last executing test programs: 1m23.264647328s ago: executing program 2 (id=228): socket$inet6(0xa, 0x2, 0x3a) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='attr/prev\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="5b9ce2eb61f8bfee0cbad56ecdd981bcdf1172216a9b03388c2d1832df4efaa1c3f072a79bed646c281c3a90a3ca6328803b1bd05b55610b26e8ee982d774e413bfc22709b06e2e557085a9a7871dc11df9dc0b8", 0x54}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e22, 0x3, @loopback, 0x4}, 0x1c, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000900)="e5a314763c5b61a69bbc70dc5d495ac6519e6e434ed5e35ad020d090e00019ab146fdae3fd29a9660cceba2611b64a2d27906e680d83ec701cc1c348b182b3628780375fd757390c8f93e5bf28c62d33590a3b54", 0x54}, {0x0}], 0x3}}, {{&(0x7f0000000bc0)={0xa, 0x4e20, 0x4001ff, @remote, 0x4}, 0x1c, &(0x7f0000000e80)=[{&(0x7f0000000e00)}, {&(0x7f0000000e40)="76fa8191b2a8b2bebd3e7b7aefdc75e3a926c2da2b20d4cc2dc4e5d73878d525de5029fb7da4ee38b7", 0x29}], 0x2}}], 0x3, 0x0) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f00000003c0)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200"/127], 0x110) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/ip_mr_vif\x00') preadv(r5, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/34, 0x22}, {0x0}, {&(0x7f00000004c0)=""/180, 0xb4}], 0x3, 0xffffffff, 0x9c5) 1m19.954105376s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() capget(0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1m19.884987786s ago: executing program 2 (id=232): openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c57208956dfb69f68e860977bfd5c7bc7f8e1ae61e368493d7b40e30166c4edc607ed95f0d351d06fe53c0d889515ad6b1c435974dea71b08a491193275584ff12bbea6482840336ee405d03f3021134aad8bf6a5781c3bbea94566060e86e7f807190d865c1ef047984691985", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @remote}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$erofs(&(0x7f00000004c0), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x212, &(0x7f00000001c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) 1m19.227571548s ago: executing program 2 (id=233): socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x52) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88caffff0000000000", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m16.832615828s ago: executing program 2 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000001001018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffc4e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) io_setup(0x8000, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001100)="8a310ff15a829e306846ce1a8575e611e906d06744c0bec12dc6713fa30f01c72a6b86db705748e6b1fd7553cb0131cfab4d54a45a2672b87ea4dd099d70151f9285bbf4437c21be", 0x48, 0x7}, 0x0]) 1m16.624642624s ago: executing program 2 (id=245): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup(r1) sendmsg$nl_xfrm(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000012000100000000000000000000000000000000000000ffff00000000000000000200000014080d00e000000100"/59], 0x3c}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40440, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @mcast1}, 0x1c) sendmsg$AUDIT_SIGNAL_INFO(r2, 0x0, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 28.419145491s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003980)={'syztnl0\x00', &(0x7f0000003900)={'syztnl1\x00', 0x0, 0x4, 0x4f, 0x6, 0xff, 0x6a, @empty, @empty, 0x20, 0x1, 0x2, 0x4}}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x2, 0x6, 0x4, 0x3, 0x2, 0x0, 0x20000000, 0x25dfdbff}, 0x10}}, 0x480f4) 26.670980635s ago: executing program 3 (id=356): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030300000000030303030303030392c756d61736b3d30303030303030303030303030303030303030343030302c6e6c733d6370313235352c747970653dd35c00552c756d61736b3d30303030032a605dce4e509e303030363734352c0000000000fafbefd166dfb1b2484a3d1974a8bbeb4e6f2fbc38e53db5e8a2e9dbdc592c15325e3904b6b1826488d697e94f7e4dad3da5827f2de9c8c052417319de69a5b2bda1d8ed27d882b87d48e28c3d127c666dd271ab"], 0x3, 0x6b2, &(0x7f0000000280)="$eJzs3U+IHFkdB/BvdSY96QjZ2X/ZKEKGDSy6wWQmzZoIwkYRySFI0Mteh2SyGTLJLpNZyS5iOuoqePIke/CwIvGwIoiIsJ4W17MgePGUe8CbhxzUkfrTMz0znUlPkpkedz8fqK73+r1671e/VFV3V2foAJ9a517L/l6KnDt+/mZZv3unu3j3Tvdav5xkMkkrmahXKTpJ8XFyNvWSz5ZPNsMVD5rnlXsfFhPvfdCtaxPNUvVvbbXdJkN79pIDq5V9Sabr4r9HHnbTeNVSjXNxbbxHVKzGXSbsWD9xMG4rm/TWGlsP3Xz08xbYs27Vr5ubTCUHU7+6lu8D0lwdHn5lGIfOutqW16beTscCAAAAO2/oZ/lBT93P/dzMod0JBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Zivo3A4tmafXL0yn6v//fHvhN/faYw31M716uVt9+atyBAAAAAAAAAMBjOXo/93Mzh/r1laL6zv/FqvJc9fiZvJUbmc9STuRm5rKc5SxlNsnUwEDtm3PLy0uzm7f8ecotV1ZWbjVbnhq65an1cfU2Bjrsfxps6gQAAAAAAAAAn1o/yLm17/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAvKJJ99apanuuXp9KaSHIgSbuYXu3eHmuwj6UO/aNxhwEAAAC751Dx37qwUlSf+Q9Xn/sP5K1cz3IWspzFzOdSdS+g/ujc+luvu3j3TvdauWwe8Gv/3Nb81Yip7z0Mn3mm6vH86hbn8s18J8cznQtZykK+m7ksZz7T+UZVmkuRqebuxdTdO530Y90c79l1tQsbYzs6UC7jO1JF0snlLFSxncjFdj/0VtPvyMBsf2wnG2a8XWaneLUxYo4uNetyj37WrPeGqWrP969mZKbJfZmNpwfzvjn32zxONs40m9bqPajn1mYpqxtneqScH2zWu5Drbd5KW5+J3k/LWv/oO7x1zpMv/v3PF660rl+9cvnG8b1zGD2ijcdEdyATL4yUicUyE73HyMSBx4n/yWk32aivotu7Wr5YbXsoC/lW3silzOd0ZjKbM5nJV3Iq3ZwayOvzW+e1Otda2zvXjn2hKXSS/KRZ76rJBzWUeX16IK+DV7qpqm3wmbUsPTNClop2hmfpH0NDmfhcUyjn+OHAK874bczE7EAmnt06E7/8z0qSG4vXry5dmXtzxPleatblafvu+mv0r57IDm1fs7vl8fJM+Y9VVn6cdUdH2fZsv21DvtrNNy4TzWDr2tqpzue67WFnajnS4dvDRqrbXhg6S7dqOzLQtu5dTt7I4uq7EAD2rFYOvnyw3bnX+Wvn/c6POlc65w98ffLM5Ofb2f+XiT/t+13r162vFi/n/Xw/h8YdKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBLcePudq3OLi/NLe7CQ1gidf5vRB7w9tKmfivqZ9k7vVz3ZR78Ze3qfaKF/IE1udUT9PskW47THEXwnyc5OcXS0zpnYhV2ezJCm86vPdJLWajxJru6RH7gDdsLJ5Wtvnrzx9jtfWrg29/r86/PXT505/erp7pdnb528vLA4P1M/jjtKYCdsfF8KAAAAAAAAAAAA7H278VcWQ6YtemPYVwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/07nXsr+XIrMzJ2bK+t073cVy6ZfXek4kaSUpvpcUHydnUy+ZGhiueNA8r9z78BcvvfdBd22siX7/1obt/vCvlZVt7kWvWTKdZF+zfrjJkca7ODBeb5uB1YrVPSwTdqyfOBi3/wUAAP//0koEbg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 26.26931447s ago: executing program 3 (id=357): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYBLOB="006c6c653d303030303030304f3030303030303030303030303030362c756d61736b3d303030303030303030303030303030303030303030322c6769643d0b8e358c46035f5d20e22f42983f8eee30a33a346f5255e140c75390bd912fb876209add6000000000000000bdee7b7f090000000000000028cb460bbf1a02cda5bc4a7b97da1eeaa1d00e17d7a741465c228d66", @ANYRESHEX=0x0, @ANYBLOB=',errors=continue,iocharset=default,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,fmask=00000000000000000000003,iocharset=cp864,\x00'], 0x1, 0x152b, &(0x7f0000002fc0)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uyyRJLqnkkiRJkuSWkDTJkYTEkFvSkITkMiSXISSXiUnjfr9fEpKkSZKQ3JL1/0z4O506v9P5nc5xPr95vp/P/ljPu/az9trv8+53X8zMt52H1GhUs2oDIoJ/CV74JwkAYgFgAABcAwABAJSLKxeX1Z9TYtK/thH253o49UrPgF1JXP/sjeufvXH9szeuf/bG9c/euP7ZG9c/e+P6M5adbZpW8Fpe/isWTAL4j2+Xn/9nZ3z+/z8ks/SYL9eUvr4LQMwfTeH6Z29c//+zgj+yEtc/e+P6Z1exV3oC7L8AH//ZQY6/28P1z964/oxlZ/8Fz72v6AKR7P0eXOnPH2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OG0v0wBwKX2lZ4XY4wxxhhjjDHG/jw+x5WeAWOMMcYYY4wxxv79EARIUBBADOSAWMgJuUAAwNWQB66BCFwLcXAd5IXrIR/kD7Iy4qEQFAYNBmKAIIQiUBSicAMUgxuhOJSAklAKHJSGBLgJysDNUBZugXJwK5SH26ACVIRKUBluhypwB9wJd0FVuBuqQXWoATXhHqgF90JtuA/qwP1QFx6AevAg1IeHoAE8DA3hEWgEj0JjeAyaQFNoBs2hxf8q/0XoDi9BD+gJSdALesPL0Af6Qj/oDwPgFRgIr8IgeA2SYTAMgddhKLwBw+BNGA4jYCS8BaPgbRgNY2AsjIMUGA8T4B2YCO/CJJgMU2AqpMI0mA7vwQyYCbPgfZgNH8AcmAvzYD6kwYewABZCOnwEi+BjyIDFsASWwjJYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOO+AT2Amfwi7YDXvgM9gLn/+T+af+Jr8LAgIKFKhQYQzGYCzGYi7MhbkxN+bBPBjBCMZhHObFvJgP82EBLIDxGI+FsTAaNEhIWASLYBSjWAyLYXEsjiWxJDp0mIAJWAZvxrJYFsthOSyP5bECVsSKWBkrYxWsgnfinVgVq2I1rIY1sAbeg/dgL6yNtbEO1sG6WPfS4ylsgA2wITbERtgIG2NjbIJNsBk2wxbYAltiS2yFrbANtsG22BbbYTtMxERsj+2xA3bAjtgRO2En7IydsQt2xa6ZL+YAfAlfwp5YTfTC3tgb+2Byjn7YH/vjKzgQX8VX8TVMxsE4BF/H1/ENHIYncTiOwJE4EquIt3E0jkES4zAFU3ACTsCJOBEn4WScjFMxFafhdJyOM3AmzsT3cTZ+gB/gXJyL8zEN03ABLsR0TMdFeAozcDEuwaW4DJfjMlyJq3AlrsG1uAbX43rciBtxM27GrbgVt+N2/AQVAH6Ku3E3JuNe3Iv7cB/ux/14AA9gJmbiQTyIh/AQHsbDeASP4FE8hsfxGJ7AE3gST+FpPI1n8Syew+fjv274SYnVySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUkBsU44kSASRBlRRpQVZUU5casoL24TFURF0dpVFpVFFdHG3SnuElVFVVFNVBc1RE1RU9QStURtUVvUEXVEXVFX1BMPivqiF/bDh0VWZRqJwdhYDMEmoqmQF7/BWoph2Eq0Fm3Ek2IEDsd2oqVLFM+I9mI0dhB/EWPwOdFJjMPO4gXRRXQV3cSLorto5XqInmIS9hK9xVTsI/qKfqK/mIHVxfs4O2cN8ZpIFoPFEPG6mI9viGHiTTFcjBAjxVtilHhbjBZjxFgxTqSI8WKCeEdMFO+KSWKymCKmilQxTUwX74kZYqaYJd4Xs8UHYo6YK+aJ+SJNfCgWiIUiXXwkFomPRYZYLJaIpWKZWC5WiJVilVgt1oi1Yp1YLzaIjWKT2Cy2iK1im9gudohPxE7xqdgldos94jOxV3wu9okvxH7xpTggvhKZ4mtxUHwjDolvxWHxnTgivhdHxTFxXPwgTogfxUlxSpwWZ8RZ8ZM4J34W54UXIFEKKaWSgYyROWSszClzyatkbhlcfHevlXHyOplXXi/zyfyygCwo42UhWVhqaaSVJENZRBaVUXmDLCZvlMVlCVlSlpJOlpYJ8iZZRt4sy8pbZDl5qywvb5MVZEVZSVaWt8sq8g4JkQvbqCaryxqyprxHJsG9sra8T9aR98u68gFZTz4o68uHZAP5sGwoH5GN5KOysXxMNpFNZTPZXLaQj8uW8gnZSraWbeSTsq18SraTT8tE+YxsL/3Fj8hzspN8XnaWL8gusqvsJn+W56WXPWRPCb1A9pYvyz6yr+wn+8sB8hU5UL4qB8nXZLIcLIfI1+VQ+YYcJt+Uw+UIOVK+JUfJt+VoOUaOleNkihwvJ8h35ET5rpwkJ8spcqpMldNkv4sjzZLyH+a/8zv5g37Z+ka5SW6WW+RWuU1ulzvkJ3Kn3Cl3yV1yj9wj98q9cp/cJ/fL/fKAPCAzZaY8KA/KQ/KQPCwPyyPyiDwqj8kz8gd5Qv4oT8pT8pQ8I8/Ks/LcxfcAFCqhpFIqUDEqh4pVOVUudZXKra5WedQ1KqKuVXHqOpVXXa/yqfyqgCqo4lUhVVhpZZRVpEJVRBVVUXUDXvzAqJKqlHKqtEpQN/0z+aqYulEVVyV+lX9pfkl/Z34tVAvVUrVUrVQr1Ua1UW1VW9VOtVOJKlG1V+1VB9VBdVQdVSfVSXVWnVUX1UV1U91Ud9Vd9VA9VJJKUr3Vy6qP6qv6qf5qgHpFDVQD1SA1SCWrZDVEDVFD1VA1TA1Tw9VwNVKNVKPUKDVajVZj1ViVolLUBDVBTVQT1SQ1SU1RU1SqSlXT1XQ1Q81Qs9QsNVvNVnPUHDVPzVNpKk0tUAtUukpXi9QilaEWq8VqqVqqlqvlaqVaqVar1WqtWqvWq/UqQ21Sm9QWtUVtU9vUDrVD7VQ71S61S+1Re9RetVftU/vUfrVfHVAHVKbKVAfVQXVIHVKH1WF1RB1RR9VRdVwdVyfUCXVSnVSn1Wl1Vp1V59Q5dV6dz7rsC0QgAhVknWljgtggNsgV5ApyB7mDPEGeIBJEgrggLsgbXB/kC/IHBYKCQXxQKCgc6MAENhAXix4NbgiKBTcGxYMSQcmgVOCC0kFCcFNQJrg5KBvcEpQLbg3KB7cFFYKKQaWgcnB7UCW4I7gzuCuoGtwdVAuqBzWCmsE9Qa3g3qB2cF9QJ7g/qBs8ENQLHgzqBw8FDYKHg4bBI0Gj4NGgcfBY0CRoGjQLmgct/tTxvT+Z/wnXQ/fUSbqX7q1f1n10X91P99cD9Ct6oH5VD9Kv6WQ9WA/Rr+uh+g09TL+ph+sReqR+S4/Sb+vReoweq8fpFD1eT9Dv6In6XT1JT9ZT9FSdqqfp6fo9PUPP1LP0+3q2/kDP0XP1PD1fp+kP9QK9UKfrj/Qi/bHO0Iv1Er1UL9PL9Qq9Uq/Sq/UavVav0+v1Br1Rb9Kb9Ra9VW/T2/UO/YneqT/Vu/RuvUd/pvfqz/U+/YXer7/UB/RXOlN/rQ/qb/Qh/a0+rL/TR/T3+qg+po/rH/QJ/aM+qU/p0/qMPqt/0uf0z/q89lkX91mnd6OMMjEmxsSaWJPL5DK5TW6Tx+QxERMxcSbO5DV5TT6TzxQwBUy8iTeFTWGThQyZIqaIiZqoKWaKmeKmuClpShpnnEkwCaaMKWPKmrKmnClnypvypoKpYCqZSuZ2c7u5w9xh7jJ3mbvN3aa6qW5qmpqmlqllapvapo6pY+qauqaeqWfqm/qmgWlgGpqGppFpZBqbxqaJaWKamWamhWlhWpqWppVpZdqYNqataWvamXYm0SSa9qa96WA6mI6mo+lkOpnOprPpYrqYbqab6W66mx6mh0kySaa36W36mD6mn+lnBpgBZqAZaAaZQSbZJJshZogZaoaaYWaYGW5GmJFZh49524w2Y8xYM86kmBQzwUwwE81EM8lMMlPMFJNqUs10M93MMDPMLDPLzDazzRwzx8wz80yaSTMLzAKTbtLNIrPIZJgMs8QsMcvMMrPCrDCrzCqzxqwx62Cd2WA2mE1mk9litphtZpvZYXaYnWan2WV2mT1mj9lr9pp9Zp/Zb/abA+aAyTSZ5qA5aA6ZQ+awOWyOmCPmqDlqjpvj5oQ5YU6ak+a0OW3OmvwXz5fexNqcNpe9yua2V9s89hr7t3EBW9DG20K2sNU2n83/q9hYa4vbErakLWWdLW0T7E2/iSvYiraSrWxvt1XsHfbO38S17L22tr3P1rH325r2nl/Fde0Dtp591NZHBLBNbUPb3Dayj9rG9jHbxDa1zWxz29Y+ZdvZp22ifca2t8/+Jl5gF9pVdrVdY9faXXa3PW3P2EP2W3vW/mR72J52gH3FDrSv2kH2NZtsB/8mHmnfsqPs23a0HWPH2nG/iafYqTbVTrPT7Xt2hp35mzjNfmhn23Q7x8618+z8X+KsOaXbj+wi+7HNsAEssUvtMrvcrrAr//9cl9r1doPdaHfaT+0Wu9Vus9vtjksXwna33WM/s3vt5/ag/cbut1/aA/awzbRf/xJn7d9h+509Yr+3R+0xe9z+YE/YH9Wl7Kx9/8H+bM9bb4GQgCQpCiiGclAs5aRcdBXlpqspD11DEbqW4ug6ykvXUz7KTwWoIMVTISpMmgxZIgqpCBWlKN1Al6ZXkkqRo9KUQDdRGbqZytItVI5upfJ0G1WgilSJKtPtVIXuoDvpLqpKd1M1qk41qCbdQ7XoXqpN91EduJ/q0gNUjx6k+vQQNaCHqSE9Qo3oUWpMj1ETakrNqDm1oMepJT1Brag1taEnqS09Re3oaUqkZ6g9PUsd6C/UkZ6jTvQ8daYXqAt1pW70InWnl6gH9aQk6kW96WXqQ32pH/WnAfQKDaRXaRC9Rsk0mIbQ6zSU3qBh9CYNpxE0kt6iUfQ2jaYxNJbGUQqNpwn0Dk2kd2kSTaYpNJVSaRpNp/doBs2kWfQ+zaYPaA7NpXk0n9LoQ1pACymdPqJF9DFl0GJaQktpGS2nFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbacd9AntpE9pF+2mPfQZ7aXPaR99QfvpSzpAX1EmfU0H6Rs6RN/SYfrO96Tv6Sgdo+P0A52gH+kknaLTdIbO0k90jn6m8+QJQgxFKEMVBmFMmCOMDXOGucKrwtzh1WGe8JowEl4bxoXXhXnD68N8Yf6wQFgwjA8LhYVDHZrQhhSGYZGwaBgNbwiLhTeGxcMSYcmwVOjC0mFCeFNYJrw5LBveEpYLbw3Lh7eFFcKK4aP3Vw5vD6uEd4Te+55Vw7vDamH1sEZYM7wnrBXeG9YO7wvrhPeHZcMHwnrhg2H98KGwQfhw2DB8JGwUPho2Dh8Lm4RNw2Zh87BF+HjYMnwibBW2DtuET4Ztw6fCduHTYWL4TNg+fPaX/gcW/v3+pLBX2Dt8OXw59P4+OS86P5oW/TC6ILowmh79KLoo+nE0I7o4uiS6NLosujy6Iroyuiq6Oromuja6Lro+uiG6Mep9zRzg0AknnXKBi3E5XKzL6XK5q1xud7XL465xEXeti3PXubzuepfP5XcFXEEX7wq5wk4746wjF7oirqiLuhtcMXejK+5KuJKulHOutEtwzV0L18K1dE+4Vq61a+OedE+6p9xT7mn3tHvGtXfPug7uL66je851cs+7590Lrovr6rq5F113Nz7PhWMyyfV2vV0f18f1c/3cADfADXQD3SA3yCW7ZDfEDXFD3VA3zA1zw91wN9KNdKPcKDfajXZj3ViX4lLcBDfBTXQT3SQ3yU1xU1yqS3XT3XQ3w81wVWZe2MocN8fNc/NcmktzC1zWNWO6A1jkMlyGW+KWuGVumVvhVrhVbpVb49a4dW6d2+A2uE1uk9vitrhtbpvb4Xa4nW6n2+WvuTCo2+v2uX1uv9vvDrivXKb72h1037hD7lt32H3njrjv3VF3zB13P7gT7kd30p1yp90Zd9b95M65n915511KZHxkQuSdyMTIu5FJkcmRKZGpkdTItMj0yHuRGZGZkVmR9yOzIx9E5kTmRuZF5kfSIh9GFkQWRtIjH0UWRT6OZEQWR5ZElkaWRZZHvC+0JfRFfFEf9Tf4Yv5GX9yX8CV9Ke98aZ/gb/Jl/M2+rL/Fl/O3+vL+Nl/BV/SV/GO+iW/qm/nmvoV/3Lf0T/hWvrVv45/0bf1Tvp1/2if6Z3x7/6zv4P/iO/rnfCf/vO/sX/BdfFffzb/ou/uXfA/f0yf5Xr63f9n38X19P9/fD/Cv+IH+VT/Iv+aT/WA/xL/uh/o3/DD/ph/uR/iRMW/5UZdukWGcT/Hj/QT/jp/o34W7/GQ/xU/1qX6an+7f8zP8TD/Lv+9n+w/8HD/Xz/PzfZr/0C/wC326/8gv8h/7DL/40kNlv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+k/9Lr/b7/Gf+b3+c7/Pf+H3+y/9Af+Vz/Rf+4P+G3/If+sP++/8Ef+9P+qP+eP+B3/C/+hP+lP+tD/jz/qf/Dn/sz/Pv7PGGGOMMfaHjL/cFL/uufA4v9fv5Ii/Wrk3AFy9tWDmX/dnXVGuy3eh3VfEt40AwDM9Oz98aalWLSkp6eK6GRKConMBLv1PUJYYuBwvhjbwFCRCayjzu/PvK7qepX8wfvRWgFx/lRMLl+PL438BgEm/M/7jT46E8uHpuP9h/LkAxYtezskJl+PF0OaX5yutoezfmX/+lv9g/jm/TAFo9Vc5ueFyfHn+CfAEPAuJv1qTMcYYY4wxxhi7oK+o1PHS/eeln/j8vfvzeHU5Jwdcjv/R/TljjDHGGGOMMcauvOe6dnv68cTE1h3/+cad/6usP9xoDP+ukbnxuw3vAS69ogDgXxwQIKsh/5N7sfk/sq3ki4fO33YtO+MD+O8o5Z/R+CPfHuLf++XEGGOMMcYY+1Ndvuj/9evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4Tf07sSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9vwAAAP//zOwBMw==") creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x54a12000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = fcntl$getown(r3, 0x9) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000000)) sendto$inet6(r4, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) sendmsg(r6, 0x0, 0x44004) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) 22.951676871s ago: executing program 3 (id=359): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) semctl$GETZCNT(0x0, 0x0, 0xe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 21.945234999s ago: executing program 3 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) write(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4576, 0x101}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x700, 0x11, r4, 0x100000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) r7 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0xfffffffc, 0x4000000, 0x0, 0x2, 0x0, 0x0, 0x1], [0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000], [0x7, 0x3, 0x0, 0x7]], '\x00', [{0xffffffff}, {0x1, 0x20000000}, {0x0, 0x8}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {0x0, 0x6}, {0x0, 0x80000000}, {0x2, 0x8b}, {}, {0x0, 0xfffffffd}], '\x00', 0x1000}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYRES16=r6, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000000000000"], 0x12c}, 0x1, 0x0, 0x0, 0x20000020}, 0x0) 20.698267593s ago: executing program 3 (id=361): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = dup(r2) sendmsg$nl_xfrm(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000012000100000000000000000000000000000000000000ffff00000000000000000200000014080d00e000000100"/59], 0x3c}}, 0x0) r4 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 12.411129135s ago: executing program 0 (id=376): openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB], 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 11.33628742s ago: executing program 0 (id=379): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000500)="e19f5027d5f714ff326d30ef8394d59d34a7e9233506464ac4024f7647eccc60f4fe7540a16f5ee9c980d427221368a5131929978a5d432833b41506633170410d3810048f3ce8cd38df13cb292965e76cb4225173ab00430dbf", 0x5a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x54]}}]}) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x112ca0, &(0x7f0000000400)=ANY=[@ANYBLOB="dc12e5606e010400000100000059300677dba4c757e6801d0947601d2300000000025b10763643eb4441b9f15e07599ffcb69aad7c50b22e76356f9f1516c72a87e0d254e6452d9fd380ad8a8aecc2218a63489d8833ed6d1b5a86452c336b36a534256a8cdb7833d78bdd1493f8648d73ebc1b21ed1de8812850a593744fca07267b3c8824bd3e41f2ce1a3daf3910f338162aac240ffc2dc3fcf7d9caec10702f5b8afc61790e71fbd5bf1b8a04b4b27450878f9dfccf580946633296c381786718396743e3fa91841425b7fda1eabdb3be66abb4fdb72b260d352"]) mount(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) getcwd(0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x100f, 0x0, 0x12, 0xffffffffffffffff, 0x0) 10.294271354s ago: executing program 0 (id=382): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8a}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$netlink(0x10, 0x3, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYRES16=r0, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x44044) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x264e33, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x1}}]}, 0x20}}, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc008551c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 9.33127012s ago: executing program 0 (id=384): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x0, 0x0, 0xfffffffc, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010104}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x2, [@private]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.509322367s ago: executing program 0 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa22340502c9a4319fa14172170a013589317d2af31ba554"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r6}], 0x1, 0x10000) dup3(r3, r4, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000040)={0x90000004}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r8, &(0x7f0000000040)='\f', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 6.954589042s ago: executing program 0 (id=389): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) dup(r2) r3 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 6.789805311s ago: executing program 4 (id=391): r0 = socket(0x840000000002, 0x3, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 6.635231512s ago: executing program 4 (id=392): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB]) 5.869244791s ago: executing program 4 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000001001018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffc4e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) io_setup(0x8000, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001100)="8a310ff15a829e306846ce1a8575e611e906d06744c0bec12dc6713fa30f01c72a6b86db705748e6b1fd7553cb0131cfab4d54a45a2672b87ea4dd099d70151f9285bbf4437c21be", 0x48, 0x7}, 0x0]) 5.439263787s ago: executing program 4 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x2}, 0x10) write(r5, &(0x7f0000000240)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0xc0984124, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x468, 0x202) ioctl$HDIO_GETGEO(r8, 0x301, &(0x7f0000000040)) writev(0xffffffffffffffff, 0x0, 0x0) 3.967627325s ago: executing program 4 (id=396): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x8, [@restrict={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xfffffffc}}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x10001, [{0x8, 0x3, 0xfffffffd}]}, @enum64={0x4, 0x3, 0x0, 0x13, 0x1, 0x0, [{0x8, 0x4, 0x3}, {0x3, 0x0, 0x2}, {0x2, 0x86b, 0x7}]}, @enum={0x7, 0x7, 0x0, 0x6, 0x4, [{0x7, 0x10001}, {0x8, 0xa}, {0xa, 0x3ff}, {0x9, 0xffffff80}, {0x0, 0x2}, {0x3, 0xa}, {0xd, 0x2}]}]}, {0x0, [0x2e, 0x5f, 0x26, 0x0, 0x61, 0x2e]}}, &(0x7f0000000380)=""/152, 0xdc, 0x98, 0x0, 0x68e19ada, 0x10000, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000002c0)={0x3, 0x1, 'client0\x00', 0x6, "bfdb9d5066cb61ca", "3d0a5546ea626d32ab8f710b25f1afbd53792757db33cdacb414cc96aa1d4fe2", 0x1, 0x800}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x2040}}, 0x50) syz_fuse_handle_req(r4, &(0x7f000000a380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x18) getdents64(r6, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 3.906652359s ago: executing program 1 (id=397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x19) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x80000000) removexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x800) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r7, 0x0, 0x9e4b) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000280)) r9 = fcntl$getown(0xffffffffffffffff, 0x9) r10 = syz_open_procfs(r9, &(0x7f0000000000)='net/fib_trie\x00') fchdir(r10) 2.180850714s ago: executing program 1 (id=398): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@tclass={{0x14, 0x29, 0x43, 0x77e}}], 0x18}, 0x8003) 2.15681895s ago: executing program 4 (id=399): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x0, 0x0, 0x2, "71ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.07345387s ago: executing program 1 (id=400): r0 = socket(0x840000000002, 0x3, 0x100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(r0, 0x0, 0x0) 2.029669836s ago: executing program 1 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe66) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x0) prlimit64(0x0, 0xf, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x9}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/276], 0x1, 0x1a1, &(0x7f0000000000)="$eJzskD9rU1EYxn/vuSf/ClWi4hDBBCzGG6rJvYqDU3CK4AUHF8GgIY1NMVHTm8GWFrpIQaL9CjrVURycRBSci4PgoNelmzRDcRAHidybo+Bn6PnBOc95Hs5535fTDQdhBvi9v9amToLDIT4iaKAo00ypqb42/rvRralw2fiRkNx8YXwhXFm92+r1OsulSyXy/wXAjyT7F4VFjivGQh35vL/WbsntgEmdvlrIxdUqT3CaDNynFPQsx27hMCmPuKIYSAo4XB32H1TDldWzS/3WYmexc8/3z1+sXahl8Kt3lnqdGRD3sSiesY4bkAnIueukmjza0TPMC+J2VeRIZUy6ydaOc+bU/Bjl7jFBeFcek/mquyV1ndNkb8bDNzgqPMcJmLtKTqGJG9UayDX1Sjz9Sf9MKbIbjnOufb+3sHlDya/0dl32suLtkip7+BWPePoCR3jPZsRcRCNiO2L3G0V5E3cZmf/UG/H+0rgTnIQ0D1vD4bKXhg9SDvDjlYfZpJxK5srDW/PGCF/+HiwWi8VisVgsFovFcgD4EwAA//+37mEB") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) process_mrelease(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x81, 0xfc, 0x7f}, {0x2, 0x4}, {0x6}]}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) 1.025846492s ago: executing program 1 (id=402): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000340)='blacklist\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000500)="e19f5027d5f714ff326d30ef8394d59d34a7e9233506464ac4024f7647eccc60f4fe7540a16f5ee9c980d427221368a5131929978a5d432833b41506633170410d3810048f3ce8cd38df13cb292965e76cb4225173ab00430dbf", 0x5a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@size={'size', 0x3d, [0x54]}}]}) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) getcwd(0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x100f, 0x0, 0x12, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000001001018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffc4e) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) io_setup(0x8000, &(0x7f0000000140)=0x0) io_submit(r3, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000001100)="8a310ff15a829e306846ce1a8575e611e906d06744c0bec12dc6713fa30f01c72a6b86db705748e6b1fd7553cb0131cfab4d54a45a2672b87ea4dd099d70151f9285bbf4437c21be", 0x48, 0x7}, 0x0]) kernel console output (not intermixed with test programs): "syz.3.9" name="bus" dev="loop3" ino=19 res=0 errno=0 [ 63.712468][ T5361] loop0: detected capacity change from 0 to 1024 [ 63.744990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.754820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.761943][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 63.763357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.782127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 64.704705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.729076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.737804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.745852][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.746322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.623122][ T5361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.630797][ T5361] EXT4-fs: Ignoring removed orlov option [ 65.644862][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 65.657328][ T25] usb 3-1: config 0 has no interfaces? [ 65.663071][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 65.688636][ T5361] EXT4-fs (loop0): Test dummy encryption mode enabled [ 65.715397][ T5361] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42255!=20869) [ 65.754101][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.768542][ T5361] EXT4-fs (loop0): group descriptors corrupted! [ 65.809598][ T25] usb 3-1: config 0 descriptor?? [ 66.102841][ T5386] loop1: detected capacity change from 0 to 512 [ 66.111731][ T5386] ======================================================= [ 66.111731][ T5386] WARNING: The mand mount option has been deprecated and [ 66.111731][ T5386] and is ignored by this kernel. Remove the mand [ 66.111731][ T5386] option from the mount to silence this warning. [ 66.111731][ T5386] ======================================================= [ 66.146606][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.408724][ T5386] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 67.159269][ T46] usb 3-1: USB disconnect, device number 2 [ 67.370107][ T5399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.401634][ T5400] loop3: detected capacity change from 0 to 1024 [ 67.994422][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.422403][ T5411] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 68.575414][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 69.304074][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 69.377189][ T46] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 69.421339][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.463949][ T46] usb 5-1: Product: syz [ 69.477277][ T46] usb 5-1: Manufacturer: syz [ 69.681150][ T46] usb 5-1: SerialNumber: syz [ 69.695840][ T5420] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.798859][ T46] usb 5-1: config 0 descriptor?? [ 69.812017][ T5424] loop0: detected capacity change from 0 to 16 [ 69.827150][ T5424] erofs: (device loop0): mounted with root inode @ nid 36. [ 69.837166][ T46] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 69.846897][ T46] usb 5-1: Detected FT232R [ 69.875480][ T5424] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 70.354835][ T29] audit: type=1326 audit(1729239576.067:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 70.594959][ T46] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 70.665869][ T29] audit: type=1326 audit(1729239576.177:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 70.830088][ T46] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 70.880730][ T5424] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 70.983387][ T29] audit: type=1326 audit(1729239576.177:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.108401][ T29] audit: type=1326 audit(1729239576.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.137882][ T29] audit: type=1326 audit(1729239576.207:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.162519][ T29] audit: type=1326 audit(1729239576.207:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.207924][ T29] audit: type=1326 audit(1729239576.207:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.231825][ T29] audit: type=1326 audit(1729239576.207:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.259768][ T29] audit: type=1326 audit(1729239576.207:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.284767][ T29] audit: type=1326 audit(1729239576.207:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.0.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f09cdb7dff9 code=0x7ffc0000 [ 71.354537][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.366697][ T5441] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 71.455196][ T5440] loop3: detected capacity change from 0 to 512 [ 71.493279][ T5440] EXT4-fs error (device loop3): __ext4_fill_super:5458: inode #2: comm syz.3.33: iget: special inode unallocated [ 71.512313][ T5440] EXT4-fs (loop3): get root inode failed [ 71.518220][ T5440] EXT4-fs (loop3): mount failed [ 71.645337][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.651969][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.768804][ T5450] loop2: detected capacity change from 0 to 128 [ 71.790395][ T5450] EXT4-fs (loop2): Test dummy encryption mode enabled [ 72.664615][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 72.695799][ T46] usb 2-1: config 0 has no interfaces? [ 72.701337][ T46] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 72.720381][ T5282] usb 5-1: USB disconnect, device number 2 [ 72.778382][ T5282] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 72.790342][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.809515][ T5450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.826073][ T5450] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.854600][ T5440] loop3: detected capacity change from 0 to 1024 [ 72.863222][ T46] usb 2-1: config 0 descriptor?? [ 72.879179][ T5282] ftdi_sio 5-1:0.0: device disconnected [ 72.905816][ T5440] EXT4-fs: Ignoring removed nobh option [ 72.939137][ T5440] EXT4-fs: Ignoring removed orlov option [ 73.015343][ T5440] EXT4-fs: Ignoring removed i_version option [ 75.095457][ T5248] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.394935][ T5440] EXT4-fs (loop3): Test dummy encryption mode enabled [ 75.410993][ T5440] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 75.411087][ T5440] EXT4-fs: failed to create workqueue [ 75.432936][ T5440] EXT4-fs (loop3): mount failed [ 76.246905][ T5282] usb 2-1: USB disconnect, device number 2 [ 76.522428][ T5476] loop4: detected capacity change from 0 to 512 [ 76.596304][ T5476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 77.286483][ T5476] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.306568][ T5481] loop2: detected capacity change from 0 to 512 [ 77.312688][ T1167] cfg80211: failed to load regulatory.db [ 77.426892][ T5476] EXT4-fs (loop4): 1 truncate cleaned up [ 77.435265][ T5476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.456144][ T5481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.476973][ T5481] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.724402][ T5248] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.850636][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.853402][ T5504] loop2: detected capacity change from 0 to 1024 [ 78.077458][ T5495] kvm: emulating exchange as write [ 78.503708][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 78.793104][ T5522] warning: `syz.3.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.127569][ T5529] capability: warning: `syz.1.56' uses deprecated v2 capabilities in a way that may be insecure [ 79.949624][ T5532] loop0: detected capacity change from 0 to 256 [ 80.176267][ T2962] hfsplus: b-tree write err: -5, ino 4 [ 80.202277][ T5532] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x0119abd0, checksum : 0x1119abd0) [ 80.838111][ T5532] exFAT-fs (loop0): invalid boot region [ 80.843710][ T5532] exFAT-fs (loop0): failed to recognize exfat type [ 80.906629][ T5538] loop4: detected capacity change from 0 to 1024 [ 80.934806][ T5538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.989869][ T5540] loop3: detected capacity change from 0 to 1024 [ 80.999730][ T5540] EXT4-fs: Ignoring removed i_version option [ 81.077224][ T5540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.110335][ T5538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.386940][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 81.386958][ T29] audit: type=1804 audit(1729239587.107:44): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.59" name="/newroot/11/file1/bus" dev="loop4" ino=19 res=1 errno=0 [ 82.366167][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.366492][ T5551] xt_hashlimit: size too large, truncated to 1048576 [ 82.415357][ T29] audit: type=1804 audit(1729239588.087:45): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.59" name="/newroot/11/file1/bus" dev="loop4" ino=19 res=1 errno=0 [ 83.022392][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.724624][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 83.794187][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.809815][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.848924][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.029996][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.087034][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.114248][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.136558][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.144850][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.156654][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.171594][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.186094][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.193945][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.204407][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.211898][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.212450][ T5563] loop0: detected capacity change from 0 to 256 [ 84.219370][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219422][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219447][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219471][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219497][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219522][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219548][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219574][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219600][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.219625][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.303283][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.310786][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.318305][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.326181][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.334492][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.341956][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.347047][ T5566] loop1: detected capacity change from 0 to 128 [ 84.349525][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.363767][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.371969][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.379492][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.386986][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.395104][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.402529][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.410025][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.421476][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.429454][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.437063][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.444561][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.452003][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.459599][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.467861][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.475980][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.483405][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.491574][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.499241][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.506731][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.514150][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.521624][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.529235][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.536731][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.544157][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.552172][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.560403][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.571635][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.579769][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.587526][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.595087][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.604372][ T756] hid-generic 0001:0000:0000.0001: unknown main item tag 0x0 [ 84.626285][ T9] usb 2-1: config 0 descriptor?? [ 84.646606][ T5563] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 84.668849][ T756] hid-generic 0001:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.685485][ T9] usb 2-1: can't set config #0, error -71 [ 84.743103][ T9] usb 2-1: USB disconnect, device number 3 [ 86.173424][ T5589] loop1: detected capacity change from 0 to 256 [ 86.201641][ T5589] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 86.830220][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.867445][ T5598] loop3: detected capacity change from 0 to 1024 [ 86.905320][ T5598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.950707][ T5598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.016297][ T46] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.033235][ T46] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 87.035027][ T5598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.057055][ T46] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 87.074507][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.083104][ T46] usb 2-1: SerialNumber: syz [ 87.309038][ T5598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.329593][ T46] usb 2-1: 0:2 : does not exist [ 87.446058][ T29] audit: type=1326 audit(1729239593.167:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5596 comm="syz.3.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83c77dff9 code=0x0 [ 87.553302][ T46] usb 2-1: USB disconnect, device number 4 [ 87.659545][ T5368] udevd[5368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.715012][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.962400][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 87.971111][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.010581][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.040929][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.079215][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.100995][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.170329][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.190467][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.264459][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.274873][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.286842][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.299599][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.313153][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.337698][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.461704][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.469894][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.483931][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 88.496711][ T5245] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 88.506455][ T5245] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 88.507215][ T5245] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 88.508240][ T5245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 88.508902][ T5245] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 88.509255][ T5245] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.240562][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240590][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240607][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240623][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240639][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240655][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240670][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240686][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240701][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240717][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240732][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240748][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240763][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240779][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240794][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240810][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240825][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240841][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240856][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240872][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240887][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240902][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240918][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240933][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240949][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240964][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240980][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.240995][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241011][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241026][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241041][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241057][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241072][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241088][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241103][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241118][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241134][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241149][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241165][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.241180][ T46] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 89.244067][ T46] hid-generic 0001:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 89.397758][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 89.400280][ T8] usb 5-1: config 0 has no interfaces? [ 89.400328][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 89.400350][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.442248][ T8] usb 5-1: config 0 descriptor?? [ 90.993595][ T5245] Bluetooth: hci5: command tx timeout [ 91.384434][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.802002][ T5621] chnl_net:caif_netlink_parms(): no params data found [ 92.090623][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 92.095706][ T756] usb 5-1: USB disconnect, device number 3 [ 92.100913][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 92.119243][ T46] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 92.134605][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.142650][ T46] usb 2-1: Product: syz [ 92.172780][ T46] usb 2-1: Manufacturer: syz [ 92.184404][ T46] usb 2-1: SerialNumber: syz [ 92.206037][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.244743][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.280056][ T5621] bridge_slave_0: entered allmulticast mode [ 92.400059][ T46] usb 2-1: config 0 descriptor?? [ 92.410182][ T46] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.101538][ T4630] Bluetooth: hci5: command tx timeout [ 93.197611][ T5621] bridge_slave_0: entered promiscuous mode [ 93.515965][ T5635] loop1: detected capacity change from 0 to 256 [ 93.629938][ T5635] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 93.975082][ T5670] fuse: Bad value for 'fd' [ 94.023863][ T5635] netlink: 60 bytes leftover after parsing attributes in process `syz.1.81'. [ 94.037509][ T3433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.068500][ T5635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.187358][ T5635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.224192][ T46] usb 2-1: USB disconnect, device number 5 [ 95.447227][ T3433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.583820][ T4630] Bluetooth: hci5: command tx timeout [ 95.806078][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.829062][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.885019][ T5621] bridge_slave_1: entered allmulticast mode [ 95.925466][ T5621] bridge_slave_1: entered promiscuous mode [ 96.032650][ T5688] loop1: detected capacity change from 0 to 1024 [ 96.065924][ T5688] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.088760][ T5688] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 96.252487][ T3433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.271209][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.307771][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.003481][ T5694] loop4: detected capacity change from 0 to 8 [ 97.026992][ T5688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.186694][ T3433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.299839][ T5621] team0: Port device team_slave_0 added [ 97.313428][ T5688] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 97.355875][ T5621] team0: Port device team_slave_1 added [ 97.544759][ T5284] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 97.688156][ T4630] Bluetooth: hci5: command tx timeout [ 98.270391][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.291334][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.384562][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.474707][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.485637][ T5284] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 98.509437][ T5715] loop0: detected capacity change from 0 to 2048 [ 98.745150][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.757353][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.784232][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.808127][ T5284] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.823902][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.845978][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.876894][ T5715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.992593][ T5284] usb 5-1: Product: syz [ 99.253990][ T5284] usb 5-1: Manufacturer: syz [ 99.934694][ T5284] usb 5-1: SerialNumber: syz [ 99.970067][ T5284] usb 5-1: can't set config #1, error -71 [ 100.105179][ T5284] usb 5-1: USB disconnect, device number 4 [ 100.120575][ T5726] loop1: detected capacity change from 0 to 128 [ 100.141835][ T5726] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 100.190539][ T5726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.206653][ T5621] hsr_slave_0: entered promiscuous mode [ 100.219242][ T5621] hsr_slave_1: entered promiscuous mode [ 100.394584][ T5621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.426400][ T5621] Cannot create hsr debugfs directory [ 100.556722][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.760135][ T3433] bridge_slave_1: left allmulticast mode [ 100.848728][ T3433] bridge_slave_1: left promiscuous mode [ 100.859153][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 100.906973][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 101.003360][ T3433] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.159828][ T9] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 101.222715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.240955][ T3433] bridge_slave_0: left allmulticast mode [ 101.268068][ T9] usb 4-1: Product: syz [ 101.272280][ T9] usb 4-1: Manufacturer: syz [ 101.285304][ T9] usb 4-1: SerialNumber: syz [ 101.294424][ T3433] bridge_slave_0: left promiscuous mode [ 101.295810][ T5747] loop7: detected capacity change from 0 to 16384 [ 101.311072][ T9] usb 4-1: config 0 descriptor?? [ 101.317959][ T3433] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.347682][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.577687][ T5730] loop3: detected capacity change from 0 to 256 [ 101.641089][ T5730] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 101.710073][ T5756] loop1: detected capacity change from 0 to 256 [ 101.719270][ T5730] netlink: 60 bytes leftover after parsing attributes in process `syz.3.104'. [ 101.733728][ T5756] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.759974][ T8] usb 4-1: USB disconnect, device number 2 [ 101.810627][ T5756] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.387278][ T29] audit: type=1800 audit(1729239608.097:47): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="bus" dev="loop1" ino=1048616 res=0 errno=0 [ 103.234576][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.415656][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.569054][ T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 103.722323][ T8] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 103.722356][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.726179][ T8] usb 1-1: config 0 descriptor?? [ 103.883235][ T5778] loop1: detected capacity change from 0 to 512 [ 104.261483][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.307888][ T5778] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.560569][ T3433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.576313][ T3433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.589646][ T3433] bond0 (unregistering): Released all slaves [ 104.624648][ T8] usb 1-1: Direct firmware load for ar3k/ramps_0x00000000_26.dfu failed with error -2 [ 104.648146][ T8] usb 1-1: Falling back to sysfs fallback for: ar3k/ramps_0x00000000_26.dfu [ 104.766880][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.937215][ T5789] loop3: detected capacity change from 0 to 1024 [ 104.944599][ T5789] EXT4-fs: Ignoring removed orlov option [ 104.982670][ T5789] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 104.991845][ T5789] System zones: 0-1, 3-12 [ 104.998444][ T5789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.867743][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.730525][ T3433] hsr_slave_0: left promiscuous mode [ 106.739118][ T3433] hsr_slave_1: left promiscuous mode [ 106.750952][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.759220][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.790816][ T3433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.810228][ T3433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.932960][ T5284] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.946724][ T756] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 106.988988][ T3433] veth1_macvtap: left promiscuous mode [ 107.267125][ T3433] veth0_macvtap: left promiscuous mode [ 107.385731][ T3433] veth1_vlan: left promiscuous mode [ 107.477933][ T3433] veth0_vlan: left promiscuous mode [ 107.814483][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 107.830473][ T756] usb 4-1: unable to get BOS descriptor or descriptor too short [ 107.838874][ T5284] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 107.886957][ T756] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 108.073911][ T5284] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 108.147338][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.174160][ T756] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.252374][ T756] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 108.267693][ T5284] usb 2-1: Product: syz [ 108.317939][ T5284] usb 2-1: Manufacturer: syz [ 108.346905][ T756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.372490][ T5284] usb 2-1: SerialNumber: syz [ 108.471988][ T5284] usb 2-1: config 0 descriptor?? [ 108.482175][ T756] usb 4-1: Product: à Š [ 108.499895][ T756] usb 4-1: Manufacturer: à – [ 108.527300][ T5284] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.542186][ T756] usb 4-1: SerialNumber: à  [ 108.586779][ T5812] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 108.731156][ T5813] loop1: detected capacity change from 0 to 256 [ 108.776271][ T5813] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.829799][ T5813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.121'. [ 108.839775][ T5812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.871390][ T5284] usb 2-1: USB disconnect, device number 6 [ 108.884790][ T5812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.972613][ T756] usbhid 4-1:1.0: can't add hid device: -71 [ 108.980334][ T756] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 109.003973][ T756] usb 4-1: USB disconnect, device number 3 [ 109.944574][ T5314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 109.963950][ T3433] team0 (unregistering): Port device team_slave_1 removed [ 110.086731][ T3433] team0 (unregistering): Port device team_slave_0 removed [ 110.284739][ T5314] usb 5-1: device descriptor read/64, error -71 [ 110.443275][ T5848] loop3: detected capacity change from 0 to 256 [ 110.450847][ T5848] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.473545][ T5848] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.699565][ T5314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.137375][ T29] audit: type=1800 audit(1729239616.677:48): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="bus" dev="loop3" ino=1048617 res=0 errno=0 [ 111.517227][ T5314] usb 5-1: device descriptor read/64, error -71 [ 111.554516][ T5852] loop1: detected capacity change from 0 to 1024 [ 111.561774][ T5852] EXT4-fs: Ignoring removed orlov option [ 111.625443][ T5314] usb usb5-port1: attempt power cycle [ 111.682848][ T5852] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 111.698481][ T5852] System zones: 0-1, 3-12 [ 111.716202][ T5852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.843465][ T29] audit: type=1326 audit(1729239617.557:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5851 comm="syz.1.128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206797dff9 code=0x0 [ 112.127376][ T5862] loop0: detected capacity change from 0 to 2048 [ 112.134552][ T5862] udf: Bad value for 'session' [ 112.833011][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.852211][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.963059][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.065526][ T5871] loop4: detected capacity change from 0 to 512 [ 113.072657][ T5871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.082150][ T5871] ext4: Unknown parameter 'audit' [ 115.061084][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.394933][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.190333][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.537601][ T5912] loop3: detected capacity change from 0 to 512 [ 118.743680][ T5912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.117997][ T5907] loop1: detected capacity change from 0 to 1024 [ 119.126541][ T5907] EXT4-fs: Ignoring removed orlov option [ 119.165369][ T5907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 119.175690][ T5912] EXT4-fs (loop3): 1 truncate cleaned up [ 119.182496][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.220862][ T5907] System zones: 0-1, 3-12 [ 119.232293][ T5907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.394722][ T29] audit: type=1326 audit(1729239625.087:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5905 comm="syz.1.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206797dff9 code=0x0 [ 119.541793][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.562203][ T3819] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.570118][ T3819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.584844][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.600547][ T1828] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.607737][ T1828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.672933][ T5621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.684635][ T5621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.706848][ T5238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.034522][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 120.188897][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 121.626910][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.747226][ T5956] loop1: detected capacity change from 0 to 16 [ 121.754157][ T5956] erofs: Unknown parameter '' [ 122.801963][ T5621] veth0_vlan: entered promiscuous mode [ 122.963911][ T5621] veth1_vlan: entered promiscuous mode [ 123.014658][ T5621] veth0_macvtap: entered promiscuous mode [ 124.041097][ T5621] veth1_macvtap: entered promiscuous mode [ 124.842052][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.880376][ T5983] loop0: detected capacity change from 0 to 1024 [ 124.888937][ T5973] loop3: detected capacity change from 0 to 16 [ 124.929327][ T5973] erofs: (device loop3): mounted with root inode @ nid 36. [ 124.955147][ T5983] EXT4-fs: Ignoring removed orlov option [ 124.960974][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.324808][ T5992] loop1: detected capacity change from 0 to 512 [ 125.570499][ T5992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.966539][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.977088][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.987118][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.004387][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.014238][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.797059][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.810005][ T5992] EXT4-fs (loop1): 1 truncate cleaned up [ 126.816652][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.860482][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.890754][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.911539][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.921536][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.932129][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.944602][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.955093][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.965349][ T5621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.976749][ T5621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.988899][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.998997][ T5621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.007801][ T5621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.016578][ T5621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.025418][ T5621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.173299][ T5983] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 127.185339][ T5983] System zones: 0-1, 3-12 [ 127.190842][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.282243][ T29] audit: type=1326 audit(1729239632.977:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5982 comm="syz.0.155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x0 [ 127.311899][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.456622][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.484788][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.557662][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.577282][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.591252][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 127.652081][ T5240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.751993][ T6014] netlink: 1320 bytes leftover after parsing attributes in process `syz.4.157'. [ 127.805460][ T6017] loop3: detected capacity change from 0 to 16 [ 127.812331][ T6017] erofs: Unknown parameter '' [ 130.394257][ T6051] netlink: '+}[@': attribute type 4 has an invalid length. [ 130.593679][ T6049] loop0: detected capacity change from 0 to 1024 [ 130.611524][ T6052] netlink: 'syz.3.169': attribute type 4 has an invalid length. [ 130.645373][ T6049] EXT4-fs: Ignoring removed orlov option [ 130.764887][ T6056] loop1: detected capacity change from 0 to 512 [ 130.802828][ T6056] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.170: corrupted in-inode xattr: invalid ea_ino [ 130.822053][ T6049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 130.825883][ T6054] loop2: detected capacity change from 0 to 1024 [ 130.849482][ T6056] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.170: couldn't read orphan inode 15 (err -117) [ 130.901969][ T6062] loop3: detected capacity change from 0 to 256 [ 130.914892][ T6049] System zones: 0-1, 3-12 [ 130.920387][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.951695][ T6056] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.002626][ T756] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 131.010877][ T29] audit: type=1326 audit(1729239636.737:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.0.168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x0 [ 131.035158][ T756] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 131.064683][ T2962] hfsplus: b-tree write err: -5, ino 8 [ 131.234941][ T5234] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 131.245155][ T5240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.289126][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 131.401697][ T6069] netlink: 1320 bytes leftover after parsing attributes in process `syz.2.172'. [ 131.480345][ T6073] loop0: detected capacity change from 0 to 256 [ 131.509422][ T6073] exfat: Deprecated parameter 'utf8' [ 132.808692][ T5327] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.275458][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.281810][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.629636][ T6086] netlink: 'syz.1.178': attribute type 4 has an invalid length. [ 133.654155][ T6086] netlink: 'syz.1.178': attribute type 4 has an invalid length. [ 133.748888][ T5327] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 133.758121][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.768917][ T5327] usb 4-1: config 0 descriptor?? [ 134.025872][ T6089] loop4: detected capacity change from 0 to 4096 [ 134.052430][ T5327] usb 4-1: Cannot read MAC address [ 134.058160][ T5327] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 134.072307][ T5327] usb 4-1: USB disconnect, device number 4 [ 134.079070][ T6089] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 136.297291][ T6105] loop0: detected capacity change from 0 to 1024 [ 136.316513][ T6105] EXT4-fs: Ignoring removed orlov option [ 136.522599][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'. [ 136.601435][ T6116] netlink: 1320 bytes leftover after parsing attributes in process `syz.1.185'. [ 137.196153][ T6105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0102] [ 137.484602][ T6105] System zones: 0-1, 3-12 [ 137.498866][ T6105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.693138][ T29] audit: type=1326 audit(1729239643.407:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6104 comm="syz.0.183" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09cdb7dff9 code=0x0 [ 138.552545][ T5240] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.947578][ T6143] loop0: detected capacity change from 0 to 16 [ 138.955324][ T6143] erofs: Unknown parameter '' [ 142.398624][ T6158] loop1: detected capacity change from 0 to 1024 [ 142.415673][ T6158] EXT4-fs: Ignoring removed orlov option [ 142.425592][ T6152] loop2: detected capacity change from 0 to 512 [ 142.465031][ T6158] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 142.511111][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.893097][ T6173] Bluetooth: MGMT ver 1.23 [ 144.057998][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.262023][ T6182] syz.4.206: attempt to access beyond end of device [ 144.262023][ T6182] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 144.275418][ T6182] exFAT-fs (loop4): unable to read boot sector [ 144.281649][ T6182] exFAT-fs (loop4): failed to read boot sector [ 144.287979][ T6182] exFAT-fs (loop4): failed to recognize exfat type [ 144.315512][ T6182] netlink: 'syz.4.206': attribute type 4 has an invalid length. [ 144.353499][ T6182] netlink: 'syz.4.206': attribute type 4 has an invalid length. [ 144.579272][ T6183] loop2: detected capacity change from 0 to 16 [ 144.586290][ T6183] erofs: Unknown parameter '' [ 145.581645][ T6193] loop0: detected capacity change from 0 to 256 [ 146.635473][ T6193] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 147.077582][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 147.220133][ T6193] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.285303][ T6201] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.454141][ T6206] loop4: detected capacity change from 0 to 256 [ 147.892204][ T6206] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.419778][ T29] audit: type=1800 audit(1729239654.017:54): pid=6206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.213" name="bus" dev="loop4" ino=1048632 res=0 errno=0 [ 148.502227][ T6211] loop1: detected capacity change from 0 to 128 [ 148.610562][ T6211] EXT4-fs (loop1): Test dummy encryption mode enabled [ 148.659261][ T6211] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.672563][ T6211] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.785134][ T6217] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 150.987524][ T5234] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.377900][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.393131][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.401872][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.411182][ T6228] loop2: detected capacity change from 0 to 512 [ 151.417559][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.426344][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.433715][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.518762][ T6228] EXT4-fs: Ignoring removed oldalloc option [ 151.602339][ T6228] EXT4-fs: inline encryption not supported [ 151.611622][ T6231] loop1: detected capacity change from 0 to 16 [ 151.619020][ T6231] erofs: Unknown parameter '' [ 152.130316][ T6228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.219: Parent and EA inode have the same ino 15 [ 152.392127][ T6228] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 153.365054][ T6228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.219: Parent and EA inode have the same ino 15 [ 153.387708][ T6242] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 153.590089][ T4630] Bluetooth: hci4: command tx timeout [ 153.897728][ T6228] EXT4-fs (loop2): 1 orphan inode deleted [ 153.955417][ T6228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.013456][ T6250] loop4: detected capacity change from 0 to 1024 [ 154.046036][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 154.085413][ T6250] EXT4-fs: Ignoring removed bh option [ 154.227824][ T6250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 154.913695][ T5621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.140510][ T29] audit: type=1800 audit(1729239660.857:55): pid=6266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.226" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 156.774517][ T4630] Bluetooth: hci4: command tx timeout [ 156.851085][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 156.870219][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.883901][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.909284][ T6224] bridge_slave_0: entered allmulticast mode [ 156.929705][ T6224] bridge_slave_0: entered promiscuous mode [ 156.953001][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.971829][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.987174][ T6224] bridge_slave_1: entered allmulticast mode [ 157.004168][ T6224] bridge_slave_1: entered promiscuous mode [ 157.034044][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.065433][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.192019][ T6224] team0: Port device team_slave_0 added [ 158.226046][ T6224] team0: Port device team_slave_1 added [ 158.331146][ T6284] loop2: detected capacity change from 0 to 16 [ 158.338924][ T6284] erofs: Unknown parameter '' [ 158.834444][ T4630] Bluetooth: hci4: command tx timeout [ 159.489481][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.504681][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.603299][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.753350][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.935807][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.556822][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.719544][ T6290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.900637][ T4630] Bluetooth: hci4: command tx timeout [ 160.979184][ T6224] hsr_slave_0: entered promiscuous mode [ 161.130272][ T29] audit: type=1326 audit(1729239666.847:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206797dff9 code=0x0 [ 161.208282][ T29] audit: type=1326 audit(1729239666.887:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.1.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f206797dff9 code=0x0 [ 161.307806][ T6224] hsr_slave_1: entered promiscuous mode [ 161.430520][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.444698][ T6224] Cannot create hsr debugfs directory [ 161.610489][ T6319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.245'. [ 161.814033][ T6224] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.090515][ T6335] tmpfs: Unknown parameter 'Üå`n' [ 163.524121][ T6224] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.704104][ T6338] loop1: detected capacity change from 0 to 2048 [ 163.945868][ T6338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.075347][ T6224] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.311060][ T6224] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.619712][ T6224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.676675][ T6358] loop1: detected capacity change from 0 to 2048 [ 164.696070][ T6224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.706535][ T6224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.724431][ T6224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.790554][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.807580][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.841102][ T6224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.851874][ T6224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.878716][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.885908][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.894906][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.902480][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.125150][ T6358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.147784][ T6363] loop4: detected capacity change from 0 to 2048 [ 165.159933][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.174181][ T6363] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 165.200175][ T6363] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 165.228896][ T6363] UDF-fs: Scanning with blocksize 512 failed [ 165.287410][ T6363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.448839][ T6224] veth0_vlan: entered promiscuous mode [ 165.459611][ T6224] veth1_vlan: entered promiscuous mode [ 165.469660][ T6366] loop0: detected capacity change from 0 to 1024 [ 165.498201][ T6366] hfsplus: extend alloc file! (8192,65536,366) [ 165.717227][ T6224] veth0_macvtap: entered promiscuous mode [ 165.891469][ T6224] veth1_macvtap: entered promiscuous mode [ 166.056840][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.093068][ T6366] kvm: vcpu 0: requested 394 ns lapic timer period limited to 200000 ns [ 166.113609][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.139157][ T5234] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 166.162315][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.173692][ T5234] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh [ 166.202365][ T6372] kvm: pic: non byte write [ 166.211968][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.264781][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.283572][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.294151][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.306381][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.316475][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.327142][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.343420][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.398828][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.411283][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.422049][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.465881][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.483516][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.603094][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.613073][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.623852][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.633837][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.644532][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.667335][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.586984][ T6224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.614082][ T6224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.634057][ T6224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.683784][ T6224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.092648][ T6382] tmpfs: Unknown parameter 'Üå`n' [ 169.130976][ T8] Bluetooth: Configuration file not found ar3k/ramps_0x00000000_26.dfu [ 169.139472][ T8] Bluetooth: Loading sysconfig file failed [ 169.145403][ T8] ath3k 1-1:0.0: probe with driver ath3k failed with error -110 [ 169.154428][ T8] usb 1-1: USB disconnect, device number 2 [ 169.433024][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.121832][ T6385] netlink: 212 bytes leftover after parsing attributes in process `syz.0.262'. [ 170.346176][ T5245] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.355915][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.358906][ T6396] loop0: detected capacity change from 0 to 256 [ 170.375442][ T5245] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.383591][ T5245] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.391359][ T5245] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.398752][ T5245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.416431][ T6396] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.442110][ T6396] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.989298][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.652282][ T6405] loop4: detected capacity change from 0 to 2048 [ 171.681604][ T6405] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.810409][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.047684][ T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.055673][ T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.063315][ T973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.071251][ T973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.133307][ T4630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.149684][ T4630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.277598][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.384640][ T4630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.392739][ T4630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.403216][ T4630] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.411884][ T4630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.495251][ T4630] Bluetooth: hci0: command tx timeout [ 172.708365][ T6415] loop3: detected capacity change from 0 to 1024 [ 172.715757][ T6415] EXT4-fs: Ignoring removed orlov option [ 172.721445][ T6415] EXT4-fs: Ignoring removed nobh option [ 172.727311][ T6415] ext4: Bad value for 'max_batch_time' [ 172.750987][ T6415] loop3: detected capacity change from 0 to 1024 [ 173.035404][ T6415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.421160][ T68] bridge_slave_1: left allmulticast mode [ 173.433041][ T68] bridge_slave_1: left promiscuous mode [ 173.821313][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.899374][ T68] bridge_slave_0: left allmulticast mode [ 173.918401][ T68] bridge_slave_0: left promiscuous mode [ 173.926256][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.428986][ T11] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 174.452245][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 174.465054][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.465054][ T11] [ 174.476875][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 174.482895][ T11] EXT4-fs (loop3): Free/Dirty block details [ 174.489707][ T11] EXT4-fs (loop3): free_blocks=68451041280 [ 174.525706][ T11] EXT4-fs (loop3): dirty_blocks=4864 [ 174.531259][ T11] EXT4-fs (loop3): Block reservation details [ 174.558465][ T11] EXT4-fs (loop3): i_reserved_data_blocks=304 [ 174.587809][ T4630] Bluetooth: hci1: command tx timeout [ 174.599177][ T5246] Bluetooth: hci0: command tx timeout [ 174.681178][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 174.773517][ T6431] tmpfs: Unknown parameter 'Üå`n' [ 175.499668][ T6434] loop3: detected capacity change from 0 to 512 [ 175.543440][ T6434] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 175.648318][ T6434] EXT4-fs (loop3): 1 truncate cleaned up [ 175.661520][ T6434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.699152][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.713213][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.731886][ T68] bond0 (unregistering): Released all slaves [ 176.549549][ T6442] ./file0: Can't lookup blockdev [ 176.605968][ T5245] Bluetooth: hci3: command 0x0406 tx timeout [ 176.606109][ T5245] Bluetooth: hci2: command 0x0406 tx timeout [ 176.657535][ T4630] Bluetooth: hci1: command tx timeout [ 176.668777][ T54] Bluetooth: hci0: command tx timeout [ 177.037436][ T6224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.207194][ T6455] loop3: detected capacity change from 0 to 16 [ 177.215066][ T6455] erofs: Unknown parameter '' [ 177.248325][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 178.283101][ T68] hsr_slave_0: left promiscuous mode [ 178.313124][ T68] hsr_slave_1: left promiscuous mode [ 178.370061][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.745438][ T54] Bluetooth: hci0: command tx timeout [ 178.751011][ T54] Bluetooth: hci1: command tx timeout [ 178.802124][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.937061][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.974407][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.100148][ T68] veth1_macvtap: left promiscuous mode [ 179.105901][ T68] veth0_macvtap: left promiscuous mode [ 179.111565][ T68] veth1_vlan: left promiscuous mode [ 179.117725][ T68] veth0_vlan: left promiscuous mode [ 179.552289][ T6490] netlink: 108 bytes leftover after parsing attributes in process `syz.4.284'. [ 180.795946][ T6502] loop0: detected capacity change from 0 to 16 [ 180.802915][ T6502] erofs: Unknown parameter '' [ 180.814889][ T54] Bluetooth: hci1: command tx timeout [ 181.396526][ T68] team0 (unregistering): Port device team_slave_1 removed [ 181.652776][ T68] team0 (unregistering): Port device team_slave_0 removed [ 183.168248][ T6512] netlink: 212 bytes leftover after parsing attributes in process `syz.0.290'. [ 183.182721][ T6410] chnl_net:caif_netlink_parms(): no params data found [ 183.371997][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.405709][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.412986][ T6397] bridge_slave_0: entered allmulticast mode [ 183.460015][ T6397] bridge_slave_0: entered promiscuous mode [ 183.745656][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.754070][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.762731][ T6397] bridge_slave_1: entered allmulticast mode [ 183.770350][ T6397] bridge_slave_1: entered promiscuous mode [ 184.009627][ T6528] netlink: 108 bytes leftover after parsing attributes in process `syz.4.294'. [ 184.497665][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.533627][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.597762][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.620839][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.644637][ T6410] bridge_slave_0: entered allmulticast mode [ 184.665520][ T6410] bridge_slave_0: entered promiscuous mode [ 184.869643][ T6397] team0: Port device team_slave_0 added [ 184.927196][ T6397] team0: Port device team_slave_1 added [ 184.970280][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.080944][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.242052][ T6410] bridge_slave_1: entered allmulticast mode [ 185.411735][ T6410] bridge_slave_1: entered promiscuous mode [ 185.991430][ T6552] netlink: 104 bytes leftover after parsing attributes in process `syz.3.298'. [ 186.144558][ T5314] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 186.465183][ T5314] usb 1-1: Using ep0 maxpacket: 16 [ 186.601402][ T5314] usb 1-1: config 0 has no interfaces? [ 186.614703][ T5314] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 186.623795][ T5314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.672027][ T5314] usb 1-1: config 0 descriptor?? [ 186.683861][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.688143][ T6556] loop3: detected capacity change from 0 to 1024 [ 186.736633][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.763788][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.827222][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.839831][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.847148][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.873755][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.926060][ T6410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.938215][ T6410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.989785][ T6566] hfsplus: extend alloc file! (8192,512,16777719) [ 188.291924][ T6566] hfsplus: xattr search failed [ 188.469482][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.076489][ T6410] team0: Port device team_slave_0 added [ 189.086319][ T6410] team0: Port device team_slave_1 added [ 189.165185][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.963757][ T6577] netlink: 212 bytes leftover after parsing attributes in process `syz.3.302'. [ 190.007823][ T756] usb 1-1: USB disconnect, device number 3 [ 190.238078][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.295616][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.323329][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.339476][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.362012][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.375436][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.376533][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.383036][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.398028][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.406178][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.528400][ T6589] netlink: 108 bytes leftover after parsing attributes in process `syz.3.304'. [ 190.895715][ T6410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.920038][ T6397] hsr_slave_0: entered promiscuous mode [ 190.927119][ T6397] hsr_slave_1: entered promiscuous mode [ 190.932237][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.952916][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.956599][ T6410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.964119][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 190.978208][ T6410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.983561][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.032332][ T6410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.093365][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.100888][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.108445][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.116051][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.123469][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.131532][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.368498][ T6410] hsr_slave_0: entered promiscuous mode [ 191.385113][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.392572][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.400280][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.408224][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.415720][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.423133][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.430644][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.438153][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.445652][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.446220][ T6410] hsr_slave_1: entered promiscuous mode [ 191.453037][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.453065][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.474582][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.482173][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.489897][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.497478][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.505082][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.512585][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.534885][ T6598] syz.3.307 uses obsolete (PF_INET,SOCK_PACKET) [ 191.652368][ T6598] loop3: detected capacity change from 0 to 2048 [ 191.662272][ T6598] udf: Bad value for 'session' [ 191.761449][ T6598] loop3: detected capacity change from 0 to 256 [ 191.772690][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.780491][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.788301][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.795980][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.803564][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.811266][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.819324][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.826953][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.834526][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.842425][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.850034][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.857632][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.865237][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.872733][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.880316][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.888206][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.896047][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.903583][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.911169][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.918741][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.926370][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.933896][ T25] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 191.979201][ T25] hid-generic 0001:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 192.020642][ T6598] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 192.045618][ T6410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.053235][ T6410] Cannot create hsr debugfs directory [ 192.524787][ T68] bridge_slave_1: left allmulticast mode [ 192.530491][ T68] bridge_slave_1: left promiscuous mode [ 192.561526][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.578511][ T6612] loop0: detected capacity change from 0 to 1024 [ 192.597201][ T68] bridge_slave_0: left allmulticast mode [ 192.614383][ T68] bridge_slave_0: left promiscuous mode [ 192.633554][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.651827][ T68] bridge_slave_1: left allmulticast mode [ 192.688096][ T68] bridge_slave_1: left promiscuous mode [ 192.711938][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.738851][ T68] bridge_slave_0: left allmulticast mode [ 192.809295][ T68] bridge_slave_0: left promiscuous mode [ 192.814512][ T6621] loop3: detected capacity change from 0 to 256 [ 192.840146][ T6621] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x0119abd0, checksum : 0x1119abd0) [ 192.852898][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.869944][ T6621] exFAT-fs (loop3): invalid boot region [ 192.878620][ T6621] exFAT-fs (loop3): failed to recognize exfat type [ 193.185808][ T6626] xt_hashlimit: size too large, truncated to 1048576 [ 194.516872][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.523204][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.519029][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.531083][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.546286][ T68] bond0 (unregistering): Released all slaves [ 196.662019][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.673152][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.685876][ T68] bond0 (unregistering): Released all slaves [ 196.722657][ T6636] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 196.877062][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 196.926100][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 196.958332][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 196.968918][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 196.978920][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.018875][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.030959][ T6655] loop3: detected capacity change from 0 to 256 [ 197.050889][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.090162][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.120608][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.130212][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.147270][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.160984][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.171676][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.190366][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.236443][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.274436][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.307365][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.316926][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.333555][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 197.342382][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.055442][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.063320][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.071082][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.079454][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.087153][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.095167][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.102927][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.110959][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.118505][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.126192][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.134393][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.143418][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.151193][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.158768][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.166308][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.173716][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.183278][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.190907][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.198402][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.205892][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.213314][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.220941][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.236495][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.252639][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.260338][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.267943][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.275429][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.282845][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.290302][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.307593][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.315242][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.322651][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.330296][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.339116][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.347462][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.355301][ T8] hid-generic 0001:0000:0000.0005: unknown main item tag 0x0 [ 198.401207][ T8] hid-generic 0001:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 198.437993][ T756] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.324083][ T756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.335341][ T756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.372586][ T756] usb 1-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 199.393821][ T756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.431252][ T756] usb 1-1: config 0 descriptor?? [ 199.822069][ T6686] loop4: detected capacity change from 0 to 128 [ 199.910612][ T6686] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 199.997606][ T68] hsr_slave_0: left promiscuous mode [ 200.043265][ T68] hsr_slave_1: left promiscuous mode [ 200.072567][ T25] usb 1-1: USB disconnect, device number 4 [ 200.076767][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.090882][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.115641][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.131641][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.195068][ T6698] loop4: detected capacity change from 0 to 256 [ 200.203543][ T68] hsr_slave_0: left promiscuous mode [ 200.244392][ T68] hsr_slave_1: left promiscuous mode [ 200.312780][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.323574][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.347703][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.364163][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.382967][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.393542][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.403529][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.433327][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.434473][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.448408][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.456465][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.463979][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.472783][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 200.657823][ T68] veth1_macvtap: left promiscuous mode [ 200.749111][ T68] veth0_macvtap: left promiscuous mode [ 200.818235][ T68] veth1_vlan: left promiscuous mode [ 200.883562][ T68] veth0_vlan: left promiscuous mode [ 200.968885][ T68] veth1_macvtap: left promiscuous mode [ 201.069749][ T68] veth0_macvtap: left promiscuous mode [ 201.088859][ T68] veth1_vlan: left promiscuous mode [ 201.112359][ T68] veth0_vlan: left promiscuous mode [ 201.224250][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.231912][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.240151][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.249402][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.256965][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.264455][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.271874][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.279333][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.304400][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.311844][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.334462][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.341908][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.373246][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.589659][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.597334][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.608146][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.617195][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.624971][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.632391][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 201.644066][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.412312][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.420327][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.428342][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.436460][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.444850][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.452572][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.460332][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.469065][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.505428][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.512883][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.520484][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.527938][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.535779][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.543180][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.550917][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.558400][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.565850][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.573259][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.580782][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.588336][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.595775][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.603183][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.610676][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.618149][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.625622][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.633016][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.640900][ T8] hid-generic 0001:0000:0000.0007: unknown main item tag 0x0 [ 202.669802][ T8] hid-generic 0001:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 203.025481][ T6725] loop4: detected capacity change from 0 to 256 [ 203.051024][ T6725] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.170215][ T6725] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 203.342764][ T6733] loop4: detected capacity change from 0 to 256 [ 205.890300][ T68] team0 (unregistering): Port device team_slave_1 removed [ 205.995827][ T68] team0 (unregistering): Port device team_slave_0 removed [ 206.095636][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.103084][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.111120][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.119877][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.136840][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.144685][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.152112][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.203247][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.219381][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.234436][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.294105][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.303389][ T6754] netlink: 96 bytes leftover after parsing attributes in process `syz.4.342'. [ 206.314639][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.342650][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.374048][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.396809][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.464515][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.502535][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.526701][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.551237][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.570312][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.596042][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.603485][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.615873][ T6760] loop0: detected capacity change from 0 to 256 [ 206.639556][ T6760] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.659250][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.682584][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.735865][ T6760] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.746649][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.771177][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.798042][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 206.838518][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.047755][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.056673][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.067346][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.074866][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.082302][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.089829][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.097368][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.104886][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.113268][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 207.923918][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.012551][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.020288][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.027996][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.035694][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.044818][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.052498][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.060194][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.068404][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.095483][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.103097][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.110743][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.118407][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.125969][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.138643][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.146363][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.153788][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.161255][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.169270][ T8] hid-generic 0001:0000:0000.0008: unknown main item tag 0x0 [ 208.253872][ T8] hid-generic 0001:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 208.562694][ T6771] loop4: detected capacity change from 0 to 2048 [ 208.865887][ T6771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.669533][ T6779] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 211.343059][ T68] team0 (unregistering): Port device team_slave_1 removed [ 211.454782][ T68] team0 (unregistering): Port device team_slave_0 removed [ 211.680048][ T6797] loop3: detected capacity change from 0 to 1024 [ 211.750897][ T29] audit: type=1800 audit(1729239717.467:58): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.356" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 211.863644][ T3433] hfsplus: b-tree write err: -5, ino 4 [ 211.940524][ T6800] loop3: detected capacity change from 0 to 256 [ 211.984501][ T6800] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x0119abd0, checksum : 0x1119abd0) [ 211.995025][ T6800] exFAT-fs (loop3): invalid boot region [ 212.000604][ T6800] exFAT-fs (loop3): failed to recognize exfat type [ 212.287629][ T6802] xt_hashlimit: size too large, truncated to 1048576 [ 214.052149][ T6397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 214.090062][ T6397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 214.165662][ T6397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 214.255111][ T6397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.289957][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.333836][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.366151][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.412622][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.483281][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.541549][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.621281][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.674167][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.753005][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.797144][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.852167][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.945862][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 214.991876][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.022735][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.056960][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.092267][ T6410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 215.102442][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.137507][ T6410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 215.160583][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.202080][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.226885][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.251586][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.280010][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.296903][ T6410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 215.422333][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.443735][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.453035][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.456671][ T6410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 215.467401][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.475849][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.483423][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.491128][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.499441][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.511774][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.519977][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.562818][ T6819] Driver unsupported XDP return value 0 on prog (id 122) dev N/A, expect packet loss! [ 215.653796][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.661019][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.678290][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.737470][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.807894][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 215.920999][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.928193][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.964604][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.035258][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.096311][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.111248][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.120679][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.192868][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.201258][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.209151][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.234636][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.242253][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.352685][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.394887][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.402349][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.493089][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 216.568488][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.307164][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.314791][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.322456][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.330164][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.337728][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.361075][ T6410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.384578][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.392057][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.439418][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.447946][ T6410] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.481410][ T756] hid-generic 0001:0000:0000.0009: unknown main item tag 0x0 [ 217.527045][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.534160][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.548929][ T756] hid-generic 0001:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 217.564861][ T6833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.361'. [ 217.620507][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.627717][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.929188][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.067939][ T6842] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 218.084493][ T6397] veth0_vlan: entered promiscuous mode [ 218.096437][ T6397] veth1_vlan: entered promiscuous mode [ 218.129916][ T6397] veth0_macvtap: entered promiscuous mode [ 218.143735][ T6397] veth1_macvtap: entered promiscuous mode [ 218.158747][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.169657][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.179989][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.190582][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.200508][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.211008][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.222306][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.333577][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.353302][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.363442][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.384548][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.417680][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.444761][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.475314][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.508614][ T6397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.538893][ T6397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.564467][ T6397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.573231][ T6397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.716492][ T6410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.865830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.879515][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.929209][ T6410] veth0_vlan: entered promiscuous mode [ 218.961632][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.991871][ T6410] veth1_vlan: entered promiscuous mode [ 218.998261][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.083743][ T6410] veth0_macvtap: entered promiscuous mode [ 219.133769][ T6410] veth1_macvtap: entered promiscuous mode [ 219.206903][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.241867][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.264367][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.293238][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.321009][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.344345][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.364446][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.384392][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.425717][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.466821][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.506576][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.535145][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.574491][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.608571][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.757208][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.820392][ T6410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.858925][ T6410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.895057][ T6410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.945469][ T6879] loop4: detected capacity change from 0 to 2048 [ 219.978764][ T6410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.009374][ T6879] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 220.022032][ T6410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.041661][ T6410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.053964][ T6879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.067089][ T6410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.271154][ T6885] loop0: detected capacity change from 0 to 1024 [ 220.380382][ T6885] EXT4-fs: Mount option(s) incompatible with ext3 [ 221.105908][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.113776][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.201042][ T5243] UDF-fs: warning (device loop4): udf_evict_inode: Inode 1367 (mode 120777) has inode size 4 different from extent length 512. Filesystem need not be standards compliant. [ 221.317326][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.325267][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.835880][ T6907] tmpfs: Unknown parameter 'Üå`n' [ 222.414952][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.453804][ T6909] batadv_slave_0: entered promiscuous mode [ 222.474202][ T6909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.445000][ T5283] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 223.596895][ T5283] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 223.606370][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.640614][ T5283] usb 2-1: config 0 descriptor?? [ 224.415942][ T6968] netlink: 'syz.0.374': attribute type 1 has an invalid length. [ 225.058385][ T6978] loop4: detected capacity change from 0 to 1024 [ 225.095286][ T6978] EXT4-fs: Ignoring removed orlov option [ 225.100989][ T6978] EXT4-fs: Ignoring removed nobh option [ 225.134146][ T6978] ext4: Bad value for 'max_batch_time' [ 225.225760][ T6978] loop4: detected capacity change from 0 to 1024 [ 225.275505][ T6978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.467817][ T5283] usb 2-1: Cannot set autoneg [ 225.495678][ T5283] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 225.566588][ T5283] usb 2-1: USB disconnect, device number 7 [ 225.891745][ T68] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 225.913965][ T68] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 225.927110][ T68] EXT4-fs (loop4): This should not happen!! Data will be lost [ 225.927110][ T68] [ 225.938535][ T68] EXT4-fs (loop4): Total free blocks count 0 [ 225.945033][ T68] EXT4-fs (loop4): Free/Dirty block details [ 225.951380][ T68] EXT4-fs (loop4): free_blocks=68451041280 [ 225.957662][ T68] EXT4-fs (loop4): dirty_blocks=5456 [ 225.963682][ T68] EXT4-fs (loop4): Block reservation details [ 225.979584][ T68] EXT4-fs (loop4): i_reserved_data_blocks=341 [ 226.037697][ T3433] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 227.110900][ T7004] loop4: detected capacity change from 0 to 1024 [ 227.122431][ T7004] hfsplus: Bad value for 'session' [ 227.211186][ T7006] tmpfs: Unknown parameter 'Üå`n' [ 229.047808][ T4630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.096831][ T4630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.105603][ T4630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.114458][ T4630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.122127][ T4630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.129614][ T4630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.299970][ T7029] loop1: detected capacity change from 0 to 1024 [ 229.324381][ T7029] EXT4-fs: Ignoring removed orlov option [ 229.330078][ T7029] EXT4-fs: Ignoring removed nobh option [ 229.330517][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.345187][ T7030] netlink: 'syz.4.385': attribute type 1 has an invalid length. [ 229.360891][ T7029] ext4: Bad value for 'max_batch_time' [ 229.481684][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.485023][ T7029] loop1: detected capacity change from 0 to 1024 [ 229.553570][ T7029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.788714][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.811380][ T52] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 229.854136][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1364 with error 28 [ 229.896536][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 229.896536][ T52] [ 229.913433][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 229.917874][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.919898][ T52] EXT4-fs (loop1): Free/Dirty block details [ 229.936203][ T52] EXT4-fs (loop1): free_blocks=68451041280 [ 229.942050][ T52] EXT4-fs (loop1): dirty_blocks=1376 [ 229.949001][ T52] EXT4-fs (loop1): Block reservation details [ 229.955411][ T52] EXT4-fs (loop1): i_reserved_data_blocks=86 [ 229.967850][ T7022] chnl_net:caif_netlink_parms(): no params data found [ 230.035744][ T6397] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.267201][ T7022] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.286508][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.310701][ T7022] bridge_slave_0: entered allmulticast mode [ 230.341745][ T7022] bridge_slave_0: entered promiscuous mode [ 230.360400][ T7022] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.367644][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.375541][ T7022] bridge_slave_1: entered allmulticast mode [ 230.382570][ T7022] bridge_slave_1: entered promiscuous mode [ 231.174193][ T12] bridge_slave_1: left allmulticast mode [ 231.184595][ T12] bridge_slave_1: left promiscuous mode [ 231.190459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.214877][ T4630] Bluetooth: hci4: command tx timeout [ 231.296802][ T12] bridge_slave_0: left allmulticast mode [ 231.394518][ T12] bridge_slave_0: left promiscuous mode [ 231.404964][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.625901][ T7059] tmpfs: Unknown parameter 'Üå`n' [ 232.633888][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.671599][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.714988][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.793452][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.874230][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.882881][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 233.325682][ T4630] Bluetooth: hci4: command tx timeout [ 233.918044][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.940957][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.952397][ T12] bond0 (unregistering): Released all slaves [ 233.971437][ T7022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.995978][ T7022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.331430][ T7022] team0: Port device team_slave_0 added [ 234.348038][ T7022] team0: Port device team_slave_1 added [ 234.432340][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.461085][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.495909][ T7022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.530554][ T7022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.537793][ T7022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.573443][ T7022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.868056][ T12] hsr_slave_0: left promiscuous mode [ 234.881139][ T12] hsr_slave_1: left promiscuous mode [ 234.901877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.918904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.939318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.957848][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.974458][ T4630] Bluetooth: hci5: command tx timeout [ 235.058368][ T12] veth1_macvtap: left promiscuous mode [ 235.100805][ T12] veth0_macvtap: left promiscuous mode [ 235.114593][ T12] veth1_vlan: left promiscuous mode [ 235.119963][ T12] veth0_vlan: left promiscuous mode [ 235.375943][ T4630] Bluetooth: hci4: command tx timeout [ 236.214095][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.290800][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.361482][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 236.493263][ T7107] loop1: detected capacity change from 0 to 8 [ 236.560663][ T7107] SQUASHFS error: lzo decompression failed, data probably corrupt [ 236.569213][ T7107] SQUASHFS error: Failed to read block 0x91: -5 [ 236.575797][ T7107] SQUASHFS error: Unable to read metadata cache entry [8f] [ 236.583141][ T7107] SQUASHFS error: Unable to read inode 0x11f [ 236.677812][ T29] audit: type=1326 audit(1729239742.327:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7104 comm="syz.1.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feaf877dff9 code=0x0 [ 237.054485][ T4630] Bluetooth: hci5: command tx timeout [ 237.184432][ T8] usb 5-1: device descriptor read/64, error -71 [ 237.425529][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 237.454390][ T4630] Bluetooth: hci4: command tx timeout [ 237.757772][ T7022] hsr_slave_0: entered promiscuous mode [ 237.847204][ T7022] hsr_slave_1: entered promiscuous mode [ 237.896981][ T7022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.941089][ T7022] Cannot create hsr debugfs directory [ 238.288931][ T8] usb 5-1: device descriptor read/64, error -71 [ 238.424555][ T8] usb usb5-port1: attempt power cycle [ 239.134556][ T4630] Bluetooth: hci5: command tx timeout [ 239.310905][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.773126][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.073599][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.551674][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.224568][ T12] bridge_slave_1: left allmulticast mode [ 241.230284][ T12] bridge_slave_1: left promiscuous mode [ 241.244532][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.264440][ T4630] Bluetooth: hci5: command tx timeout [ 241.360468][ T12] bridge_slave_0: left allmulticast mode [ 241.424459][ T12] bridge_slave_0: left promiscuous mode [ 241.430239][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.825099][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 245.754856][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.835869][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.976999][ T12] bond0 (unregistering): Released all slaves [ 247.194557][ T8] usb 5-1: device descriptor read/8, error -110 [ 247.954394][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 248.054428][ T8] usb 5-1: device descriptor read/8, error -32 [ 248.174752][ T8] usb usb5-port1: unable to enumerate USB device [ 250.304624][ T12] hsr_slave_0: left promiscuous mode [ 250.532091][ T12] hsr_slave_1: left promiscuous mode [ 250.685071][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.692543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.065234][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.072930][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.290906][ T12] veth1_macvtap: left promiscuous mode [ 251.344533][ T12] veth0_macvtap: left promiscuous mode [ 251.385293][ T12] veth1_vlan: left promiscuous mode [ 251.390676][ T12] veth0_vlan: left promiscuous mode [ 255.964756][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.971104][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.165126][ T5438] ================================================================== [ 258.173232][ T5438] BUG: KASAN: slab-use-after-free in bpf_trace_run2+0xfa/0x540 [ 258.180814][ T5438] Read of size 8 at addr ffff88802cbcf218 by task udevd/5438 [ 258.188186][ T5438] [ 258.190522][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: udevd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 258.200250][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.210320][ T5438] Call Trace: [ 258.213606][ T5438] [ 258.216548][ T5438] dump_stack_lvl+0x241/0x360 [ 258.221230][ T5438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.226430][ T5438] ? __pfx__printk+0x10/0x10 [ 258.231031][ T5438] ? _printk+0xd5/0x120 [ 258.235209][ T5438] ? __virt_addr_valid+0x183/0x530 [ 258.240339][ T5438] ? __virt_addr_valid+0x183/0x530 [ 258.245467][ T5438] print_report+0x169/0x550 [ 258.249997][ T5438] ? __virt_addr_valid+0x183/0x530 [ 258.255115][ T5438] ? __virt_addr_valid+0x183/0x530 [ 258.260229][ T5438] ? __virt_addr_valid+0x45f/0x530 [ 258.265345][ T5438] ? __phys_addr+0xba/0x170 [ 258.269858][ T5438] ? bpf_trace_run2+0xfa/0x540 [ 258.274643][ T5438] kasan_report+0x143/0x180 [ 258.279180][ T5438] ? bpf_trace_run2+0xfa/0x540 [ 258.283949][ T5438] bpf_trace_run2+0xfa/0x540 [ 258.288542][ T5438] ? __pfx_lock_release+0x10/0x10 [ 258.293566][ T5438] ? __pfx_bpf_trace_run2+0x10/0x10 [ 258.298776][ T5438] ? __might_fault+0xc6/0x120 [ 258.303457][ T5438] ? trace_sys_enter+0x9d/0x150 [ 258.308326][ T5438] __bpf_trace_sys_enter+0x38/0x60 [ 258.313458][ T5438] trace_sys_enter+0xd9/0x150 [ 258.318144][ T5438] syscall_trace_enter+0xf8/0x150 [ 258.323178][ T5438] do_syscall_64+0xcc/0x230 [ 258.327694][ T5438] ? clear_bhb_loop+0x35/0x90 [ 258.332376][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.338286][ T5438] RIP: 0033:0x7f5036316b6a [ 258.342711][ T5438] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 258.362335][ T5438] RSP: 002b:00007fff72d3b9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.370778][ T5438] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5036316b6a [ 258.378759][ T5438] RDX: 0000000000000080 RSI: 00007fff72d3bab8 RDI: 0000000000000003 [ 258.386746][ T5438] RBP: 00007fff72d3ba08 R08: 0000000000000007 R09: c91275edc584bb9a [ 258.394737][ T5438] R10: 00000000ffffffff R11: 0000000000000246 R12: 000055f4d1416e30 [ 258.402718][ T5438] R13: 00007fff72d3ba08 R14: 0000000000000001 R15: 000055f4d13e7910 [ 258.410708][ T5438] [ 258.413740][ T5438] [ 258.416060][ T5438] Allocated by task 7114: [ 258.420381][ T5438] kasan_save_track+0x3f/0x80 [ 258.425067][ T5438] __kasan_kmalloc+0x98/0xb0 [ 258.429664][ T5438] __kmalloc_cache_noprof+0x243/0x390 [ 258.435044][ T5438] bpf_raw_tp_link_attach+0x2a0/0x6e0 [ 258.440421][ T5438] bpf_raw_tracepoint_open+0x177/0x1f0 [ 258.445887][ T5438] __sys_bpf+0x3c0/0x810 [ 258.450139][ T5438] __x64_sys_bpf+0x7c/0x90 [ 258.454560][ T5438] do_syscall_64+0xf3/0x230 [ 258.459067][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.464972][ T5438] [ 258.467300][ T5438] Freed by task 7116: [ 258.471278][ T5438] kasan_save_track+0x3f/0x80 [ 258.475964][ T5438] kasan_save_free_info+0x40/0x50 [ 258.481003][ T5438] __kasan_slab_free+0x59/0x70 [ 258.485781][ T5438] kfree+0x1a0/0x460 [ 258.489694][ T5438] rcu_core+0xaaa/0x17a0 [ 258.493950][ T5438] handle_softirqs+0x2c5/0x980 [ 258.498730][ T5438] __irq_exit_rcu+0xf4/0x1c0 [ 258.503334][ T5438] irq_exit_rcu+0x9/0x30 [ 258.507591][ T5438] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 258.513231][ T5438] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.519228][ T5438] [ 258.521574][ T5438] Last potentially related work creation: [ 258.527289][ T5438] kasan_save_stack+0x3f/0x60 [ 258.531982][ T5438] __kasan_record_aux_stack+0xac/0xc0 [ 258.537374][ T5438] call_rcu+0x167/0xa70 [ 258.541541][ T5438] bpf_link_release+0x78/0x90 [ 258.546232][ T5438] __fput+0x23c/0xa50 [ 258.550218][ T5438] task_work_run+0x24f/0x310 [ 258.554816][ T5438] get_signal+0x15e8/0x1740 [ 258.559337][ T5438] arch_do_signal_or_restart+0x96/0x860 [ 258.564897][ T5438] syscall_exit_to_user_mode+0xc9/0x370 [ 258.570456][ T5438] do_syscall_64+0x100/0x230 [ 258.575054][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.580955][ T5438] [ 258.583278][ T5438] The buggy address belongs to the object at ffff88802cbcf200 [ 258.583278][ T5438] which belongs to the cache kmalloc-128 of size 128 [ 258.597338][ T5438] The buggy address is located 24 bytes inside of [ 258.597338][ T5438] freed 128-byte region [ffff88802cbcf200, ffff88802cbcf280) [ 258.611062][ T5438] [ 258.613385][ T5438] The buggy address belongs to the physical page: [ 258.619804][ T5438] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2cbcf [ 258.628575][ T5438] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 258.636048][ T5438] page_type: f5(slab) [ 258.640035][ T5438] raw: 00fff00000000000 ffff88801ac41a00 ffffea00017f37c0 dead000000000003 [ 258.648632][ T5438] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000 [ 258.657214][ T5438] page dumped because: kasan: bad access detected [ 258.663641][ T5438] page_owner tracks the page as allocated [ 258.669362][ T5438] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 3819, tgid 3819 (kworker/u8:9), ts 56121410804, free_ts 56109816767 [ 258.688656][ T5438] post_alloc_hook+0x1f3/0x230 [ 258.693433][ T5438] get_page_from_freelist+0x3123/0x3270 [ 258.698992][ T5438] __alloc_pages_noprof+0x292/0x710 [ 258.704203][ T5438] alloc_pages_mpol_noprof+0x3e8/0x680 [ 258.709672][ T5438] alloc_slab_page+0x6a/0x120 SYZFAIL: failed to send rpc fd=3 want=5808 sent=0 n=-1 (errno 32: Broken pipe) [ 258.714354][ T5438] allocate_slab+0x5a/0x2f0 [ 258.718870][ T5438] ___slab_alloc+0xcd1/0x14b0 [ 258.723558][ T5438] __slab_alloc+0x58/0xa0 [ 258.727903][ T5438] __kmalloc_cache_noprof+0x27b/0x390 [ 258.733292][ T5438] __hw_addr_add_ex+0x1a8/0x610 [ 258.738154][ T5438] dev_mc_add+0xa3/0x110 [ 258.742406][ T5438] igmp6_group_added+0x1a4/0x710 [ 258.747354][ T5438] __ipv6_dev_mc_inc+0x8bf/0xaa0 [ 258.752305][ T5438] addrconf_dad_work+0x448/0x16f0 [ 258.757522][ T5438] process_scheduled_works+0xa63/0x1850 [ 258.763079][ T5438] worker_thread+0x870/0xd30 [ 258.767680][ T5438] page last free pid 5290 tgid 5290 stack trace: [ 258.774008][ T5438] free_unref_folios+0xf12/0x18d0 [ 258.779053][ T5438] folios_put_refs+0x76c/0x860 [ 258.783842][ T5438] free_pages_and_swap_cache+0x5c8/0x690 [ 258.789504][ T5438] tlb_flush_mmu+0x3a3/0x680 [ 258.794138][ T5438] tlb_finish_mmu+0xd4/0x200 [ 258.798754][ T5438] exit_mmap+0x496/0xc40 [ 258.803022][ T5438] __mmput+0x115/0x390 [ 258.807117][ T5438] exit_mm+0x220/0x310 [ 258.811206][ T5438] do_exit+0x9b2/0x28e0 [ 258.813025][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.815361][ T5438] do_group_exit+0x207/0x2c0 [ 258.815383][ T5438] __x64_sys_exit_group+0x3f/0x40 [ 258.815398][ T5438] x64_sys_call+0x2634/0x2640 [ 258.815419][ T5438] do_syscall_64+0xf3/0x230 [ 258.815434][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.815451][ T5438] [ 258.815455][ T5438] Memory state around the buggy address: [ 258.815465][ T5438] ffff88802cbcf100: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 258.815477][ T5438] ffff88802cbcf180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.815496][ T5438] >ffff88802cbcf200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 258.824974][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.827085][ T5438] ^ [ 258.827098][ T5438] ffff88802cbcf280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 258.833032][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.836747][ T5438] ffff88802cbcf300: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 258.836757][ T5438] ================================================================== [ 258.837895][ T5438] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 258.837909][ T5438] CPU: 1 UID: 0 PID: 5438 Comm: udevd Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 258.837930][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.837942][ T5438] Call Trace: [ 258.837949][ T5438] [ 258.837955][ T5438] dump_stack_lvl+0x241/0x360 [ 258.837978][ T5438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.837995][ T5438] ? __pfx__printk+0x10/0x10 [ 258.838021][ T5438] ? vscnprintf+0x5d/0x90 [ 258.838041][ T5438] panic+0x349/0x880 [ 258.838063][ T5438] ? check_panic_on_warn+0x21/0xb0 [ 258.838082][ T5438] ? __pfx_panic+0x10/0x10 [ 258.838106][ T5438] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 258.838130][ T5438] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 258.838152][ T5438] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.838175][ T5438] ? print_report+0x502/0x550 [ 258.838197][ T5438] check_panic_on_warn+0x86/0xb0 [ 258.838215][ T5438] ? bpf_trace_run2+0xfa/0x540 [ 258.838235][ T5438] end_report+0x77/0x160 [ 258.838253][ T5438] kasan_report+0x154/0x180 [ 258.838274][ T5438] ? bpf_trace_run2+0xfa/0x540 [ 258.838296][ T5438] bpf_trace_run2+0xfa/0x540 [ 258.838316][ T5438] ? __pfx_lock_release+0x10/0x10 [ 258.838333][ T5438] ? __pfx_bpf_trace_run2+0x10/0x10 [ 258.838354][ T5438] ? __might_fault+0xc6/0x120 [ 258.838371][ T5438] ? trace_sys_enter+0x9d/0x150 [ 258.838388][ T5438] __bpf_trace_sys_enter+0x38/0x60 [ 258.838404][ T5438] trace_sys_enter+0xd9/0x150 [ 258.838421][ T5438] syscall_trace_enter+0xf8/0x150 [ 258.838438][ T5438] do_syscall_64+0xcc/0x230 [ 258.838454][ T5438] ? clear_bhb_loop+0x35/0x90 [ 258.838473][ T5438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.838497][ T5438] RIP: 0033:0x7f5036316b6a [ 258.838514][ T5438] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 258.838528][ T5438] RSP: 002b:00007fff72d3b9c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.838548][ T5438] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5036316b6a [ 258.838561][ T5438] RDX: 0000000000000080 RSI: 00007fff72d3bab8 RDI: 0000000000000003 [ 258.838574][ T5438] RBP: 00007fff72d3ba08 R08: 0000000000000007 R09: c91275edc584bb9a [ 258.838586][ T5438] R10: 00000000ffffffff R11: 0000000000000246 R12: 000055f4d1416e30 [ 258.838599][ T5438] R13: 00007fff72d3ba08 R14: 0000000000000001 R15: 000055f4d13e7910 [ 258.838617][ T5438] [ 258.841600][ T5438] Kernel Offset: disabled