000 RBX: 00007f31c9b842a0 RCX: 00007f31c9983aa7 [ 272.820568][ C0] RDX: 00007ffd81fc7580 RSI: 00007ffd81fc76b0 RDI: 0000000000000007 [ 272.820580][ C0] RBP: 00007f31c9b84214 R08: 00007f31c9b83f80 R09: 00007ffd81fc79d7 [ 272.820592][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000003 [ 272.820602][ C0] R13: 00007f31c9b84208 R14: 0000000000000005 R15: 0000000000000b0d [ 272.820629][ C0] [ 428.797096][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 256s! [ 428.805927][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 256s! [ 428.814616][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 255s! [ 428.823483][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 256s! [ 428.831716][ C0] Showing busy workqueues and worker pools: [ 428.837441][ C0] workqueue events: flags=0x0 [ 428.841935][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.841987][ C0] pending: psi_avgs_work, kfree_rcu_monitor, rht_deferred_worker [ 428.842049][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.842088][ C0] pending: destroy_list_workfn, vmstat_shepherd, free_work [ 428.842147][ C0] workqueue events_long: flags=0x0 [ 428.877284][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.877337][ C0] pending: br_multicast_gc_work [ 428.877369][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.877412][ C0] pending: br_fdb_cleanup [ 428.877438][ C0] workqueue events_unbound: flags=0x2 [ 428.907105][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 428.907140][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 428.907184][ C0] workqueue events_power_efficient: flags=0x80 [ 428.927508][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 428.927567][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work [ 428.927612][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 428.927653][ C0] pending: neigh_periodic_work, gc_worker, check_lifetime [ 428.927707][ C0] workqueue mm_percpu_wq: flags=0x8 [ 428.962222][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.962274][ C0] pending: vmstat_update [ 428.962306][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 428.962346][ C0] pending: vmstat_update [ 428.962376][ C0] workqueue writeback: flags=0x4a [ 428.991006][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 428.991051][ C0] pending: wb_workfn, wb_workfn [ 428.991100][ C0] workqueue kblockd: flags=0x18 [ 429.007756][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 429.007867][ C0] pending: blk_mq_timeout_work [ 429.007899][ C0] workqueue usb_hub_wq: flags=0x4 [ 429.025412][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.025458][ C0] in-flight: 337:hub_event hub_event [ 429.025566][ C0] workqueue dm_bufio_cache: flags=0x8 [ 429.043686][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.043735][ C0] pending: work_fn [ 429.043829][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 429.060661][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 429.060710][ C0] pending: addrconf_verify_work [ 429.060847][ C0] workqueue wg-kex-wg0: flags=0x24 [ 429.078107][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.078157][ C0] pending: wg_packet_handshake_receive_worker [ 429.078192][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.078233][ C0] pending: wg_packet_handshake_receive_worker [ 429.078263][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.110708][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.110754][ C0] pending: wg_packet_handshake_send_worker [ 429.110789][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.128846][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.128894][ C0] pending: wg_packet_encrypt_worker [ 429.128927][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.128965][ C0] pending: wg_packet_encrypt_worker [ 429.128994][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.159531][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.159581][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.159637][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.180539][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.180587][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 429.180634][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.180675][ C0] pending: wg_packet_encrypt_worker [ 429.180705][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.213487][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 429.213539][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 429.213591][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.234486][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.234542][ C0] pending: wg_packet_encrypt_worker [ 429.234576][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.234618][ C0] pending: wg_packet_encrypt_worker [ 429.234649][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.265171][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.265217][ C0] pending: wg_packet_handshake_send_worker [ 429.265248][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.283397][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.283442][ C0] pending: wg_packet_encrypt_worker [ 429.283475][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.283513][ C0] pending: wg_packet_encrypt_worker [ 429.283551][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.314070][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.314116][ C0] pending: wg_packet_handshake_send_worker [ 429.314151][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.332408][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.332456][ C0] pending: wg_packet_encrypt_worker [ 429.332488][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.332536][ C0] pending: wg_packet_encrypt_worker [ 429.332565][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.363046][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.363093][ C0] pending: wg_packet_handshake_send_worker [ 429.363126][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.381199][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.381249][ C0] pending: wg_packet_encrypt_worker [ 429.381338][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.381375][ C0] pending: wg_packet_encrypt_worker [ 429.381413][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.411944][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.411994][ C0] pending: wg_packet_handshake_send_worker [ 429.412030][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.430097][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.430144][ C0] pending: wg_packet_encrypt_worker [ 429.430177][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.430216][ C0] pending: wg_packet_encrypt_worker [ 429.430247][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.460870][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.460920][ C0] pending: wg_packet_handshake_send_worker [ 429.460954][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.479009][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.479058][ C0] pending: wg_packet_encrypt_worker [ 429.479091][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.479133][ C0] pending: wg_packet_encrypt_worker [ 429.479163][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.509716][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.509772][ C0] pending: wg_packet_handshake_send_worker [ 429.509809][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.527944][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.528001][ C0] pending: wg_packet_encrypt_worker [ 429.528036][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.528079][ C0] pending: wg_packet_encrypt_worker [ 429.528112][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.558821][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.558870][ C0] pending: wg_packet_handshake_send_worker [ 429.558907][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.576951][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.577010][ C0] pending: wg_packet_encrypt_worker [ 429.577047][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.577087][ C0] pending: wg_packet_encrypt_worker [ 429.602824][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.607662][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.607710][ C0] pending: wg_packet_handshake_send_worker [ 429.607745][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.625885][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.625932][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 429.625985][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.626024][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 429.626071][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.661215][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.661264][ C0] pending: wg_packet_handshake_send_worker [ 429.661299][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.679349][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.679400][ C0] pending: wg_packet_encrypt_worker [ 429.679432][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.679474][ C0] pending: wg_packet_encrypt_worker [ 429.679505][ C0] workqueue wg-kex-wg0: flags=0x6 [ 429.710040][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.710085][ C0] pending: wg_packet_handshake_send_worker [ 429.710123][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 429.728179][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.728233][ C0] pending: wg_packet_encrypt_worker [ 429.728268][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.728308][ C0] pending: wg_packet_encrypt_worker [ 429.728338][ C0] workqueue wg-kex-wg1: flags=0x6 [ 429.758874][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.758921][ C0] pending: wg_packet_handshake_send_worker [ 429.758956][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 429.777001][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.777052][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 429.792120][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 429.792167][ C0] pending: wg_packet_encrypt_worker, wg_packet_decrypt_worker [ 429.792262][ C0] workqueue wg-kex-wg2: flags=0x6 [ 429.812209][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 429.812250][ C0] pending: wg_packet_handshake_send_worker [ 429.812286][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 429.830355][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.830403][ C0] pending: wg_packet_encrypt_worker [ 429.830436][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 429.830477][ C0] pending: wg_packet_encrypt_worker [ 429.830507][ C0] pool 2: cpus=1 node=0 flags=0x0 nice=0 hung=257s workers=7 idle: 26 384 58 39 1484 3907