last executing test programs: 23m14.825170603s ago: executing program 2 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x13, 0x1, {0x80000003, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0) 23m14.600859436s ago: executing program 2 (id=1023): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x0, 'syz0\x00', 0xfffffffe}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) syz_open_procfs$namespace(0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23m13.864008856s ago: executing program 2 (id=1026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000080)={0x0, "bc4c4244873398a4dbaf40fcee141d15bb69638f747e05bea3129ab81b02447352b404f793053d889e68b293719907746b342a8c2048fa4cda276a840c397fcd"}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x30925) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 23m12.84934814s ago: executing program 2 (id=1028): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000280), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 23m11.765573505s ago: executing program 2 (id=1030): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000000c00ebffffff0100020000", @ANYRES32=0x0], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) 23m9.029118142s ago: executing program 2 (id=1036): setitimer(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfffffd93, 0x8d0, &(0x7f0000000300)={0xa, 0x4e23, 0x6, @remote, 0x2}, 0x1b) 23m8.536598219s ago: executing program 32 (id=1036): setitimer(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfffffd93, 0x8d0, &(0x7f0000000300)={0xa, 0x4e23, 0x6, @remote, 0x2}, 0x1b) 4m8.965150066s ago: executing program 4 (id=3371): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x5437, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x0, 0x0}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m8.945711367s ago: executing program 4 (id=3376): r0 = socket(0x1e, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008880) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) 4m2.291705015s ago: executing program 4 (id=3390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 4m1.000744234s ago: executing program 4 (id=3392): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x80, 0x1e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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") 3m59.181253902s ago: executing program 4 (id=3395): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m57.837218151s ago: executing program 4 (id=3396): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x20000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3m42.604444567s ago: executing program 33 (id=3396): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x20000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 11.965275673s ago: executing program 5 (id=3948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 10.703845312s ago: executing program 5 (id=3952): syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x28, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2702}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) 7.915606153s ago: executing program 1 (id=3955): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 7.300363252s ago: executing program 5 (id=3957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000d7c9000009000000010000", @ANYBLOB="0000000000000000000000006825e802c2d4e6a3a575f83b068d6ca6bb082db5fd2d01e1ea796c04655850902c430ce053d59ac8457b3f115927ef0a9feeb242a9c6588297c3b818b222beca8c2ab6f9c5a9c3afb6a0e6ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 7.214342853s ago: executing program 1 (id=3959): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 7.196134454s ago: executing program 3 (id=3960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) 7.035190126s ago: executing program 3 (id=3961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0000000000020000000000000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500), 0x0, 0x88, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0xac, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 6.928391548s ago: executing program 3 (id=3963): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, 0x0) recvmsg(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendmmsg$unix(r4, &(0x7f0000001040)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000019c0)={r6, 0x58, &(0x7f0000000200)}, 0x10) r7 = gettid() tkill(r7, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000b000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.201150678s ago: executing program 0 (id=3964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.196926708s ago: executing program 3 (id=3965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 3.917198733s ago: executing program 1 (id=3966): syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x28, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2702}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r8, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) 3.916786392s ago: executing program 3 (id=3967): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90a"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 3.824466064s ago: executing program 0 (id=3968): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x2000}, 0x4) 3.811145114s ago: executing program 5 (id=3969): syz_pidfd_open(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x401c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x20, 0x12, 0x101, 0x20000000, 0x0, {0x7, 0x0, 0x0, 0x0, 0x4140}}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001700)={0x48, r2, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}]}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x2702}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r10, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 3.583427828s ago: executing program 0 (id=3970): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x2, &(0x7f0000000080)=[{0x7}, {0x4, 0x0, 0x4, 0x3}]}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406000105240000000d240f01"], 0x0) 2.699533211s ago: executing program 1 (id=3971): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) 2.533102963s ago: executing program 1 (id=3972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x2b1e}, 0x2000c000) recvmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000002600)=[{0x0}, {&(0x7f00000022c0)=""/19, 0x13}], 0x2}, 0x795}], 0x5, 0x22, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 2.276116987s ago: executing program 0 (id=3973): syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.37333265s ago: executing program 1 (id=3974): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) r6 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 1.237060632s ago: executing program 3 (id=3975): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='uid_map\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000040)={0x20080522, r3}, &(0x7f0000002100)) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_emit_ethernet(0x86, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xff], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x4c00}, [@common=@inet=@ecn={{0x28}, {0x20, 0x20, 0x1, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x0, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x74, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x0, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "bbc238f0b455"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x5, 0x1, 0xee}, {0x6, 0x24, 0x1a, 0x5, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0xaf, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xbf, 0x9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xd, 0x4, 0x6}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x6f, 0x7, 0x40, 0x2}, 0x1ab, &(0x7f00000001c0)={0x5, 0xf, 0x1ab, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf1, "a5ecb561619e56f547b22d0e6b989ded"}, @generic={0xc9, 0x10, 0x1, "86500a8250b3871d5e81d1b87e85f6de4b9d3b4adb448d01e7b7688ddc1f580461ca653a9f53bd43333e74c82b3d879cf6a624b25f7cb0bb2e8ded490e0fba643e9cc23f5d2427dba616d43a6741ba9b9749a7be55e3ea6116057d5633addad09fc4c94344ea6b3b013ad2b86e87577e35155b99eaee568213c05d3ef17b54300bb26a504e34e8ff9cb9513189e035ebe1e1f0ae5e40eb4e0e7fce1a8dfd442435c7afd6dee3d918c6144c7f1242aeac4b23fed7536201ced37a3d0b00"/198}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5ed5fd1833f21485e9d9b0215db394d5"}, @ptm_cap={0x3}, @generic={0xab, 0x10, 0x4, "2be86f92fd7b681554130d87a7dbdc87c2b7b4b2c1c35c5d49683b4a707f884bff9311dc4719ee1753c226d3019d86680ff7a585387bcb5a3a5622b663cef300d9ed1f76b3a506d6280c7ce9df037bd5d997cddebd28f7e1274d4dc56b754ba6907019cfaf8ef71c2654af4cc1d8d250252e6e1357fb205c1890fb499ca87477b2a2035340fb748daa92f6ccfe65897e41f5b4020a016a061293d48dadc438769d9f46a9b54562af"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x3, 0x5}]}, 0x1, [{0x75, &(0x7f0000000400)=@string={0x75, 0x3, "f6efc461b779b058de2fc8cccadcb329a4cdfa51138090e894c31d9f2b6bd037ed836f0b6690f6e7d669f2b7d6c29c304c9aeadd0679ac2d3383bea3c06533cb32f9f44b019840b512b3cc6868b72e6b1b2fe00ebde4c9c22882b1c9d463af0c91940e7c41061e350ecf3442ad06a3b767dbf0"}}]}) 1.094569244s ago: executing program 0 (id=3976): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4}, 0x50) close(r3) 830.906498ms ago: executing program 0 (id=3977): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000d7c9000009000000010000", @ANYBLOB="0000000000000000000000006825e802c2d4e6a3a575f83b068d6ca6bb082db5fd2d01e1ea796c04655850902c430ce053d59ac8457b3f115927ef0a9feeb242a9c6588297c3b818b222beca8c2ab6f9c5a9c3afb6a0e6ed", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0) 584.205122ms ago: executing program 5 (id=3978): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x10c00, &(0x7f0000000100)=ANY=[], 0x3, 0x150f, &(0x7f0000000780)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) 0s ago: executing program 5 (id=3979): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) kernel console output (not intermixed with test programs): 9 using dummy_hcd [ 1129.123271][T11065] usb 4-1: Using ep0 maxpacket: 32 [ 1129.143795][T11065] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1129.151867][T11065] usb 4-1: config 0 has no interface number 0 [ 1129.183304][T11065] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1129.206035][T11065] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1129.233330][T11065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.262981][T11065] usb 4-1: Product: syz [ 1129.282411][T11065] usb 4-1: Manufacturer: syz [ 1129.301958][T11065] usb 4-1: SerialNumber: syz [ 1129.334657][T11065] usb 4-1: config 0 descriptor?? [ 1130.219899][T11065] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1130.288019][T11065] usb 4-1: USB disconnect, device number 79 [ 1130.484256][T14552] udevd[14552]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1130.667226][ T28] audit: type=1326 audit(1751867037.611:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7fc00000 [ 1130.727356][ T28] audit: type=1326 audit(1751867037.671:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7fc00000 [ 1132.043251][ T28] audit: type=1326 audit(1751867038.951:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14554 comm="syz.1.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7fc00000 [ 1132.744615][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 1134.033866][T11049] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1134.255005][T11049] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1134.295848][T11049] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1134.469920][T11049] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1134.754429][T11049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1134.813224][T11049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1134.865865][T11049] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1134.933332][T11049] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1134.941407][T11049] usb 2-1: Product: syz [ 1134.971580][T11049] usb 2-1: Manufacturer: syz [ 1134.984606][T11049] cdc_wdm 2-1:1.0: skipping garbage [ 1134.993389][T11049] cdc_wdm 2-1:1.0: skipping garbage [ 1135.017768][T11049] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1135.027822][T11049] cdc_wdm 2-1:1.0: Unknown control protocol [ 1135.260827][T14567] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1135.370247][T14577] syz.0.2488[14577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.370389][T14577] syz.0.2488[14577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1135.504057][ T5776] usb 2-1: USB disconnect, device number 35 [ 1139.055846][T14616] loop1: detected capacity change from 0 to 256 [ 1139.094336][T14616] exfat: Deprecated parameter 'utf8' [ 1139.101145][T14616] exfat: Deprecated parameter 'utf8' [ 1139.116313][T14616] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x0619abd0, checksum : 0x1119abd0) [ 1139.158483][T14616] exFAT-fs (loop1): invalid boot region [ 1139.177880][T14616] exFAT-fs (loop1): failed to recognize exfat type [ 1139.230921][ T28] audit: type=1326 audit(1751867046.171:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1139.300799][ T28] audit: type=1326 audit(1751867046.241:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1139.333335][T14552] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1139.517857][ T28] audit: type=1326 audit(1751867046.461:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1139.978264][ T28] audit: type=1326 audit(1751867046.541:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1140.126724][ T28] audit: type=1326 audit(1751867046.601:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1140.210721][ T28] audit: type=1326 audit(1751867046.651:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1140.283281][ T28] audit: type=1326 audit(1751867046.711:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1140.323335][ T28] audit: type=1326 audit(1751867046.771:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14617 comm="syz.3.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f053158e929 code=0x7fc00000 [ 1140.525863][T14629] wireguard0: entered promiscuous mode [ 1140.542163][T14629] wireguard0: entered allmulticast mode [ 1140.548010][ T5776] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1140.574087][T14628] syz.3.2501[14628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.574226][T14628] syz.3.2501[14628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1140.593321][T14628] loop3: detected capacity change from 0 to 256 [ 1140.613293][T14628] exfat: Deprecated parameter 'utf8' [ 1140.618667][T14628] exfat: Deprecated parameter 'utf8' [ 1140.668463][T14628] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 1141.624739][ T5776] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1141.644231][ T5776] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1141.677373][ T5776] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1141.686966][ T5776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1141.721577][ T5776] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1141.767710][ T5776] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1141.798040][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1141.808181][ T5776] usb 2-1: Product: syz [ 1141.814825][ T5776] usb 2-1: Manufacturer: syz [ 1141.845957][ T5776] cdc_wdm 2-1:1.0: skipping garbage [ 1141.864566][ T5776] cdc_wdm 2-1:1.0: skipping garbage [ 1141.888519][ T5776] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1141.899832][ T5776] cdc_wdm 2-1:1.0: Unknown control protocol [ 1142.156124][T14649] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1142.744948][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1142.751643][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1142.764020][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1142.770684][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1142.771399][ T23] usb 2-1: USB disconnect, device number 36 [ 1142.776767][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1142.795570][T14654] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 1144.912132][T14671] syz.4.2513[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1144.912284][T14671] syz.4.2513[14671] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1147.442222][T14677] wireguard0: entered promiscuous mode [ 1147.482089][T14677] wireguard0: entered allmulticast mode [ 1150.680297][T14693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2519'. [ 1151.095592][T14714] syz.0.2525[14714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1151.095737][T14714] syz.0.2525[14714] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1154.005403][ T23] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1154.500678][T14730] wireguard0: entered promiscuous mode [ 1154.533477][T14730] wireguard0: entered allmulticast mode [ 1156.033477][T11065] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1157.203288][T11065] usb 4-1: Using ep0 maxpacket: 32 [ 1157.533454][T11065] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1157.541530][T11065] usb 4-1: config 0 has no interface number 0 [ 1157.582573][T11065] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1157.607489][T11065] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1157.637769][T11065] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.664933][T11065] usb 4-1: Product: syz [ 1157.677151][T11065] usb 4-1: Manufacturer: syz [ 1157.689742][T11065] usb 4-1: SerialNumber: syz [ 1157.705198][T11065] usb 4-1: config 0 descriptor?? [ 1157.853487][T11049] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1157.940115][T11065] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1158.081669][T11049] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1158.103218][T11049] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1158.133232][T11049] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1158.142297][T11049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1158.193519][T11049] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1158.237727][T11065] usb 4-1: USB disconnect, device number 81 [ 1158.249797][T11049] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1158.287685][T11049] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1158.303544][T11049] usb 2-1: Product: syz [ 1158.307777][T11049] usb 2-1: Manufacturer: syz [ 1158.364538][T11049] cdc_wdm 2-1:1.0: skipping garbage [ 1158.369834][T11049] cdc_wdm 2-1:1.0: skipping garbage [ 1158.405675][T14767] udevd[14767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.439479][T11049] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1158.451052][T11049] cdc_wdm 2-1:1.0: Unknown control protocol [ 1158.565071][T14760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1158.664374][T11049] usb 2-1: USB disconnect, device number 37 [ 1161.291102][T14783] loop3: detected capacity change from 0 to 40427 [ 1161.404752][T14783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1161.719886][T14783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1162.730492][T14803] loop3: detected capacity change from 0 to 40427 [ 1163.952832][T14803] F2FS-fs (loop3): build fault injection attr: rate: 691, type: 0x7ffff [ 1163.961682][T14803] F2FS-fs (loop3): Image doesn't support compression [ 1163.993663][T14803] F2FS-fs (loop3): invalid crc value [ 1164.014252][T14803] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1164.140668][T14803] F2FS-fs (loop3): Start checkpoint disabled! [ 1164.177936][T14803] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1165.709446][T14811] tipc: Started in network mode [ 1165.751807][T14811] tipc: Node identity ac14140f, cluster identity 4711 [ 1165.819060][T14811] tipc: New replicast peer: 255.255.255.255 [ 1165.868723][T14811] tipc: Enabled bearer , priority 10 [ 1165.914111][T14812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 1165.933468][T14812] tipc: Disabling bearer [ 1166.130589][T14816] 0猉功D: left allmulticast mode [ 1167.023587][T14816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1168.585645][ T1086] kworker/u4:6: attempt to access beyond end of device [ 1168.585645][ T1086] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1168.604520][ T1086] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1168.616614][ T1086] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1171.352298][T14846] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1171.392327][ T1129] Bluetooth: hci4: Frame reassembly failed (-84) [ 1173.433380][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1174.563638][ T5776] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1175.993827][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 1176.005038][ T5776] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1176.013093][ T5776] usb 2-1: config 0 has no interface number 0 [ 1176.993325][ T5776] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1177.006064][ T5776] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1177.015463][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.005467][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.011863][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.290868][ T5776] usb 2-1: Product: syz [ 1178.295268][ T5776] usb 2-1: Manufacturer: syz [ 1178.304448][ T5776] usb 2-1: SerialNumber: syz [ 1178.361688][ T5776] usb 2-1: config 0 descriptor?? [ 1178.455169][ T5776] usb 2-1: can't set config #0, error -71 [ 1178.516687][ T5776] usb 2-1: USB disconnect, device number 38 [ 1180.328617][T14896] loop1: detected capacity change from 0 to 40427 [ 1180.349095][T14896] F2FS-fs (loop1): invalid crc value [ 1180.425108][T14896] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1180.728801][T14896] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1181.554031][T13208] syz-executor: attempt to access beyond end of device [ 1181.554031][T13208] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1181.603294][T13208] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1182.153769][T14231] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1182.270008][ T28] audit: type=1400 audit(1751867089.211:464): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14921 comm="syz.1.2584" [ 1183.383271][T14343] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1183.579405][T14343] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1183.593380][T14343] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1183.613771][T14343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1183.622830][T14343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1183.654916][T14343] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1183.677476][T14343] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1183.693248][T14343] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1183.711785][T14343] usb 4-1: Product: syz [ 1183.721332][T14343] usb 4-1: Manufacturer: syz [ 1183.744805][T14343] cdc_wdm 4-1:1.0: skipping garbage [ 1183.754207][T14343] cdc_wdm 4-1:1.0: skipping garbage [ 1183.765261][T14343] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1183.771225][T14343] cdc_wdm 4-1:1.0: Unknown control protocol [ 1183.899693][T14943] Illegal XDP return value 4294967262 on prog (id 1297) dev N/A, expect packet loss! [ 1184.060674][T14945] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 1184.404255][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.410972][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.417960][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.424630][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.431539][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.438191][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.444810][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.451455][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.457779][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.464417][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.470811][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.477458][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.484222][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.490871][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.497338][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.503980][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.510328][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.516962][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.523273][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1184.529905][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1184.573301][ T5835] usb 4-1: USB disconnect, device number 82 [ 1184.579428][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1184.979742][T14960] wireguard0: entered promiscuous mode [ 1184.991782][T14960] wireguard0: entered allmulticast mode [ 1185.441994][ T28] audit: type=1326 audit(1751867092.351:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14952 comm="syz.1.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7fc00000 [ 1186.481672][T14976] loop3: detected capacity change from 0 to 512 [ 1186.665010][T14976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.756752][T14976] ext4 filesystem being mounted at /595/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.187091][T14981] netlink: 'syz.3.2602': attribute type 6 has an invalid length. [ 1187.905973][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.649308][T15025] loop1: detected capacity change from 0 to 40427 [ 1193.762377][T15025] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x7ffff [ 1193.771157][T15025] F2FS-fs (loop1): Image doesn't support compression [ 1193.801594][T15025] F2FS-fs (loop1): invalid crc value [ 1193.896353][T15025] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1194.051059][T15025] F2FS-fs (loop1): Start checkpoint disabled! [ 1194.073800][T15025] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1198.257764][ T131] kworker/u4:5: attempt to access beyond end of device [ 1198.257764][ T131] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1198.606920][ T131] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1198.650358][ T131] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1202.101451][T15068] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1204.221556][T14231] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1204.228513][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 1205.083391][ T5835] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1205.110443][ T5789] bridge0: port 4(syz_tun) entered disabled state [ 1205.167581][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1205.181460][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1205.182237][ T5789] syz_tun (unregistering): left allmulticast mode [ 1205.196261][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1205.202864][ T5789] bridge0: port 4(syz_tun) entered disabled state [ 1205.217810][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1205.227572][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1205.235726][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1205.293342][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 1205.300930][ T5835] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1205.314860][ T5835] usb 2-1: config 0 has no interface number 0 [ 1205.339592][ T5835] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1205.365379][ T5835] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1205.396098][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.429177][ T5835] usb 2-1: Product: syz [ 1205.439257][ T5835] usb 2-1: Manufacturer: syz [ 1205.449949][ T5835] usb 2-1: SerialNumber: syz [ 1205.471601][ T5835] usb 2-1: config 0 descriptor?? [ 1205.697680][ T5835] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1205.999223][T15104] chnl_net:caif_netlink_parms(): no params data found [ 1207.013571][ T5835] usb 2-1: USB disconnect, device number 39 [ 1207.313542][T14231] Bluetooth: hci2: command tx timeout [ 1209.014544][T15104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.052372][T15104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.078581][T15104] bridge_slave_0: entered allmulticast mode [ 1209.105096][T15104] bridge_slave_0: entered promiscuous mode [ 1209.136252][T15104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.153786][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.161084][T15104] bridge_slave_1: entered allmulticast mode [ 1209.852547][T14231] Bluetooth: hci2: command tx timeout [ 1209.865072][T15104] bridge_slave_1: entered promiscuous mode [ 1210.182727][T10031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.230451][T15104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.295352][T15104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.421210][T15145] binder_alloc: 15144: binder_alloc_buf, no vma [ 1210.505207][T10031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.574394][T15104] team0: Port device team_slave_0 added [ 1210.636990][T15104] team0: Port device team_slave_1 added [ 1210.762872][T10031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.862452][T15104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.880932][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1210.924428][T11058] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1210.928783][T15104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.992910][T15104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.014106][T15104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.100134][T15104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.173346][T11058] usb 2-1: Using ep0 maxpacket: 32 [ 1211.194474][T11058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.219868][T11058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.232700][T10031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.250583][T11058] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1211.281647][T11058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.312598][T11058] usb 2-1: config 0 descriptor?? [ 1211.425217][T15104] hsr_slave_0: entered promiscuous mode [ 1211.444251][T15104] hsr_slave_1: entered promiscuous mode [ 1211.461818][T15104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1211.483198][T15104] Cannot create hsr debugfs directory [ 1211.806972][T11058] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1211.918890][T14231] Bluetooth: hci2: command tx timeout [ 1212.038878][T11058] usb 2-1: USB disconnect, device number 40 [ 1212.156583][T15151] fido_id[15151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1213.994999][T14231] Bluetooth: hci2: command tx timeout [ 1218.340694][T10031] bridge0: port 3(gretap0) entered disabled state [ 1218.498212][T10031] gretap0 (unregistering): left allmulticast mode [ 1218.513685][T10031] gretap0 (unregistering): left promiscuous mode [ 1218.521317][T10031] bridge0: port 3(gretap0) entered disabled state [ 1218.608558][T15210] wireguard0: entered promiscuous mode [ 1218.617524][T15210] wireguard0: entered allmulticast mode [ 1219.298183][T15213] loop1: detected capacity change from 0 to 40427 [ 1219.312173][T15213] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1219.340014][T15213] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1219.489896][T15213] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1220.314208][T15213] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1220.321375][T15213] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1220.369647][ T28] audit: type=1804 audit(1751867127.311:466): pid=15213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2658" name="/newroot/105/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 1220.404629][T10031] hsr_slave_0: left promiscuous mode [ 1220.430897][T10031] hsr_slave_1: left promiscuous mode [ 1220.451486][T10031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.482273][T10031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.546241][T10031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.573294][T10031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.622224][T10031] bridge_slave_1: left allmulticast mode [ 1220.658768][T10031] bridge_slave_1: left promiscuous mode [ 1220.697259][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.717078][ T28] audit: type=1800 audit(1751867127.651:467): pid=15237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2658" name="file1" dev="loop1" ino=11 res=0 errno=0 [ 1220.759367][T10031] bridge_slave_0: left allmulticast mode [ 1220.770412][T10031] bridge_slave_0: left promiscuous mode [ 1220.799375][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.834945][T10031] veth1_macvtap: left promiscuous mode [ 1221.849590][T10031] veth0_macvtap: left promiscuous mode [ 1221.866606][T10031] veth1_vlan: left promiscuous mode [ 1221.872028][T10031] veth0_vlan: left promiscuous mode [ 1223.669684][T10031] team0 (unregistering): Port device team_slave_1 removed [ 1223.797640][T10031] team0 (unregistering): Port device team_slave_0 removed [ 1223.893786][T10031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.009640][T10031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.662203][T10031] bond0 (unregistering): Released all slaves [ 1224.761235][T15104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1224.777919][T15255] netlink: 'syz.4.2663': attribute type 6 has an invalid length. [ 1224.902293][T15104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1224.914078][T15104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1224.944288][T15104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1225.171807][T15276] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2668'. [ 1225.189704][T15276] netem: unknown loss type 0 [ 1225.218548][T15276] netem: change failed [ 1225.283580][ T23] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1225.312221][T15104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.380580][T15104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.434369][T15104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1225.445252][T15104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1225.589517][ T7760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.596858][ T7760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.643585][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 1225.728045][ T23] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1225.805840][ T7760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.813059][ T7760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.835934][ T23] usb 2-1: config 0 has no interface number 0 [ 1225.849754][ T23] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1225.878925][ T23] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1225.914624][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.935333][ T23] usb 2-1: Product: syz [ 1225.949220][ T23] usb 2-1: Manufacturer: syz [ 1225.962875][ T23] usb 2-1: SerialNumber: syz [ 1225.991195][ T23] usb 2-1: config 0 descriptor?? [ 1226.068981][T15104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.258781][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1226.286688][T15104] veth0_vlan: entered promiscuous mode [ 1226.335637][T15104] veth1_vlan: entered promiscuous mode [ 1226.399548][T15104] veth0_macvtap: entered promiscuous mode [ 1226.412552][T15104] veth1_macvtap: entered promiscuous mode [ 1226.469776][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.482624][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.499404][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.510442][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.532585][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.554141][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.572307][T15104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.585932][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.596501][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.607126][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.618303][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.630207][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.645639][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.659325][T15104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.669449][ T23] usb 2-1: USB disconnect, device number 41 [ 1226.670286][T15104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.746164][T15296] syz.0.2672[15296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1226.746809][T15296] syz.0.2672[15296] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1227.619705][T14723] udevd[14723]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1227.681211][T15104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.236945][T15104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.969041][T15104] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.979938][T15104] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.003918][T15104] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.644593][T15305] loop1: detected capacity change from 0 to 512 [ 1229.673927][ T9709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.681889][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.736902][T15305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.771344][T15305] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.818482][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.859307][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.018344][T15319] netlink: 'syz.1.2675': attribute type 6 has an invalid length. [ 1236.105771][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.843968][T15359] futex_wake_op: syz.3.2686 tries to shift op by -1; fix this program [ 1238.041719][T15358] loop1: detected capacity change from 0 to 8192 [ 1238.145938][T15361] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2687'. [ 1239.124034][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.132592][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.748155][T15369] loop1: detected capacity change from 0 to 512 [ 1239.837774][T15369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.896945][T15369] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.303269][T15375] netlink: 'syz.1.2691': attribute type 6 has an invalid length. [ 1240.786449][T15380] overlayfs: failed to clone upperpath [ 1243.082100][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.060617][T15406] loop3: detected capacity change from 0 to 1024 [ 1245.068313][T15406] EXT4-fs: Ignoring removed i_version option [ 1245.114861][T15406] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1245.169499][T15403] wireguard0: entered promiscuous mode [ 1245.176000][T15403] wireguard0: entered allmulticast mode [ 1245.374003][T15406] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:478: comm syz.3.2699: Invalid block bitmap block 0 in block_group 0 [ 1245.390974][T15406] Quota error (device loop3): write_blk: dquota write failed [ 1245.398845][T15406] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1245.409363][T15406] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2699: Failed to acquire dquot type 0 [ 1245.426755][T15406] EXT4-fs error (device loop3): ext4_free_blocks:6681: comm syz.3.2699: Freeing blocks not in datazone - block = 0, count = 4096 [ 1245.447695][T15406] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.2699: Invalid inode bitmap blk 0 in block_group 0 [ 1245.464708][T15406] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 1245.480386][T15406] EXT4-fs (loop3): 1 orphan inode deleted [ 1245.494642][T15406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1246.433323][ T42] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 1246.442371][ T42] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:2: Failed to release dquot type 0 [ 1247.359209][T15417] netlink: 'syz.0.2703': attribute type 6 has an invalid length. [ 1248.186268][T15104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.938134][T15432] wireguard0: entered promiscuous mode [ 1248.946488][T15432] wireguard0: entered allmulticast mode [ 1250.129888][ T28] audit: type=1400 audit(1751867156.051:468): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15435 comm="syz.1.2709" [ 1250.582156][T15447] bridge1: entered promiscuous mode [ 1250.901368][T15449] netlink: 'syz.0.2713': attribute type 6 has an invalid length. [ 1252.471722][T15454] loop1: detected capacity change from 0 to 262144 [ 1252.495098][T15454] F2FS-fs (loop1): invalid crc value [ 1252.583549][T15454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1252.668072][T15454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 1254.469789][T15484] netlink: 'syz.0.2724': attribute type 6 has an invalid length. [ 1257.107734][T15511] loop3: detected capacity change from 0 to 512 [ 1257.211983][T15511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.233506][T15511] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.523598][T15519] netlink: 'syz.3.2734': attribute type 6 has an invalid length. [ 1258.591474][T15104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1258.623038][T15524] overlayfs: failed to clone upperpath [ 1258.724462][T15525] overlayfs: failed to clone upperpath [ 1260.407852][T15540] loop1: detected capacity change from 0 to 512 [ 1260.496484][T15540] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 1260.590861][T15540] block device autoloading is deprecated and will be removed. [ 1260.599702][T15540] EXT4-fs (loop1): external journal has bad superblock [ 1261.412336][ T28] audit: type=1400 audit(1751867168.351:469): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15541 comm="syz.3.2741" [ 1263.655780][T15559] loop1: detected capacity change from 0 to 512 [ 1263.776760][T15559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.799886][T15559] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.882652][T15568] netlink: 'syz.1.2746': attribute type 6 has an invalid length. [ 1264.515508][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.241068][T15582] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2753'. [ 1265.251670][T15582] netem: unknown loss type 0 [ 1265.262427][T15582] netem: change failed [ 1267.587445][T15601] netlink: 'syz.0.2758': attribute type 6 has an invalid length. [ 1267.852366][T15603] loop3: detected capacity change from 0 to 8192 [ 1270.846106][T15634] input: syz0 as /devices/virtual/input/input13 [ 1271.211685][T15642] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2772'. [ 1271.222238][T15642] netem: unknown loss type 0 [ 1271.227511][T15642] netem: change failed [ 1272.773212][T11059] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1273.787793][T11059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.814768][T11059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1273.828766][T11059] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1273.852266][T11059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.446376][T11059] usb 4-1: config 0 descriptor?? [ 1274.451987][T11059] usb 4-1: can't set config #0, error -71 [ 1274.459358][T11059] usb 4-1: USB disconnect, device number 83 [ 1277.066365][T15682] wireguard0: entered promiscuous mode [ 1277.094064][T15682] wireguard0: entered allmulticast mode [ 1279.947596][T15718] loop1: detected capacity change from 0 to 512 [ 1279.980678][T15718] ext2: Unknown parameter 'euid<00000000000000000000' [ 1281.507162][T14731] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1283.399714][T15748] loop3: detected capacity change from 0 to 256 [ 1283.426526][T15748] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1283.462843][T15748] syz.3.2800: attempt to access beyond end of device [ 1283.462843][T15748] loop3: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1283.517481][T15748] syz.3.2800: attempt to access beyond end of device [ 1283.517481][T15748] loop3: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1283.543940][ T28] audit: type=1800 audit(1751867190.491:470): pid=15748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2800" name="file1" dev="loop3" ino=1048632 res=0 errno=0 [ 1286.571048][T15766] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2805'. [ 1286.599815][T15766] netem: unknown loss type 0 [ 1286.609686][T15766] netem: change failed [ 1288.350883][T15797] wireguard0: entered promiscuous mode [ 1288.359113][T15797] wireguard0: entered allmulticast mode [ 1288.425784][T15795] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1288.444942][T15795] netem: unknown loss type 0 [ 1288.449827][T15795] netem: change failed [ 1292.327122][T15830] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1292.354551][T15830] netem: unknown loss type 0 [ 1292.360692][T15830] netem: change failed [ 1292.671987][T15841] loop3: detected capacity change from 0 to 128 [ 1292.916065][ T28] audit: type=1400 audit(1751867199.861:471): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=15844 comm="syz.1.2830" [ 1295.752071][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2835'. [ 1300.558148][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.564714][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.118413][T15920] fuse: Bad value for 'fd' [ 1304.754864][T15925] loop1: detected capacity change from 0 to 40427 [ 1305.295137][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1306.149147][T15925] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x7ffff [ 1306.158169][T15925] F2FS-fs (loop1): Image doesn't support compression [ 1306.200746][T15925] F2FS-fs (loop1): invalid crc value [ 1306.275187][T15925] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1306.428583][T15925] F2FS-fs (loop1): Start checkpoint disabled! [ 1306.460925][T15925] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1307.291685][T15931] loop3: detected capacity change from 0 to 512 [ 1307.312747][T15931] EXT4-fs: Ignoring removed nobh option [ 1307.355423][T15931] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1307.500646][T15931] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.2857: iget: bad i_size value: 38620345925642 [ 1307.569290][T15931] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.2857: couldn't read orphan inode 15 (err -117) [ 1307.674350][T15931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1308.882929][T15104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.598851][ T42] kworker/u4:2: attempt to access beyond end of device [ 1310.598851][ T42] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1310.627319][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1310.643204][ T42] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1311.399742][T15971] netlink: 'syz.0.2868': attribute type 6 has an invalid length. [ 1311.664007][T15975] loop3: detected capacity change from 0 to 256 [ 1312.054445][T15983] loop3: detected capacity change from 0 to 256 [ 1313.718664][T11059] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1313.903287][T11059] usb 2-1: Using ep0 maxpacket: 32 [ 1313.924890][T11059] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1313.983566][T11059] usb 2-1: config 0 has no interface number 0 [ 1314.084917][T11059] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1314.232554][T11059] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1314.443869][T11059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.621832][T11059] usb 2-1: Product: syz [ 1314.815405][T11059] usb 2-1: Manufacturer: syz [ 1314.820091][T11059] usb 2-1: SerialNumber: syz [ 1314.858221][T11059] usb 2-1: config 0 descriptor?? [ 1315.023739][T16018] loop3: detected capacity change from 0 to 256 [ 1315.036736][T16018] exfat: Deprecated parameter 'namecase' [ 1315.042790][T16018] exfat: Deprecated parameter 'utf8' [ 1315.140450][T16018] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1315.257045][T11059] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1315.496826][T16026] netlink: 'syz.0.2884': attribute type 6 has an invalid length. [ 1315.743623][T11059] usb 2-1: USB disconnect, device number 42 [ 1315.890983][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2886'. [ 1317.359656][T14723] udevd[14723]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1318.242971][T16033] netlink: 'syz.4.2889': attribute type 12 has an invalid length. [ 1318.291113][T16033] netlink: 'syz.4.2889': attribute type 29 has an invalid length. [ 1318.318881][T16033] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1318.373307][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2889'. [ 1319.886546][T16039] bridge: RTM_NEWNEIGH with invalid ether address [ 1320.684487][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2899'. [ 1322.333829][T16077] netlink: 'syz.0.2901': attribute type 6 has an invalid length. [ 1322.782972][T16084] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1322.825071][ T9709] Bluetooth: hci4: Frame reassembly failed (-84) [ 1324.932430][ T50] Bluetooth: hci4: command 0x1003 tx timeout [ 1324.943493][T14231] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1326.101781][T16106] loop1: detected capacity change from 0 to 2048 [ 1326.215509][T16109] loop3: detected capacity change from 0 to 128 [ 1326.230565][T16109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1326.237456][T16109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1328.104533][T16109] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1329.073926][T16106] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1329.074486][T16106] EXT4-fs: failed to create workqueue [ 1329.334923][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 1329.351275][T16109] EXT4-fs: error -4 creating inode table initialization thread [ 1329.359867][T16109] EXT4-fs (loop3): mount failed [ 1329.402433][T16106] EXT4-fs (loop1): mount failed [ 1331.599838][T16136] netlink: 'syz.4.2918': attribute type 6 has an invalid length. [ 1332.759613][T16140] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1334.083299][ T28] audit: type=1326 audit(1751867240.821:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16144 comm="syz.4.2923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccbeb8e929 code=0x0 [ 1335.173315][T14231] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1336.290774][T16177] xt_TCPMSS: Only works on TCP SYN packets [ 1336.298775][T16177] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1337.109481][T16177] gretap0: entered promiscuous mode [ 1337.135999][T16179] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1337.145088][T16179] 0猉功D: renamed from gretap0 [ 1340.985897][T16179] 0猉功D: left promiscuous mode [ 1340.990882][T16179] 0猉功D: entered allmulticast mode [ 1340.999029][T16179] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1342.119625][T16195] loop1: detected capacity change from 0 to 1024 [ 1342.194896][T16185] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1344.857001][T16223] syz.4.2943 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1349.757817][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2959'. [ 1352.037440][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 1352.336033][T16302] syz_tun: entered promiscuous mode [ 1352.403843][T16302] syz_tun: left promiscuous mode [ 1359.681297][T16368] netlink: 'syz.4.2983': attribute type 4 has an invalid length. [ 1361.628196][T16386] loop1: detected capacity change from 0 to 256 [ 1361.635703][T16386] exfat: Deprecated parameter 'namecase' [ 1361.641508][T16386] exfat: Bad value for 'time_offset' [ 1361.815143][T16185] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1362.049588][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.056773][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.392350][T16401] loop3: detected capacity change from 0 to 256 [ 1363.399916][T16401] exfat: Deprecated parameter 'namecase' [ 1363.406283][T16401] exfat: Deprecated parameter 'utf8' [ 1363.431954][T16401] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1365.290241][T16406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2994'. [ 1366.891378][T16411] loop1: detected capacity change from 0 to 256 [ 1367.181755][T16411] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1367.291904][T16411] syz.1.2996: attempt to access beyond end of device [ 1367.291904][T16411] loop1: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1367.359634][T16411] syz.1.2996: attempt to access beyond end of device [ 1367.359634][T16411] loop1: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1367.413354][ T28] audit: type=1800 audit(1751867503.357:473): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2996" name="file1" dev="loop1" ino=1048637 res=0 errno=0 [ 1373.240166][T16453] capability: warning: `syz.4.3008' uses 32-bit capabilities (legacy support in use) [ 1374.599955][T16456] loop3: detected capacity change from 0 to 256 [ 1374.638861][T16456] exfat: Deprecated parameter 'namecase' [ 1374.687295][T16456] exfat: Deprecated parameter 'utf8' [ 1374.740955][T16456] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1375.286059][T16464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3011'. [ 1379.537663][T16486] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1379.679903][T12191] Bluetooth: hci4: Frame reassembly failed (-84) [ 1379.834024][T16494] loop3: detected capacity change from 0 to 256 [ 1379.846311][T16494] exfat: Deprecated parameter 'namecase' [ 1379.951920][T16494] exfat: Deprecated parameter 'utf8' [ 1380.257934][T16494] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1382.093304][T14231] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1382.209432][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1383.927542][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3026'. [ 1385.273730][T16523] loop3: detected capacity change from 0 to 512 [ 1385.404208][T16523] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1385.436215][T16523] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1385.459703][T16523] EXT4-fs (loop3): mount failed [ 1386.056678][T16533] syz.3.3034[16533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1386.057236][T16533] syz.3.3034[16533] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1387.818112][ T7760] Bluetooth: hci4: Frame reassembly failed (-84) [ 1387.891618][T16539] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1389.835169][T14231] Bluetooth: hci4: command 0x1003 tx timeout [ 1389.848035][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1390.219199][T16560] wireguard0: entered promiscuous mode [ 1390.553376][T16560] wireguard0: entered allmulticast mode [ 1391.915959][T16569] syz.3.3045[16569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1391.916654][T16569] syz.3.3045[16569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1394.672457][T16578] loop3: detected capacity change from 0 to 256 [ 1394.824719][T16578] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1398.639358][T16597] xt_TCPMSS: Only works on TCP SYN packets [ 1400.937915][T16623] futex_wake_op: syz.0.3061 tries to shift op by -1; fix this program [ 1405.381862][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 1407.801678][T16662] syz.4.3067[16662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1407.801898][T16662] syz.4.3067[16662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1410.197733][T16683] loop1: detected capacity change from 0 to 1024 [ 1410.306098][T16683] EXT4-fs: Ignoring removed orlov option [ 1410.386524][T16683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.533778][ T28] audit: type=1804 audit(1751867546.477:474): pid=16683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3074" name="/newroot/199/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 1410.612944][ T28] audit: type=1804 audit(1751867546.487:475): pid=16683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3074" name="/newroot/199/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 1411.447315][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1414.002925][T16711] loop3: detected capacity change from 0 to 128 [ 1414.025147][T16711] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fff0101) [ 1414.113142][T16711] FAT-fs (loop3): Filesystem has been set read-only [ 1416.156130][T16721] netlink: 'syz.3.3082': attribute type 4 has an invalid length. [ 1418.909580][ T8083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.194043][ T8083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.399439][ T8083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1419.531751][T16745] overlay: ./file0 is not a directory [ 1419.614988][ T8083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.404631][T16765] loop3: detected capacity change from 0 to 16 [ 1421.458893][T16765] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x9b297259, 0xc32427af expected [ 1421.469363][T16646] udevd[16646]: incorrect erofs checksum on /dev/loop3 [ 1422.239235][T16773] xt_TCPMSS: Only works on TCP SYN packets [ 1422.301717][T16773] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3093'. [ 1422.551173][T16773] gretap0: entered promiscuous mode [ 1422.841712][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1423.403304][ T5835] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1423.441256][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.447846][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.433401][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 1424.448426][ T5835] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1424.473048][ T5835] usb 4-1: config 0 has no interface number 0 [ 1424.479236][ T5835] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1424.520368][ T5835] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1424.545587][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.563235][T16800] bridge4: entered promiscuous mode [ 1424.573338][ T5835] usb 4-1: Product: syz [ 1424.583447][ T5835] usb 4-1: Manufacturer: syz [ 1424.588115][ T5835] usb 4-1: SerialNumber: syz [ 1424.620678][ T5835] usb 4-1: config 0 descriptor?? [ 1424.832783][ T5835] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1425.217035][ T8083] hsr_slave_0: left promiscuous mode [ 1425.506986][ T8083] hsr_slave_1: left promiscuous mode [ 1425.694818][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.888808][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.930223][ T8083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1425.989048][ T8083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1426.046344][ T8083] bridge_slave_1: left allmulticast mode [ 1426.052061][ T8083] bridge_slave_1: left promiscuous mode [ 1426.053456][ T5835] usb 4-1: USB disconnect, device number 84 [ 1426.121008][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1426.229958][ T8083] bridge_slave_0: left allmulticast mode [ 1426.241814][T16818] udevd[16818]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.295177][ T8083] bridge_slave_0: left promiscuous mode [ 1426.328987][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.514058][ T8083] veth1_macvtap: left promiscuous mode [ 1426.533253][ T8083] veth0_macvtap: left promiscuous mode [ 1426.546663][ T8083] veth1_vlan: left promiscuous mode [ 1426.573738][ T8083] veth0_vlan: left promiscuous mode [ 1428.610839][ T8083] team0 (unregistering): Port device team_slave_1 removed [ 1428.731004][ T8083] team0 (unregistering): Port device team_slave_0 removed [ 1428.881228][ T8083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.000568][ T8083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.963446][T11059] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1431.163799][T11059] usb 2-1: Using ep0 maxpacket: 32 [ 1431.180422][T11059] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 1431.192134][T11059] usb 2-1: config 0 has no interface number 0 [ 1431.208357][T11059] usb 2-1: config 0 interface 2 has no altsetting 0 [ 1431.283857][T11059] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1431.300888][T11059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.310016][T11059] usb 2-1: Product: syz [ 1431.340812][T11059] usb 2-1: Manufacturer: syz [ 1431.345891][T11059] usb 2-1: SerialNumber: syz [ 1431.375008][T11059] usb 2-1: config 0 descriptor?? [ 1431.597743][T11059] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1431.667389][ T8083] bond0 (unregistering): Released all slaves [ 1432.055516][T11059] usb 2-1: USB disconnect, device number 43 [ 1432.449719][T16869] udevd[16869]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1432.758088][T16879] loop3: detected capacity change from 0 to 256 [ 1436.548589][T16938] xt_bpf: check failed: parse error [ 1437.286723][T16957] loop3: detected capacity change from 0 to 512 [ 1438.329430][T16957] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1438.416970][T16957] EXT4-fs (loop3): 1 truncate cleaned up [ 1438.430394][T16957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.959385][T15104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.624176][T17025] xt_CT: No such helper "pptp" [ 1447.007856][T17039] xt_TCPMSS: Only works on TCP SYN packets [ 1447.023940][T17039] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3155'. [ 1447.034938][T17039] 1猉功D: renamed from 30猉功D (while UP) [ 1447.077186][T17039] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1450.215613][T17053] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1452.344607][T17085] fuse: Unknown parameter '觚x.67%鳛B$6{瓍轕鸢编洦运髚uS鸃r扴鼋呔JHke齚ǐsｙ#0玥mV囡栆N+p扁顀-/噍匳墛S焁o`CV腣檱OG艁P軥嗿鍂%\6$L苬?'db' [ 1452.895826][T17085] 9pnet_fd: Insufficient options for proto=fd [ 1453.523954][T17088] xt_TCPMSS: Only works on TCP SYN packets [ 1453.531275][T17088] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3167'. [ 1453.543722][T17088] 0猉功D: renamed from gretap0 (while UP) [ 1455.747455][T17088] 0猉功D: entered allmulticast mode [ 1455.753892][T17088] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1456.824930][T17110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3176'. [ 1458.815693][T17151] xt_TCPMSS: Only works on TCP SYN packets [ 1458.822581][T17151] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3184'. [ 1458.831963][T17151] 0猉功D: renamed from gretap0 [ 1459.928919][T17151] 0猉功D: left promiscuous mode [ 1459.934024][T17151] 0猉功D: entered allmulticast mode [ 1459.948628][T17151] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1463.618963][T17195] input: syz1 as /devices/virtual/input/input15 [ 1466.267630][T17215] loop3: detected capacity change from 0 to 256 [ 1466.311704][T17215] exfat: Deprecated parameter 'namecase' [ 1466.323190][T17215] exfat: Deprecated parameter 'utf8' [ 1466.383957][T17215] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1466.913249][T17224] xt_TCPMSS: Only works on TCP SYN packets [ 1474.206441][T17281] loop1: detected capacity change from 0 to 256 [ 1474.218768][T17281] exfat: Deprecated parameter 'utf8' [ 1474.224600][T17281] exfat: Deprecated parameter 'utf8' [ 1474.229971][T17281] exfat: Deprecated parameter 'utf8' [ 1474.235559][T17281] exfat: Deprecated parameter 'utf8' [ 1474.240932][T17281] exfat: Deprecated parameter 'utf8' [ 1474.341803][T17280] syz.3.3210[17280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1474.342541][T17280] syz.3.3210[17280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1474.913694][T17281] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xa18d3b1e, utbl_chksum : 0xe619d30d) [ 1475.419289][T17292] 9pnet: p9_errstr2errno: server reported unknown error [ 1476.262810][T17300] xt_TCPMSS: Only works on TCP SYN packets [ 1479.136302][T17305] wireguard0: entered promiscuous mode [ 1479.158442][T17305] wireguard0: entered allmulticast mode [ 1480.916629][T17338] syz.0.3222[17338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1480.916778][T17338] syz.0.3222[17338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1483.286940][T17362] xt_TCPMSS: Only works on TCP SYN packets [ 1485.075907][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.090223][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.064507][T17410] syz.1.3235[17410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1489.064651][T17410] syz.1.3235[17410] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1489.130370][T17412] bridge_slave_1: left allmulticast mode [ 1489.148802][T17412] bridge_slave_1: left promiscuous mode [ 1489.157674][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.172114][T17412] bridge_slave_0: left allmulticast mode [ 1489.180255][T17412] bridge_slave_0: left promiscuous mode [ 1489.186926][T17412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.918775][T17477] syz.3.3251[17477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1493.918958][T17477] syz.3.3251[17477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1498.177376][ T5776] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1499.373071][ T5776] usb 4-1: Using ep0 maxpacket: 16 [ 1499.462772][ T5776] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.546453][ T5776] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1499.562353][ T5776] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1499.577369][ T5776] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.727645][ T5776] usb 4-1: config 0 descriptor?? [ 1501.773770][T17543] syz.3.3261[17543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1501.773914][T17543] syz.3.3261[17543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1501.881630][ T5776] usbhid 4-1:0.0: can't add hid device: -71 [ 1501.959020][ T5776] usbhid: probe of 4-1:0.0 failed with error -71 [ 1502.037753][ T5776] usb 4-1: USB disconnect, device number 85 [ 1512.584105][T17643] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1512.753280][T11057] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1512.973212][T11057] usb 2-1: Using ep0 maxpacket: 16 [ 1513.151615][T11057] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1513.182891][T11057] usb 2-1: config 0 has no interface number 0 [ 1513.443575][T11057] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1514.650852][T11057] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1514.661247][T11057] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1514.671233][T11057] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1514.682612][T11057] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.150127][T11057] usb 2-1: Product: syz [ 1515.347248][T11057] usb 2-1: Manufacturer: syz [ 1515.408104][T11057] usb 2-1: SerialNumber: syz [ 1515.469254][T11057] usb 2-1: config 0 descriptor?? [ 1515.533917][T11057] usb 2-1: can't set config #0, error -71 [ 1515.609469][T11057] usb 2-1: USB disconnect, device number 44 [ 1517.177428][T17660] loop3: detected capacity change from 0 to 40427 [ 1517.198659][T17660] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1517.214997][T17660] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1517.251375][T17660] F2FS-fs (loop3): invalid crc value [ 1517.275654][T17660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1517.443893][T17660] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1517.463213][T17660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1518.794240][T17693] 9pnet_fd: Insufficient options for proto=fd [ 1519.153352][T15173] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1519.577051][T15173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.618031][T15173] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1519.672973][T15173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.755771][T15173] usb 4-1: config 0 descriptor?? [ 1519.776300][T15173] usb 4-1: bad CDC descriptors [ 1520.068443][T11065] usb 4-1: USB disconnect, device number 86 [ 1520.186398][T17703] xt_TCPMSS: Only works on TCP SYN packets [ 1524.142859][T17717] loop3: detected capacity change from 0 to 128 [ 1524.250075][T17717] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1525.189071][T17717] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.372341][T17717] syz.3.3301 (pid 17717) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1525.688001][T15104] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1527.303350][T11055] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1527.529338][T11055] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.563190][T11055] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1527.602992][T11055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.627486][T11055] usb 2-1: config 0 descriptor?? [ 1527.641056][T11055] usb 2-1: bad CDC descriptors [ 1527.897730][T11055] usb 2-1: USB disconnect, device number 45 [ 1528.930236][T17776] syz.1.3315[17776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1528.931121][T17776] syz.1.3315[17776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1529.752271][T17788] loop1: detected capacity change from 0 to 16 [ 1529.805856][T17788] erofs: (device loop1): mounted with root inode @ nid 36. [ 1529.877243][T17788] syz.1.3318: attempt to access beyond end of device [ 1529.877243][T17788] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1529.911328][T17788] syz.1.3318: attempt to access beyond end of device [ 1529.911328][T17788] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16 [ 1529.953496][T17788] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1530.130103][T17795] loop1: detected capacity change from 0 to 512 [ 1530.211333][T17795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.263410][T17795] ext4 filesystem being mounted at /245/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1530.758379][T17803] netlink: 'syz.1.3322': attribute type 6 has an invalid length. [ 1531.549707][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.174789][T17820] syz.3.3327[17820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.174930][T17820] syz.3.3327[17820] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.425193][T17825] netlink: 'syz.1.3328': attribute type 3 has an invalid length. [ 1532.447212][T17825] netlink: 'syz.1.3328': attribute type 3 has an invalid length. [ 1532.589163][T17826] usb usb1: check_ctrlrecip: process 17826 (syz.1.3328) requesting ep 01 but needs 81 [ 1533.601812][T17832] xt_bpf: check failed: parse error [ 1535.824872][T17845] batadv_slave_1: entered promiscuous mode [ 1536.432025][T17841] batadv_slave_1: left promiscuous mode [ 1539.703664][T17857] loop1: detected capacity change from 0 to 40427 [ 1539.745458][T17857] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1539.753434][T17857] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1539.809317][T17857] F2FS-fs (loop1): invalid crc value [ 1540.010942][T17857] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1540.266595][T17857] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1540.274861][T17857] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1542.363323][T17881] fuse: Bad value for 'fd' [ 1542.992069][T17888] loop1: detected capacity change from 0 to 256 [ 1543.050977][T17875] loop3: detected capacity change from 0 to 512 [ 1543.216269][T17864] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1545.473085][T15173] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1545.666562][T15173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.687154][T15173] usb 4-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1545.706754][T15173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.725534][T15173] usb 4-1: config 0 descriptor?? [ 1545.733855][T15173] usb 4-1: bad CDC descriptors [ 1545.941620][ T5776] usb 4-1: USB disconnect, device number 87 [ 1546.317977][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.324473][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.709091][ T28] audit: type=1326 audit(1751867911.653:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1546.788426][ T28] audit: type=1326 audit(1751867911.653:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1547.162614][ T28] audit: type=1326 audit(1751867911.693:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1547.185333][ T28] audit: type=1326 audit(1751867911.693:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febe278e963 code=0x7ffc0000 [ 1547.238514][ T28] audit: type=1326 audit(1751867911.713:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7febe278e963 code=0x7ffc0000 [ 1547.267510][ T28] audit: type=1326 audit(1751867911.713:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1547.290412][ T28] audit: type=1326 audit(1751867911.723:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1547.369422][ T28] audit: type=1326 audit(1751867911.723:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17922 comm="syz.1.3354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x7ffc0000 [ 1548.699601][T17943] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1549.745573][T17943] 0猉功D: entered promiscuous mode [ 1549.776399][T17944] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3356'. [ 1549.787775][T17944] 1猉功D: renamed from 30猉功D [ 1550.400437][T17944] 1猉功D: left promiscuous mode [ 1550.405614][T17944] 1猉功D: entered allmulticast mode [ 1550.420625][T17944] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1554.267742][T17973] loop3: detected capacity change from 0 to 256 [ 1554.423283][T17973] FAT-fs (loop3): Directory bread(block 64) failed [ 1554.463764][T17973] FAT-fs (loop3): Directory bread(block 65) failed [ 1554.485719][T17973] FAT-fs (loop3): Directory bread(block 66) failed [ 1554.896871][T17973] FAT-fs (loop3): Directory bread(block 67) failed [ 1554.931646][T17973] FAT-fs (loop3): Directory bread(block 68) failed [ 1554.983164][T17973] FAT-fs (loop3): Directory bread(block 69) failed [ 1555.015180][T17973] FAT-fs (loop3): Directory bread(block 70) failed [ 1555.074963][T17973] FAT-fs (loop3): Directory bread(block 71) failed [ 1555.081684][T17973] FAT-fs (loop3): Directory bread(block 72) failed [ 1555.375208][T17973] FAT-fs (loop3): Directory bread(block 73) failed [ 1559.741564][T17998] loop3: detected capacity change from 0 to 128 [ 1560.053080][T17998] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1560.070659][T17998] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.152188][T15104] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1575.141937][T18012] loop3: detected capacity change from 0 to 2048 [ 1575.208160][T18012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1576.393153][T18018] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1576.455822][T18031] overlayfs: failed to clone upperpath [ 1576.464213][ T48] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1580 with error 28 [ 1576.497209][ T48] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1576.497209][ T48] [ 1576.517955][ T48] EXT4-fs (loop3): Total free blocks count 0 [ 1576.542089][ T48] EXT4-fs (loop3): Free/Dirty block details [ 1576.548806][ T48] EXT4-fs (loop3): free_blocks=0 [ 1576.564600][ T48] EXT4-fs (loop3): dirty_blocks=1584 [ 1576.569961][ T48] EXT4-fs (loop3): Block reservation details [ 1576.597304][ T48] EXT4-fs (loop3): i_reserved_data_blocks=99 [ 1576.818485][T15104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1577.197084][T18038] xt_TCPMSS: Only works on TCP SYN packets [ 1577.209220][T18038] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1577.224085][T18038] 0猉功D: entered promiscuous mode [ 1577.229314][T18038] 0猉功D: left allmulticast mode [ 1577.260121][T18038] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3383'. [ 1577.269748][T18038] 1猉功D: renamed from 30猉功D [ 1578.622966][T18038] 1猉功D: left promiscuous mode [ 1578.628134][T18038] 1猉功D: entered allmulticast mode [ 1578.642558][T18038] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1579.019090][T18029] loop1: detected capacity change from 0 to 40427 [ 1579.032227][T18029] F2FS-fs (loop1): invalid crc value [ 1579.500969][T18029] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1580.048477][T18029] F2FS-fs (loop1): Start checkpoint disabled! [ 1581.740903][T18058] loop1: detected capacity change from 0 to 256 [ 1581.842000][T18058] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1581.918389][T18058] syz.1.3388: attempt to access beyond end of device [ 1581.918389][T18058] loop1: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1581.995491][T18058] syz.1.3388: attempt to access beyond end of device [ 1581.995491][T18058] loop1: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1582.030608][ T28] audit: type=1800 audit(1751867946.973:484): pid=18058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3388" name="file1" dev="loop1" ino=1048642 res=0 errno=0 [ 1583.301136][T18073] loop1: detected capacity change from 0 to 512 [ 1583.496398][T18073] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1583.508342][T18073] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1583.519112][T18073] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3391: Corrupt directory, running e2fsck is recommended [ 1583.535997][T18073] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1583.550318][T18073] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.3391: corrupted in-inode xattr: invalid ea_ino [ 1583.580344][T18073] EXT4-fs (loop1): Remounting filesystem read-only [ 1583.594817][T18073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1583.638718][T18073] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1583.650384][T18073] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1583.660785][T18073] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3391: Corrupt directory, running e2fsck is recommended [ 1584.014272][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.783460][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'. [ 1586.244247][T18090] xt_hashlimit: size too large, truncated to 1048576 [ 1586.942402][T18096] loop1: detected capacity change from 0 to 1024 [ 1586.954174][T18096] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1587.276955][T18096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.188610][T18104] loop3: detected capacity change from 0 to 256 [ 1588.224245][T18104] exfat: Deprecated parameter 'utf8' [ 1588.317486][T18104] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x35d78f5b, utbl_chksum : 0xe619d30d) [ 1588.803193][T18113] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3401'. [ 1588.846544][T18113] netlink: 'syz.3.3401': attribute type 6 has an invalid length. [ 1588.905778][T18113] netlink: 'syz.3.3401': attribute type 5 has an invalid length. [ 1588.944255][T18113] netlink: 'syz.3.3401': attribute type 4 has an invalid length. [ 1589.546132][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.660243][T18118] xt_TCPMSS: Only works on TCP SYN packets [ 1591.891621][T18123] usb usb1: check_ctrlrecip: process 18123 (syz.1.3403) requesting ep 01 but needs 81 [ 1592.610676][T18129] loop1: detected capacity change from 0 to 512 [ 1592.650012][T18129] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1592.697138][T18129] EXT4-fs error (device loop1): __ext4_iget:5053: inode #11: block 1: comm syz.1.3404: invalid block [ 1592.745934][T18129] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3404: couldn't read orphan inode 11 (err -117) [ 1592.821166][T18129] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1592.903584][T18129] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.3404: Directory hole found for htree leaf block 0 [ 1593.069803][T18135] loop3: detected capacity change from 0 to 256 [ 1593.434346][T18135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1593.446010][T18135] batadv_slave_0: entered allmulticast mode [ 1593.462221][T18135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.597060][T18131] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1594.166865][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.140463][T18141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3407'. [ 1599.988179][T15173] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1600.218986][T15173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.229409][T15173] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1600.240244][T15173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.264299][T15173] usb 2-1: config 0 descriptor?? [ 1600.272736][T15173] usb 2-1: bad CDC descriptors [ 1600.492106][T15173] usb 2-1: USB disconnect, device number 46 [ 1602.454159][T18177] loop1: detected capacity change from 0 to 256 [ 1602.518665][T18177] exfat: Deprecated parameter 'namecase' [ 1602.760390][T18177] exfat: Deprecated parameter 'utf8' [ 1603.365096][T14231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1603.376547][T14231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1603.385731][T14231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1603.399208][T14231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1603.410297][T14231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1603.418705][T14231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1603.548672][T18177] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1604.070220][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3417'. [ 1605.513075][T14231] Bluetooth: hci4: command tx timeout [ 1605.638122][T18195] xt_TCPMSS: Only works on TCP SYN packets [ 1608.028331][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.032940][T14231] Bluetooth: hci4: command tx timeout [ 1608.453020][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.962089][T14231] Bluetooth: hci4: command tx timeout [ 1610.978801][T18180] chnl_net:caif_netlink_parms(): no params data found [ 1611.475849][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.484634][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.497444][T18180] bridge_slave_0: entered allmulticast mode [ 1611.506955][T18180] bridge_slave_0: entered promiscuous mode [ 1611.535079][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.583127][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.620342][T18180] bridge_slave_1: entered allmulticast mode [ 1611.628172][T18180] bridge_slave_1: entered promiscuous mode [ 1611.754528][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.311244][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.657466][T18180] team0: Port device team_slave_0 added [ 1612.699617][T18180] team0: Port device team_slave_1 added [ 1613.045084][T14231] Bluetooth: hci4: command tx timeout [ 1613.601069][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.659516][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.686929][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1613.729357][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.739414][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1613.825842][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.075546][T18180] hsr_slave_0: entered promiscuous mode [ 1614.107931][T18180] hsr_slave_1: entered promiscuous mode [ 1615.253667][T18180] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1615.319391][T18180] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1615.448656][T18180] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1615.834741][T18180] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1617.084532][T18265] 1猉功D: left allmulticast mode [ 1617.096243][T18265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.103494][T18265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1617.111081][T18265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.118345][T18265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.330883][T18265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1618.579654][ T9709] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.680502][ T9709] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.747363][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1618.894442][ T9709] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.970779][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1618.992898][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.000134][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.346282][ T9709] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.372099][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.379359][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.576126][T18180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1619.882700][ T9709] tipc: Left network mode [ 1621.583485][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1624.600314][T18359] loop1: detected capacity change from 0 to 256 [ 1624.671917][T18359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1626.314892][T18180] veth0_vlan: entered promiscuous mode [ 1626.909790][T18180] veth1_vlan: entered promiscuous mode [ 1627.105009][T18368] loop1: detected capacity change from 0 to 256 [ 1627.336421][ T9709] hsr_slave_0: left promiscuous mode [ 1627.364331][ T9709] hsr_slave_1: left promiscuous mode [ 1627.395328][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1627.413620][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1627.434295][ T9709] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1627.450030][T18368] FAT-fs (loop1): Directory bread(block 64) failed [ 1627.464112][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1627.491713][T18368] FAT-fs (loop1): Directory bread(block 65) failed [ 1627.550804][T18368] FAT-fs (loop1): Directory bread(block 66) failed [ 1627.605340][T18368] FAT-fs (loop1): Directory bread(block 67) failed [ 1627.612045][T18368] FAT-fs (loop1): Directory bread(block 68) failed [ 1627.623772][ T9709] veth1_macvtap: left promiscuous mode [ 1627.629468][ T9709] veth0_macvtap: left promiscuous mode [ 1627.663336][ T9709] veth1_vlan: left promiscuous mode [ 1627.679038][ T9709] veth0_vlan: left promiscuous mode [ 1627.692682][T18368] FAT-fs (loop1): Directory bread(block 69) failed [ 1627.735654][T18368] FAT-fs (loop1): Directory bread(block 70) failed [ 1627.742265][T18368] FAT-fs (loop1): Directory bread(block 71) failed [ 1627.805272][T18368] FAT-fs (loop1): Directory bread(block 72) failed [ 1627.811894][T18368] FAT-fs (loop1): Directory bread(block 73) failed [ 1628.319741][T18381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1630.043056][T13442] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1630.159285][ T9709] team0 (unregistering): Port device team_slave_1 removed [ 1630.248979][ T9709] team0 (unregistering): Port device team_slave_0 removed [ 1630.256397][T13442] usb 2-1: Using ep0 maxpacket: 32 [ 1630.273592][T13442] usb 2-1: New USB device found, idVendor=03f0, idProduct=0107, bcdDevice= 2.00 [ 1630.305780][T13442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.316733][T13442] usb 2-1: Product: syz [ 1630.320968][T13442] usb 2-1: Manufacturer: syz [ 1630.329342][T13442] usb 2-1: SerialNumber: syz [ 1630.350047][T13442] usb 2-1: config 0 descriptor?? [ 1630.369213][T13442] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1630.401964][ T9709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1630.581812][T11065] usb 2-1: USB disconnect, device number 47 [ 1630.729746][ T9709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1632.242235][ T9709] bond0 (unregistering): Released all slaves [ 1632.306871][T18381] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1632.318996][T18381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1632.329328][T18381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1632.573025][T18180] veth0_macvtap: entered promiscuous mode [ 1632.588481][T18180] veth1_macvtap: entered promiscuous mode [ 1632.616376][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1632.647633][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1632.676573][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.435062][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1633.802144][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1633.823013][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.111650][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.522964][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1634.892959][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1634.929294][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.997063][T18180] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.272276][T18180] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.515258][T18180] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.043265][T18180] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1636.494970][T10031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.567410][T10031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.674245][T15409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.693225][T15409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.508901][T18459] xt_TCPMSS: Only works on TCP SYN packets [ 1640.520160][T18459] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3469'. [ 1641.886771][T18459] 1猉功D: entered promiscuous mode [ 1641.892080][T18459] 1猉功D: left allmulticast mode [ 1641.920644][T18460] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3469'. [ 1641.930627][T18460] 0猉功D: renamed from 31猉功D [ 1642.388405][T18460] 0猉功D: left promiscuous mode [ 1642.393512][T18460] 0猉功D: entered allmulticast mode [ 1642.407541][T18460] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1645.163762][T18485] overlayfs: failed to resolve './file0': -2 [ 1646.304204][ T28] audit: type=1326 audit(1751868011.243:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9698e929 code=0x7fc00000 [ 1646.419172][ T28] audit: type=1326 audit(1751868011.323:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9698e929 code=0x7fc00000 [ 1646.898869][ T28] audit: type=1326 audit(1751868011.813:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18489 comm="syz.3.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9698e929 code=0x7fc00000 [ 1648.964574][T18517] loop1: detected capacity change from 0 to 512 [ 1650.369022][T18520] xt_TCPMSS: Only works on TCP SYN packets [ 1650.376153][T18520] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1650.533193][T18520] gretap0: entered promiscuous mode [ 1650.545696][T18521] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3480'. [ 1650.558668][T18521] 0猉功D: renamed from gretap0 [ 1650.771887][T18517] EXT4-fs: error -4 creating inode table initialization thread [ 1650.779957][T18517] EXT4-fs (loop1): mount failed [ 1651.952513][T18521] 0猉功D: left promiscuous mode [ 1651.957863][T18521] 0猉功D: entered allmulticast mode [ 1651.965337][T18521] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 1653.568797][T18533] 9pnet_fd: Insufficient options for proto=fd [ 1653.959261][T18547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 1658.014757][T18578] loop1: detected capacity change from 0 to 512 [ 1658.216204][T18578] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1658.228034][T18578] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 1658.238593][T18578] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3490: Corrupt directory, running e2fsck is recommended [ 1658.255655][T18578] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1658.284623][T18578] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.3490: corrupted in-inode xattr: invalid ea_ino [ 1658.301355][T18578] EXT4-fs (loop1): Remounting filesystem read-only [ 1658.318021][T18578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.719803][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1660.898411][T18602] xt_TCPMSS: Only works on TCP SYN packets [ 1660.910751][T18602] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1661.196285][T18602] 0猉功D: entered promiscuous mode [ 1661.201600][T18602] 0猉功D: left allmulticast mode [ 1661.230205][T18603] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3493'. [ 1661.239971][T18603] 1猉功D: renamed from 30猉功D [ 1662.057971][T18603] 1猉功D: left promiscuous mode [ 1662.063082][T18603] 1猉功D: entered allmulticast mode [ 1662.077109][T18603] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1664.224422][T18622] loop1: detected capacity change from 0 to 4096 [ 1664.267673][T18622] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1664.309441][T18622] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1664.323364][T18622] System zones: 0-5 [ 1664.339023][T18622] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.629635][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.586799][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1667.903168][ T28] audit: type=1326 audit(1751868031.713:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1668.867017][ T28] audit: type=1326 audit(1751868031.713:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.016088][ T28] audit: type=1326 audit(1751868031.723:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.043568][ T28] audit: type=1326 audit(1751868031.723:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.112910][ T28] audit: type=1326 audit(1751868031.723:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.139555][T18670] loop5: detected capacity change from 0 to 256 [ 1669.166734][ T28] audit: type=1326 audit(1751868031.723:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.200633][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.207150][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.258880][ T28] audit: type=1326 audit(1751868031.723:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.317825][T18670] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1669.369818][ T28] audit: type=1326 audit(1751868031.723:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.426569][T18670] syz.5.3509: attempt to access beyond end of device [ 1669.426569][T18670] loop5: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1669.453067][ T28] audit: type=1326 audit(1751868031.723:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1669.547453][T18670] syz.5.3509: attempt to access beyond end of device [ 1669.547453][T18670] loop5: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1669.898974][ T28] audit: type=1326 audit(1751868031.733:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18653 comm="syz.0.3506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc764b8e929 code=0x7ffc0000 [ 1671.394408][T18696] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3512'. [ 1673.537870][T18717] xt_TCPMSS: Only works on TCP SYN packets [ 1676.509323][T18767] syz.3.3521[18767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1676.509462][T18767] syz.3.3521[18767] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.900293][T18763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1680.492925][T11055] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1680.703060][T11055] usb 2-1: Using ep0 maxpacket: 8 [ 1680.711717][T11055] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1680.722526][T11055] usb 2-1: config 179 has no interface number 0 [ 1680.729275][T11055] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1681.036275][T18792] xt_CT: No such helper "pptp" [ 1681.157585][T11055] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1681.169051][T11055] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1681.180612][T11055] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1681.192321][T11055] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1681.229460][T11055] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1681.253359][T11055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.284622][T18775] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1681.454267][T13442] usb 2-1: USB disconnect, device number 48 [ 1681.454361][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1681.469822][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1681.857011][T18804] fuseblk: Bad value for 'source' [ 1682.133421][T18192] libceph: connect (1)[c::]:6789 error -101 [ 1682.134396][T18192] libceph: mon0 (1)[c::]:6789 connect error [ 1682.411421][T11055] libceph: connect (1)[c::]:6789 error -101 [ 1682.812255][T18810] ceph: No mds server is up or the cluster is laggy [ 1682.914602][T11055] libceph: mon0 (1)[c::]:6789 connect error [ 1683.914483][T18833] syz.0.3539[18833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1683.914629][T18833] syz.0.3539[18833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1684.000143][T18835] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1684.459730][T18838] loop1: detected capacity change from 0 to 2048 [ 1684.550094][T18838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1684.693978][T18838] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.3544: iget: bad i_size value: 8796093031208 [ 1684.896905][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1685.246766][T18845] loop5: detected capacity change from 0 to 256 [ 1686.575794][T18848] loop1: detected capacity change from 0 to 256 [ 1686.886226][T18848] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1687.525269][T18848] syz.1.3546: attempt to access beyond end of device [ 1687.525269][T18848] loop1: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1687.660035][T18845] FAT-fs (loop5): IO charset 卭i8-ru not found [ 1687.895142][T18848] syz.1.3546: attempt to access beyond end of device [ 1687.895142][T18848] loop1: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1688.001383][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1688.001398][ T28] audit: type=1800 audit(1751868052.943:503): pid=18848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3546" name="file1" dev="loop1" ino=1048650 res=0 errno=0 [ 1688.504127][T18851] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1688.542874][T18851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1688.768578][T18855] loop1: detected capacity change from 0 to 1024 [ 1688.847838][T18855] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1689.173944][ T28] audit: type=1800 audit(1751868054.123:504): pid=18855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3549" name="bus" dev="loop1" ino=19 res=0 errno=0 [ 1689.187471][T18855] Trying to write to read-only block-device loop1 [ 1689.374225][T13208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.013340][T18870] loop1: detected capacity change from 0 to 256 [ 1691.080905][T18637] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1692.750736][T18891] fuse: Unknown parameter 'group_i00000000000000000000' [ 1692.784555][T13442] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1693.045815][T13442] usb 2-1: config 0 has no interfaces? [ 1693.055493][T13442] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1693.082896][T13442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.091041][T13442] usb 2-1: Product: syz [ 1693.122853][T13442] usb 2-1: Manufacturer: syz [ 1693.132581][T13442] usb 2-1: SerialNumber: syz [ 1693.145528][T13442] r8152-cfgselector 2-1: config 0 descriptor?? [ 1693.369945][T13442] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1693.593726][T13442] usb 2-1: USB disconnect, device number 49 [ 1694.868488][T18910] loop1: detected capacity change from 0 to 40427 [ 1696.616138][T18920] fuse: Unknown parameter 'group_i00000000000000000000' [ 1698.204277][T18935] loop5: detected capacity change from 0 to 512 [ 1698.721309][T18935] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1698.734112][T18935] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1698.744267][T18935] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3572: Corrupt directory, running e2fsck is recommended [ 1698.758090][T18935] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1698.767667][T18935] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.3572: corrupted in-inode xattr: invalid ea_ino [ 1698.781629][T18935] EXT4-fs (loop5): Remounting filesystem read-only [ 1698.790003][T18935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1698.815422][T18934] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1698.827038][T18934] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1698.837172][T18934] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3572: Corrupt directory, running e2fsck is recommended [ 1699.103642][T18180] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.439147][T18954] loop1: detected capacity change from 0 to 2048 [ 1701.584789][T18962] usb usb1: check_ctrlrecip: process 18962 (syz.5.3576) requesting ep 01 but needs 81 [ 1702.166830][T18958] netlink: 'syz.5.3576': attribute type 3 has an invalid length. [ 1702.175460][T18958] netlink: 'syz.5.3576': attribute type 3 has an invalid length. [ 1702.212952][T18954] Alternate GPT is invalid, using primary GPT. [ 1702.222603][T18954] loop1: p2 p3 p7 [ 1702.232480][T18961] netlink: 'syz.1.3579': attribute type 9 has an invalid length. [ 1702.313816][T18961] netlink: 'syz.1.3579': attribute type 6 has an invalid length. [ 1703.335611][T18970] fuse: Unknown parameter 'group_i00000000000000000000' [ 1703.352210][T11065] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1703.594537][T11065] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.735583][T18979] netlink: 888 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1703.744791][T18979] netlink: 137 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1704.536298][T11065] usb 2-1: string descriptor 0 read error: -71 [ 1704.542700][T11065] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1704.553134][T11065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.559272][T18981] loop5: detected capacity change from 0 to 2048 [ 1704.583061][T11065] usb 2-1: can't set config #1, error -71 [ 1704.590695][T11065] usb 2-1: USB disconnect, device number 50 [ 1704.684563][T18981] loop5: p1 < > p3 [ 1704.713666][T18981] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1704.793605][ T5157] loop5: p1 < > p3 [ 1704.819935][ T5157] loop5: p3 size 134217728 extends beyond EOD, truncated [ 1704.913410][T18990] loop1: detected capacity change from 0 to 512 [ 1705.454683][T18614] udevd[18614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1705.467432][T18992] udevd[18992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1705.677318][T18992] udevd[18992]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1705.701296][T18614] udevd[18614]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1705.845991][T19000] fuse: Unknown parameter 'group_id00000000000000000000' [ 1707.654860][T19008] xt_TCPMSS: Only works on TCP SYN packets [ 1711.213681][T19015] syzkaller0: entered promiscuous mode [ 1711.219315][T19015] syzkaller0: entered allmulticast mode [ 1711.365654][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1715.612661][T19040] loop5: detected capacity change from 0 to 40427 [ 1715.642383][T19040] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1715.661051][T19040] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1715.956748][T19040] F2FS-fs (loop5): invalid crc value [ 1717.313171][T19040] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4) [ 1719.873274][T19083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1719.966175][T19086] netlink: 'syz.0.3615': attribute type 27 has an invalid length. [ 1722.361739][T19100] syz.5.3618[19100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1722.362414][T19100] syz.5.3618[19100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1722.711737][T19102] fuse: Bad value for 'fd' [ 1724.339098][T19109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3621'. [ 1724.431747][T19086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.439619][T19086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.895310][T19114] loop1: detected capacity change from 0 to 40427 [ 1726.003934][ T28] audit: type=1326 audit(1751868090.913:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19110 comm="syz.1.3622" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7febe278e929 code=0x0 [ 1726.038374][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1726.188623][T19086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1726.345538][T19086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1726.998910][T19086] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.011633][T19086] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.025750][T19086] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.035194][T19086] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.113292][T19086] bridge1: left promiscuous mode [ 1727.127389][T19086] bridge4: left promiscuous mode [ 1727.136802][T19086] wireguard0: left promiscuous mode [ 1727.142346][T19086] wireguard0: left allmulticast mode [ 1727.195213][T19088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1727.204002][T19088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.353874][T19088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1727.603926][T14231] Bluetooth: hci4: command 0x0406 tx timeout [ 1729.495119][T19160] fuse: Bad value for 'fd' [ 1729.518520][T19145] loop5: detected capacity change from 0 to 40427 [ 1729.578147][T19145] F2FS-fs (loop5): Invalid log blocks per segment (83886089) [ 1729.618258][T19145] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1729.671993][T19145] F2FS-fs (loop5): invalid crc value [ 1729.720861][T19145] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1729.843046][T19162] wg2: entered promiscuous mode [ 1730.094160][T19162] wg2: entered allmulticast mode [ 1730.127608][T19167] xt_TCPMSS: Only works on TCP SYN packets [ 1730.244833][T19145] F2FS-fs (loop5): Start checkpoint disabled! [ 1730.358330][T19145] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 1730.388612][T19145] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1730.833564][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.840491][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.690372][T19190] fuse: Bad value for 'fd' [ 1732.959644][T19194] loop1: detected capacity change from 0 to 256 [ 1733.777521][T19207] loop1: detected capacity change from 0 to 512 [ 1736.570636][T19216] fuse: Bad value for 'fd' [ 1737.149845][T19229] xt_TCPMSS: Only works on TCP SYN packets [ 1738.516914][T19241] syz.0.3657[19241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1738.517227][T19241] syz.0.3657[19241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1739.961674][T19244] loop1: detected capacity change from 0 to 256 [ 1740.467657][T19247] loop5: detected capacity change from 0 to 128 [ 1741.474428][T19247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1741.515485][T19247] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.593150][T19254] fuse: Bad value for 'fd' [ 1742.559903][T18180] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1742.882200][T19269] xt_TCPMSS: Only works on TCP SYN packets [ 1747.435179][T19298] loop1: detected capacity change from 0 to 40427 [ 1747.549791][T19030] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1749.246721][T11059] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1749.645397][T11059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.662830][T11059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.679590][T11059] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1749.699404][T11059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.715346][T11059] usb 2-1: config 0 descriptor?? [ 1750.631423][T11059] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 1750.655488][T11059] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0012/input/input16 [ 1751.023679][T11059] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1751.080480][T11059] usb 2-1: USB disconnect, device number 51 [ 1751.314173][T19372] fido_id[19372]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1754.024108][T19405] loop1: detected capacity change from 0 to 256 [ 1755.657077][T19428] fuse: Bad value for 'fd' [ 1757.767406][T19459] fuse: Bad value for 'fd' [ 1758.718860][T19494] loop5: detected capacity change from 0 to 512 [ 1758.894676][T19494] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1758.906761][T19494] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1758.917054][T19494] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3744: Corrupt directory, running e2fsck is recommended [ 1758.933908][T19494] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1758.968867][T19494] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2244: inode #15: comm syz.5.3744: corrupted in-inode xattr: invalid ea_ino [ 1758.992966][T19494] EXT4-fs (loop5): Remounting filesystem read-only [ 1759.007461][T19494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1759.051176][T19494] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1759.062953][T19494] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 1759.073425][T19494] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.3744: Corrupt directory, running e2fsck is recommended [ 1759.454779][T18180] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.094436][T19516] syz.1.3747[19516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.102985][T19516] syz.1.3747[19516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.239816][T19516] loop1: detected capacity change from 0 to 256 [ 1760.258774][T19516] exfat: Deprecated parameter 'utf8' [ 1760.264183][T19516] exfat: Deprecated parameter 'utf8' [ 1760.537033][T19519] syz.3.3757[19519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1760.537908][T19519] syz.3.3757[19519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1766.215647][T19566] loop1: detected capacity change from 0 to 512 [ 1767.380387][T19575] syz.3.3772[19575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1767.380532][T19575] syz.3.3772[19575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1767.407438][T19577] syz.0.3773[19577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1767.419324][T19577] syz.0.3773[19577] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1769.530173][T19596] netlink: 'syz.1.3787': attribute type 9 has an invalid length. [ 1769.563196][T19596] netlink: 'syz.1.3787': attribute type 6 has an invalid length. [ 1772.098187][T19620] fuse: Unknown parameter 'user_id00000000000000000000' [ 1772.435321][T19625] wg2: entered promiscuous mode [ 1772.443648][T19625] wg2: entered allmulticast mode [ 1772.831422][T19643] fuse: Unknown parameter 'user_id00000000000000000000' [ 1781.141385][T19751] veth0_vlan: entered allmulticast mode [ 1784.671234][T19789] fuse: Unknown parameter 'grou00000000000000000000' [ 1784.928096][T19797] wg2: left promiscuous mode [ 1784.947557][T19797] wg2: left allmulticast mode [ 1784.970713][T19799] wg2: entered promiscuous mode [ 1784.984709][T19799] wg2: entered allmulticast mode [ 1787.499340][T19829] fuse: Unknown parameter 'group_i00000000000000000000' [ 1787.818891][T19837] sit0: entered promiscuous mode [ 1787.835300][T19837] sit0: entered allmulticast mode [ 1787.963869][T19840] fuse: Unknown parameter '0x0000000000000005' [ 1788.660085][T19857] fuse: Unknown parameter 'group_i00000000000000000000' [ 1789.572677][T19872] fuse: Unknown parameter '0x0000000000000005' [ 1791.581434][T19889] fuse: Unknown parameter 'group_i00000000000000000000' [ 1792.196165][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.202544][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.647569][T19910] bridge0: entered allmulticast mode [ 1793.871683][T18426] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1794.103448][T18426] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.114226][T18426] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1794.141045][T18426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.154811][T18426] usb 2-1: config 0 descriptor?? [ 1794.178584][T18426] usb 2-1: bad CDC descriptors [ 1794.387125][T18426] usb 2-1: USB disconnect, device number 52 [ 1796.006593][T19920] fuse: Unknown parameter 'group_id00000000000000000000' [ 1798.362234][T19910] bridge_slave_1: left allmulticast mode [ 1798.368742][T19910] bridge_slave_1: left promiscuous mode [ 1798.377431][T19910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.393277][T19910] bridge_slave_0: left allmulticast mode [ 1798.398985][T19910] bridge_slave_0: left promiscuous mode [ 1798.405125][T19910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.948236][T19936] loop1: detected capacity change from 0 to 256 [ 1799.005016][T19030] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1799.138838][T19937] sit0: entered promiscuous mode [ 1799.161518][T19937] sit0: entered allmulticast mode [ 1801.699364][T19980] fuse: Unknown parameter 'group_id00000000000000000000' [ 1803.653418][T20005] loop5: detected capacity change from 0 to 256 [ 1803.706600][T20005] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1803.760094][T18136] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1803.790967][T20005] syz.5.3925: attempt to access beyond end of device [ 1803.790967][T20005] loop5: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1803.819999][T20005] syz.5.3925: attempt to access beyond end of device [ 1803.819999][T20005] loop5: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1803.861807][ T28] audit: type=1800 audit(1751868168.803:506): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3925" name="file1" dev="loop5" ino=1048651 res=0 errno=0 [ 1804.514845][T20010] syz.3.3926[20010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1804.514995][T20010] syz.3.3926[20010] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1804.795802][T18136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1804.851906][T18136] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1804.887676][T18136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.914668][T18136] usb 2-1: config 0 descriptor?? [ 1804.938273][T18136] usb 2-1: bad CDC descriptors [ 1805.786182][T18270] usb 2-1: USB disconnect, device number 53 [ 1806.746393][T20032] syz.0.3933[20032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1806.746541][T20032] syz.0.3933[20032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1806.939914][T20035] fuse: Bad value for 'group_id' [ 1809.289692][T20051] syz.3.3940[20051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1809.289835][T20051] syz.3.3940[20051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1811.506983][T20071] fuse: Bad value for 'group_id' [ 1816.364943][T20104] fuse: Bad value for 'user_id' [ 1823.087624][T20166] xt_TCPMSS: Only works on TCP SYN packets [ 1823.158064][T20166] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1823.204416][T20166] 0猉功D: entered promiscuous mode [ 1823.215541][T20166] 0猉功D: left allmulticast mode [ 1823.324702][T20169] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3975'. [ 1823.338579][T20169] 1猉功D: renamed from 30猉功D [ 1823.365299][T20169] 1猉功D: left promiscuous mode [ 1823.394483][T20169] 1猉功D: entered allmulticast mode [ 1823.417557][T20169] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 1823.425395][T20174] syz.1.3974[20174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1823.434127][T20174] syz.1.3974[20174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1823.441180][T20173] loop5: detected capacity change from 0 to 256 [ 1823.564387][T20173] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 1823.638219][T20173] syz.5.3978: attempt to access beyond end of device [ 1823.638219][T20173] loop5: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 1823.698472][T20173] syz.5.3978: attempt to access beyond end of device [ 1823.698472][T20173] loop5: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 1823.752947][ T28] audit: type=1800 audit(1751868188.693:507): pid=20173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3978" name="file1" dev="loop5" ino=1048652 res=0 errno=0 [ 1824.075056][T20177] ------------[ cut here ]------------ [ 1824.080678][T20177] Please remove unsupported % in format string [ 1824.088080][T20177] WARNING: CPU: 0 PID: 20177 at lib/vsprintf.c:2679 format_decode+0xcfd/0x13d0 [ 1824.097245][T20177] Modules linked in: [ 1824.101193][T20177] CPU: 0 PID: 20177 Comm: syz.5.3979 Not tainted 6.6.96-syzkaller #0 [ 1824.109365][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1824.119519][T20177] RIP: 0010:format_decode+0xcfd/0x13d0 [ 1824.125108][T20177] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 1824.144876][T20177] RSP: 0018:ffffc9000c23f888 EFLAGS: 00010246 [ 1824.151002][T20177] RAX: 8d57d87b398c1f00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1824.159084][T20177] RDX: ffffc9000e140000 RSI: 00000000000033bf RDI: 00000000000033c0 [ 1824.167154][T20177] RBP: ffff0000ffffff00 R08: ffffc9000c23f487 R09: 1ffff92001847e90 [ 1824.175236][T20177] R10: dffffc0000000000 R11: fffff52001847e91 R12: 1ffff92001847f55 [ 1824.183303][T20177] R13: 0000000000000000 R14: ffffc9000c23faac R15: ffff0a00ffffff00 [ 1824.191330][T20177] FS: 00007f2fbe5256c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1824.200372][T20177] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1824.207051][T20177] CR2: 00007f2fbe524f98 CR3: 0000000076df2000 CR4: 00000000003506f0 [ 1824.215140][T20177] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1824.223199][T20177] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1824.231224][T20177] Call Trace: [ 1824.234608][T20177] [ 1824.237600][T20177] bstr_printf+0xc4/0xf90 [ 1824.241981][T20177] ? lock_chain_count+0x20/0x20 [ 1824.246932][T20177] ? bpf_trace_printk+0xc2/0x190 [ 1824.251950][T20177] bpf_trace_printk+0x10f/0x190 [ 1824.256914][T20177] ? ktime_get+0x7f/0x280 [ 1824.261301][T20177] ? bpf_probe_write_user+0xe0/0xe0 [ 1824.266630][T20177] ? bpf_prog_test_run+0x321/0x390 [ 1824.271800][T20177] ? __local_bh_disable_ip+0xf2/0x190 [ 1824.277277][T20177] ? read_tsc+0x9/0x20 [ 1824.281393][T20177] ? ktime_get+0x24b/0x280 [ 1824.285916][T20177] ? bpf_test_run+0x1da/0x8a0 [ 1824.290648][T20177] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 1824.296217][T20177] bpf_test_run+0x560/0x8a0 [ 1824.300792][T20177] ? bpf_test_run+0x1da/0x8a0 [ 1824.305590][T20177] ? convert___skb_to_skb+0x590/0x590 [ 1824.311023][T20177] ? eth_get_headlen+0x200/0x200 [ 1824.316085][T20177] ? slab_build_skb+0x25f/0x3f0 [ 1824.321002][T20177] ? convert___skb_to_skb+0x3d/0x590 [ 1824.326402][T20177] bpf_prog_test_run_skb+0xa67/0x11c0 [ 1824.331862][T20177] ? cpu_online+0x60/0x60 [ 1824.336296][T20177] bpf_prog_test_run+0x321/0x390 [ 1824.341292][T20177] __sys_bpf+0x440/0x800 [ 1824.345655][T20177] ? bpf_link_show_fdinfo+0x350/0x350 [ 1824.351095][T20177] ? lock_chain_count+0x20/0x20 [ 1824.356060][T20177] __x64_sys_bpf+0x7c/0x90 [ 1824.360609][T20177] do_syscall_64+0x55/0xb0 [ 1824.365115][T20177] ? clear_bhb_loop+0x40/0x90 [ 1824.369842][T20177] ? clear_bhb_loop+0x40/0x90 [ 1824.374616][T20177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.380563][T20177] RIP: 0033:0x7f2fbd78e929 [ 1824.385054][T20177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.404756][T20177] RSP: 002b:00007f2fbe525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.413265][T20177] RAX: ffffffffffffffda RBX: 00007f2fbd9b5fa0 RCX: 00007f2fbd78e929 [ 1824.421292][T20177] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1824.429357][T20177] RBP: 00007f2fbd810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1824.437421][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.445494][T20177] R13: 0000000000000000 R14: 00007f2fbd9b5fa0 R15: 00007ffc56558e08 [ 1824.453587][T20177] [ 1824.456643][T20177] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1824.463959][T20177] CPU: 0 PID: 20177 Comm: syz.5.3979 Not tainted 6.6.96-syzkaller #0 [ 1824.472069][T20177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1824.482170][T20177] Call Trace: [ 1824.485490][T20177] [ 1824.488456][T20177] dump_stack_lvl+0x16c/0x230 [ 1824.493193][T20177] ? show_regs_print_info+0x20/0x20 [ 1824.498437][T20177] ? load_image+0x3b0/0x3b0 [ 1824.503008][T20177] panic+0x2c0/0x710 [ 1824.506957][T20177] ? bpf_jit_dump+0xd0/0xd0 [ 1824.511545][T20177] __warn+0x2e0/0x470 [ 1824.515565][T20177] ? format_decode+0xcfd/0x13d0 [ 1824.520460][T20177] ? format_decode+0xcfd/0x13d0 [ 1824.525384][T20177] report_bug+0x2be/0x4f0 [ 1824.529759][T20177] ? format_decode+0xcfd/0x13d0 [ 1824.534655][T20177] ? format_decode+0xcfd/0x13d0 [ 1824.539553][T20177] ? format_decode+0xcff/0x13d0 [ 1824.544442][T20177] handle_bug+0xcf/0x120 [ 1824.548746][T20177] exc_invalid_op+0x1a/0x50 [ 1824.553294][T20177] asm_exc_invalid_op+0x1a/0x20 [ 1824.558190][T20177] RIP: 0010:format_decode+0xcfd/0x13d0 [ 1824.563697][T20177] Code: ff e8 17 5a 26 f7 c6 05 28 f0 d5 03 01 41 0f b6 04 1c 84 c0 0f 85 be 06 00 00 41 0f b6 36 48 c7 c7 40 3f c9 8b e8 63 be f0 f6 <0f> 0b e9 79 fe ff ff 48 8b 0c 24 80 e1 07 38 c1 0f 8c 46 f3 ff ff [ 1824.583354][T20177] RSP: 0018:ffffc9000c23f888 EFLAGS: 00010246 [ 1824.589550][T20177] RAX: 8d57d87b398c1f00 RBX: dffffc0000000000 RCX: 0000000000080000 [ 1824.597546][T20177] RDX: ffffc9000e140000 RSI: 00000000000033bf RDI: 00000000000033c0 [ 1824.605562][T20177] RBP: ffff0000ffffff00 R08: ffffc9000c23f487 R09: 1ffff92001847e90 [ 1824.613559][T20177] R10: dffffc0000000000 R11: fffff52001847e91 R12: 1ffff92001847f55 [ 1824.621561][T20177] R13: 0000000000000000 R14: ffffc9000c23faac R15: ffff0a00ffffff00 [ 1824.629579][T20177] ? format_decode+0xcfd/0x13d0 [ 1824.634459][T20177] bstr_printf+0xc4/0xf90 [ 1824.638807][T20177] ? lock_chain_count+0x20/0x20 [ 1824.643678][T20177] ? bpf_trace_printk+0xc2/0x190 [ 1824.648642][T20177] bpf_trace_printk+0x10f/0x190 [ 1824.653532][T20177] ? ktime_get+0x7f/0x280 [ 1824.657876][T20177] ? bpf_probe_write_user+0xe0/0xe0 [ 1824.663096][T20177] ? bpf_prog_test_run+0x321/0x390 [ 1824.668220][T20177] ? __local_bh_disable_ip+0xf2/0x190 [ 1824.673607][T20177] ? read_tsc+0x9/0x20 [ 1824.677691][T20177] ? ktime_get+0x24b/0x280 [ 1824.682120][T20177] ? bpf_test_run+0x1da/0x8a0 [ 1824.686808][T20177] bpf_prog_12183cdb1cd51dab+0x36/0x3a [ 1824.692281][T20177] bpf_test_run+0x560/0x8a0 [ 1824.696809][T20177] ? bpf_test_run+0x1da/0x8a0 [ 1824.701538][T20177] ? convert___skb_to_skb+0x590/0x590 [ 1824.706929][T20177] ? eth_get_headlen+0x200/0x200 [ 1824.711893][T20177] ? slab_build_skb+0x25f/0x3f0 [ 1824.716774][T20177] ? convert___skb_to_skb+0x3d/0x590 [ 1824.722076][T20177] bpf_prog_test_run_skb+0xa67/0x11c0 [ 1824.727475][T20177] ? cpu_online+0x60/0x60 [ 1824.731824][T20177] bpf_prog_test_run+0x321/0x390 [ 1824.736781][T20177] __sys_bpf+0x440/0x800 [ 1824.741041][T20177] ? bpf_link_show_fdinfo+0x350/0x350 [ 1824.746440][T20177] ? lock_chain_count+0x20/0x20 [ 1824.751337][T20177] __x64_sys_bpf+0x7c/0x90 [ 1824.755771][T20177] do_syscall_64+0x55/0xb0 [ 1824.760204][T20177] ? clear_bhb_loop+0x40/0x90 [ 1824.764894][T20177] ? clear_bhb_loop+0x40/0x90 [ 1824.769588][T20177] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.775501][T20177] RIP: 0033:0x7f2fbd78e929 [ 1824.779927][T20177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.799658][T20177] RSP: 002b:00007f2fbe525038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.808092][T20177] RAX: ffffffffffffffda RBX: 00007f2fbd9b5fa0 RCX: 00007f2fbd78e929 [ 1824.816211][T20177] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1824.824206][T20177] RBP: 00007f2fbd810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1824.832199][T20177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.840182][T20177] R13: 0000000000000000 R14: 00007f2fbd9b5fa0 R15: 00007ffc56558e08 [ 1824.848179][T20177] [ 1824.851566][T20177] Kernel Offset: disabled [ 1824.855975][T20177] Rebooting in 86400 seconds..