last executing test programs: 5m26.401712217s ago: executing program 0 (id=660): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x194, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @random="5187bed2e296", {0x7, 0xf91}, @value=@ver_80211n={0x0, 0x6e, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x54, @val={0x10, 0x1, 0x50}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xd5, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339a9001075d96398a054919d1d2e964f97e1"}}, @val={0x25, 0x3, {0x0, 0x7, 0x7}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x194}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m25.251951175s ago: executing program 0 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) 5m21.885960465s ago: executing program 0 (id=679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x1) flock(r1, 0x1) 5m19.65591883s ago: executing program 0 (id=685): r0 = socket$inet6(0xa, 0x80002, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x30000, 0x7fffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) fanotify_init(0x0, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x10088, &(0x7f0000000840)={[{@test_dummy_encryption}, {@init_itable}, {@resuid}]}, 0x1, 0x460, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x94) 5m18.381297689s ago: executing program 0 (id=691): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x5, 0x5, 0x90, 0xffffffff, @vifc_lcl_ifindex, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r3, &(0x7f0000000300)="a7d1049379c7b742a2f4627dc8e78ee2c657e4d98e1390bcdd", &(0x7f0000000340)=""/143}, 0x20) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000180)=0x40) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000400bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff", @ANYRESDEC=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0xf, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5m18.179133422s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x5c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") 5m8.419606119s ago: executing program 2 (id=717): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x2002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01007f00000100"/20, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000000000000002004e23e0000001"], 0x90) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfd, 0x1f2, &(0x7f0000000940)="$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") 5m7.874689018s ago: executing program 2 (id=720): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c407290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab1", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 5m7.756395509s ago: executing program 2 (id=722): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000280)='f2fs_file_write_iter\x00', 0xffffffffffffffff, 0x0, 0x7f}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 5m2.941908972s ago: executing program 32 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x5c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") 5m2.629824537s ago: executing program 2 (id=734): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000a80)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c407290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab1", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 5m2.297585722s ago: executing program 2 (id=737): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x1a0, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @random="5187bed2e296", {0x7, 0xf91}, @value=@ver_80211n={0x0, 0x6e, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x54, @val={0x10, 0x1, 0x50}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x14d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0xdf, {0x5, 0x97, 0x5, "840713d363c6724d98bf35001c09bfc3ef576ef4cbdedd44f1719d86e7202598ad5ab2b4e5dff62ed61751909b8422ef7be7fa9aeee03cce1881434df3bc53402458604b55890de2298e22ae5eb55d3e14358d8172d3caffea4c3165a9936a26aa4560071601df38cfb687a86ed61c704879c02c575dcc5f792ca84bd70fc9a24035370ffe3e5d14541c8831eed97732a996891591391a05b51387596e4634cf9ec3255fc6c4d68b86c2b73f110f4dc0b014af75ddf00689ee90b8c538f8b8c339a9001075d96398a054919d1d2e964f97e1c3fa5f18c163f39db249"}}, @val={0x25, 0x3, {0x0, 0x7, 0x7}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m0.003992746s ago: executing program 2 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000500)='smaps_rollup\x00') 4m44.337970593s ago: executing program 33 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000500)='smaps_rollup\x00') 25.715844511s ago: executing program 6 (id=1558): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x54}}, 0x40080) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 24.343653151s ago: executing program 6 (id=1560): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd725}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac"], 0x1c) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local, @multicast1}, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x519, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) fsetxattr(r4, &(0x7f00000000c0)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 13.83191193s ago: executing program 5 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r5, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFMTU(r6, 0x8995, &(0x7f0000000180)={'veth0_to_bond\x00', 0xe4c0000}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x417, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x60}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @broadcast}}}}, 0x0) 11.459970566s ago: executing program 4 (id=1589): syz_usb_connect(0x3, 0x24, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000180)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) 11.277957859s ago: executing program 5 (id=1590): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000003c0)={[{@noinline_xattr}, {@four_active_logs}, {@fsync_mode_strict}, {@jqfmt_vfsv1}, {@noinline_data}, {@user_xattr}, {@checkpoint_diasble}, {@fastboot}, {@four_active_logs}, {@discard_unit_section}, {@discard_unit_segment}, {@nobarrier}, {@prjjquota={'prjjquota', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}, 0x21, 0x552d, &(0x7f0000002b00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x43451) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) 10.57828738s ago: executing program 4 (id=1592): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x8521, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) 10.393828003s ago: executing program 6 (id=1593): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r4, r0, 0x0) 10.059892608s ago: executing program 6 (id=1594): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001"], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r1}, 0x38) memfd_create(&(0x7f00000009c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a57fd57b", @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4804}, 0x801) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) 8.108459517s ago: executing program 4 (id=1599): bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000280)='f2fs_file_write_iter\x00', 0xffffffffffffffff, 0x0, 0x7f}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) 8.040545338s ago: executing program 3 (id=1600): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x54}}, 0x40080) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 6.861023586s ago: executing program 3 (id=1602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x18, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 6.61196104s ago: executing program 5 (id=1603): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 6.526458401s ago: executing program 1 (id=1604): socket$nl_route(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r3, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x0, 0x0) 5.555657886s ago: executing program 5 (id=1605): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000003fffffff80000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r9, @ANYRES16=r3, @ANYRES64=r8], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa352}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, {0x0, 0x0, 0x0, 0xdedb, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000340)="185c990e932856dbcb92d168408a773d2268b752") r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.518615006s ago: executing program 3 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2002, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x30) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 5.155955582s ago: executing program 6 (id=1607): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffe6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x8521, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbf8, 0x2000}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) 5.155612002s ago: executing program 3 (id=1608): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x477, 0x111500) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 5.012377264s ago: executing program 1 (id=1609): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) connect$netlink(r1, 0x0, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0x14}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) 3.137442372s ago: executing program 1 (id=1610): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x810000, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYBLOB="9be85263ed40a6f921f127b669d2720653cc920c2356a71ac5d524404987a170159a8500cd6a5dc705874c797d77b79a23f5812beb4a8d713ff8af85a2909859d83e2db8ee3af2a95a2f295bb1114b45a99dd2b325a870ab19570e2c185e39d887f75ed2457c72abf586e07337b03ff17f6ed3e12309f36e0be01d820d716a1997ebfa63b50be1cf2e11dab7e3d39f1dac980c3f80e9ef3e16e356d60c1bc70175609f7b20ff702a02c5efa50922d04d86e989f087679b06f795eeb0adcda5f2593d59d2a968ea22b6b7dfdf9f60515416fbf0c1833a917c5d4c30c1f4e6bb310e27", @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES16, @ANYRESDEC], 0x1, 0x150c, &(0x7f0000002840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 2.933352475s ago: executing program 1 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1, 0x1, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8936, &(0x7f0000000000)) 2.862550516s ago: executing program 5 (id=1612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001900090400000000000000000a"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r5) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="a57fd57b", @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4804}, 0x801) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x4) 1.480298497s ago: executing program 1 (id=1613): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0x54}}, 0x40080) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000180), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) 912.265576ms ago: executing program 6 (id=1614): socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x10880, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r0], 0x0) 287.931866ms ago: executing program 1 (id=1615): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0x2e59}], 0x1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, 0x0, 0x0) write(r1, &(0x7f0000000380)="240000001e005f0214e0ffffffffff8dd5d6d87c998ff807000000000000000000000003", 0x7e) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c5) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") 139.154038ms ago: executing program 4 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 3 (id=1617): r0 = syz_io_uring_setup(0x4c40, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = eventfd2(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T4307] lenovo: probe of 0003:17EF:6047.0001 failed with error -22 [ 89.780167][ T4354] bridge0: port 3(syz_tun) entered disabled state [ 89.790327][ T4307] usb 2-1: USB disconnect, device number 2 [ 89.817211][ T4354] device syz_tun entered promiscuous mode [ 89.823851][ T4354] bridge0: port 3(syz_tun) entered blocking state [ 89.830997][ T4354] bridge0: port 3(syz_tun) entered forwarding state [ 89.869983][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.023996][ T4359] loop0: detected capacity change from 0 to 512 [ 90.261687][ T4359] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1: invalid block [ 90.282119][ T4359] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 10 (level 1) [ 90.298561][ T4359] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 8 (level 1) [ 90.321383][ T4359] EXT4-fs (loop0): 1 truncate cleaned up [ 90.327444][ T4359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.022147][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.666254][ T7] cfg80211: failed to load regulatory.db [ 93.700996][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109024][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 94.434492][ T4390] loop0: detected capacity change from 0 to 1024 [ 94.471271][ T4390] ======================================================= [ 94.471271][ T4390] WARNING: The mand mount option has been deprecated and [ 94.471271][ T4390] and is ignored by this kernel. Remove the mand [ 94.471271][ T4390] option from the mount to silence this warning. [ 94.471271][ T4390] ======================================================= [ 94.472037][ T26] audit: type=1326 audit(1742989786.128:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 94.694053][ T26] audit: type=1326 audit(1742989786.218:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 94.714801][ T4390] EXT4-fs: Ignoring removed nobh option [ 94.752818][ T4390] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.770210][ T4398] device veth1_macvtap left promiscuous mode [ 94.790604][ T26] audit: type=1326 audit(1742989786.218:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 94.797165][ T4398] device macsec0 entered promiscuous mode [ 94.849361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 94.906943][ T4390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.933948][ T26] audit: type=1326 audit(1742989786.218:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.054721][ T26] audit: type=1326 audit(1742989786.218:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.120298][ T26] audit: type=1326 audit(1742989786.228:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.277462][ T4403] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.10: Allocating blocks 385-513 which overlap fs metadata [ 95.295589][ T26] audit: type=1326 audit(1742989786.228:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.328850][ T4403] EXT4-fs (loop0): Remounting filesystem read-only [ 95.362398][ T26] audit: type=1326 audit(1742989786.228:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.545169][ T26] audit: type=1326 audit(1742989786.228:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 95.643118][ T26] audit: type=1326 audit(1742989786.228:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4392 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 99.089293][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 99.971108][ T4432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 102.525157][ T4457] device bridge1 entered promiscuous mode [ 102.625082][ T4308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.814986][ T4308] usb 5-1: Using ep0 maxpacket: 16 [ 102.878953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 102.887476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 102.895795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.904862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.913572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.921893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.930163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.975667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 102.984205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 103.932920][ T4269] Bluetooth: hci5: sending frame failed (-49) [ 103.948177][ T4276] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 104.015313][ T4308] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 104.135479][ T4308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.218886][ T4308] usb 5-1: config 0 descriptor?? [ 104.252601][ T4472] device veth1_macvtap left promiscuous mode [ 104.284549][ T4472] device macsec0 entered promiscuous mode [ 104.638238][ T4308] koneplus 0003:1E7D:2E22.0002: report_id 0 is invalid [ 104.663369][ T4308] koneplus 0003:1E7D:2E22.0002: item 0 0 1 8 parsing failed [ 104.712850][ T4308] koneplus 0003:1E7D:2E22.0002: parse failed [ 104.752673][ T4308] koneplus: probe of 0003:1E7D:2E22.0002 failed with error -22 [ 105.733844][ T4308] usb 5-1: USB disconnect, device number 2 [ 106.078718][ T4501] loop3: detected capacity change from 0 to 512 [ 107.116933][ T4511] bridge0: port 3(syz_tun) entered blocking state [ 107.123796][ T4511] bridge0: port 3(syz_tun) entered disabled state [ 107.133888][ T4511] device syz_tun entered promiscuous mode [ 107.188258][ T4501] EXT4-fs (loop3): Test dummy encryption mode enabled [ 107.195239][ T4501] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.196492][ T4511] bridge0: port 3(syz_tun) entered blocking state [ 107.208430][ T4501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.214912][ T4511] bridge0: port 3(syz_tun) entered forwarding state [ 107.283639][ T4501] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.46: bad orphan inode 131083 [ 107.298484][ T4501] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 107.324594][ T4498] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.46: invalid block [ 107.642379][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 108.403537][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 108.403554][ T26] audit: type=1326 audit(1742989800.058:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.487776][ T26] audit: type=1326 audit(1742989800.098:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.513212][ T26] audit: type=1326 audit(1742989800.108:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.545854][ T26] audit: type=1326 audit(1742989800.108:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.703237][ T26] audit: type=1326 audit(1742989800.108:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.813444][ T26] audit: type=1326 audit(1742989800.108:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 108.948516][ T26] audit: type=1326 audit(1742989800.108:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 109.098522][ T4543] loop1: detected capacity change from 0 to 2048 [ 109.176611][ T26] audit: type=1326 audit(1742989800.108:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 109.205083][ T26] audit: type=1326 audit(1742989800.118:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 109.285137][ T4554] device veth1_to_team entered promiscuous mode [ 109.296218][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.397533][ T26] audit: type=1326 audit(1742989800.118:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4528 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 109.646288][ T4539] device veth1_to_team left promiscuous mode [ 109.786143][ T4261] EXT4-fs (loop1): unmounting filesystem. [ 110.221010][ T4307] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.525419][ T4572] loop2: detected capacity change from 0 to 512 [ 110.576569][ T4569] IPv6: syztnl0: Disabled Multicast RS [ 110.620904][ T4572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.627826][ T4572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 110.677936][ T4572] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.68: bad orphan inode 131083 [ 110.688778][ T4572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 110.701087][ T4572] EXT4-fs error (device loop2): __ext4_iget:5055: inode #15: block 1803188595: comm syz.2.68: invalid block [ 110.776776][ T4307] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.808412][ T4307] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.834648][ T4307] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.849050][ T4307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.858997][ T4307] usb 2-1: SerialNumber: syz [ 111.040883][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 111.082187][ T4307] usb 2-1: 0:2 : does not exist [ 111.265248][ T4307] usb 2-1: USB disconnect, device number 3 [ 112.405539][ T4596] loop3: detected capacity change from 0 to 16 [ 112.908028][ T4596] erofs: (device loop3): mounted with root inode @ nid 36. [ 114.779034][ T4615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 114.788084][ T4615] Zero length message leads to an empty skb [ 115.939292][ T4626] loop0: detected capacity change from 0 to 512 [ 117.012652][ T4626] EXT4-fs (loop0): 1 orphan inode deleted [ 117.018555][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.029331][ T4626] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.036381][ T4507] __quota_error: 53 callbacks suppressed [ 118.036403][ T4507] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 118.667389][ T4507] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:12: Failed to release dquot type 1 [ 118.804624][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 119.385268][ T4307] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.590290][ T4307] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.619775][ T4307] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.652987][ T4307] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 119.692149][ T4307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 119.835046][ T4307] usb 1-1: SerialNumber: syz [ 120.878019][ T4307] usb 1-1: 0:2 : does not exist [ 120.914209][ T4307] usb 1-1: USB disconnect, device number 2 [ 122.731309][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.219801][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 124.190557][ T4699] loop0: detected capacity change from 0 to 512 [ 124.268923][ T4699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.363809][ T4699] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 124.481219][ T4699] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.103: invalid indirect mapped block 4294967295 (level 0) [ 124.573474][ T4699] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.103: invalid indirect mapped block 4294967295 (level 1) [ 124.630280][ T4699] EXT4-fs (loop0): 1 orphan inode deleted [ 124.640407][ T4699] EXT4-fs (loop0): 1 truncate cleaned up [ 124.646262][ T4699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 124.803490][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 125.518546][ T4733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.115'. [ 128.208953][ T26] audit: type=1326 audit(1742989819.868:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.272339][ T26] audit: type=1326 audit(1742989819.868:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.340270][ T26] audit: type=1326 audit(1742989819.898:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.433647][ T26] audit: type=1326 audit(1742989819.928:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.489580][ T26] audit: type=1326 audit(1742989819.958:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.556393][ T26] audit: type=1326 audit(1742989819.958:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.620668][ T26] audit: type=1326 audit(1742989819.958:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.676670][ T26] audit: type=1326 audit(1742989819.958:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.753522][ T26] audit: type=1326 audit(1742989819.958:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 128.794947][ T26] audit: type=1326 audit(1742989819.958:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4756 comm="syz.2.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f878d169 code=0x7ffc0000 [ 129.065204][ T4775] syz.4.126[4775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.065357][ T4775] syz.4.126[4775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 129.370868][ T4777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 130.216400][ T4779] loop0: detected capacity change from 0 to 512 [ 130.242639][ T4779] EXT4-fs: Ignoring removed orlov option [ 130.328892][ T4779] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 130.346057][ T4779] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.157481][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 132.897778][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904647][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.911404][ T4307] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.119459][ T4307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.135627][ T4307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 133.164423][ T4307] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 133.193062][ T4307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 133.211440][ T4307] usb 4-1: SerialNumber: syz [ 133.216383][ T26] kauditd_printk_skb: 1210 callbacks suppressed [ 133.216397][ T26] audit: type=1326 audit(1742989824.878:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.290689][ T26] audit: type=1326 audit(1742989824.918:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.374412][ T26] audit: type=1326 audit(1742989824.918:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.455459][ T26] audit: type=1326 audit(1742989824.918:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.486874][ T4307] usb 4-1: 0:2 : does not exist [ 133.535596][ T4307] usb 4-1: USB disconnect, device number 2 [ 133.577982][ T26] audit: type=1326 audit(1742989824.918:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.679346][ T26] audit: type=1326 audit(1742989824.918:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.730993][ T4813] loop0: detected capacity change from 0 to 512 [ 133.737661][ T26] audit: type=1326 audit(1742989824.918:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.775846][ T4813] EXT4-fs: inline encryption not supported [ 133.784503][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.792541][ T26] audit: type=1326 audit(1742989824.918:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.872248][ T4813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.902777][ T4813] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.913580][ T26] audit: type=1326 audit(1742989824.918:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 133.936725][ T26] audit: type=1326 audit(1742989824.918:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4782 comm="syz.2.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7f8729359 code=0x7ffc0000 [ 135.436881][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 138.287310][ T4865] loop0: detected capacity change from 0 to 512 [ 138.631773][ T4865] EXT4-fs (loop0): 1 orphan inode deleted [ 138.637869][ T4865] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.654990][ T4865] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.835089][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 138.835134][ T26] audit: type=1800 audit(1742989830.458:1410): pid=4865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 139.176051][ T4256] EXT4-fs (loop0): unmounting filesystem. [ 140.883384][ T4879] loop3: detected capacity change from 0 to 512 [ 141.005350][ T4879] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 141.289796][ T4879] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.329704][ T4879] EXT4-fs error (device loop3): ext4_quota_enable:6982: comm syz.3.165: Bad quota inum: 64, type: 0 [ 141.818987][ T4879] EXT4-fs (loop3): Remounting filesystem read-only [ 142.005138][ T4879] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 142.063089][ T4879] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 142.076879][ T4879] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 142.376155][ T26] audit: type=1326 audit(1742989834.008:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 142.420611][ T26] audit: type=1326 audit(1742989834.018:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.280452][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 143.564294][ T26] audit: type=1326 audit(1742989834.018:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.594703][ T26] audit: type=1326 audit(1742989834.018:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.617802][ T26] audit: type=1326 audit(1742989834.018:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.640589][ T26] audit: type=1326 audit(1742989834.018:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.684883][ T26] audit: type=1326 audit(1742989834.018:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 143.778707][ T26] audit: type=1326 audit(1742989834.018:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 144.402664][ T4927] loop3: detected capacity change from 0 to 512 [ 149.553520][ T4927] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 149.624324][ T26] audit: type=1326 audit(1742989834.018:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 149.948419][ T26] audit: type=1326 audit(1742989834.018:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 149.992640][ T26] audit: type=1326 audit(1742989834.018:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.015319][ T26] audit: type=1326 audit(1742989834.018:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.038457][ T26] audit: type=1326 audit(1742989834.018:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.339054][ T26] audit: type=1326 audit(1742989834.018:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.364104][ T26] audit: type=1326 audit(1742989834.018:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.885022][ T26] audit: type=1326 audit(1742989834.018:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 150.946618][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 151.012009][ T26] audit: type=1326 audit(1742989834.088:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 151.318351][ T26] audit: type=1326 audit(1742989834.088:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4906 comm="syz.0.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x7ffc0000 [ 153.832483][ T4951] netlink: 96 bytes leftover after parsing attributes in process `syz.0.184'. [ 158.171502][ T5005] capability: warning: `syz.2.198' uses 32-bit capabilities (legacy support in use) [ 160.404680][ T5025] loop3: detected capacity change from 0 to 128 [ 162.326548][ T5025] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.338286][ T5025] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.388171][ T5025] IPv6: NLM_F_REPLACE set, but no existing node found! [ 165.332109][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 165.359352][ T5053] device veth1_to_hsr entered promiscuous mode [ 165.367236][ T5052] device veth1_to_hsr left promiscuous mode [ 168.409483][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 168.409500][ T26] audit: type=1326 audit(1742989860.068:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 168.460389][ T26] audit: type=1326 audit(1742989860.108:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 168.551443][ T26] audit: type=1326 audit(1742989860.108:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 168.743491][ T5091] syz.2.222[5091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.750465][ T5091] syz.2.222[5091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.764319][ T26] audit: type=1326 audit(1742989860.118:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.345821][ T26] audit: type=1326 audit(1742989860.118:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.522436][ T26] audit: type=1326 audit(1742989860.118:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.635061][ T5100] device veth1_to_hsr entered promiscuous mode [ 170.685606][ T26] audit: type=1326 audit(1742989860.118:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.722628][ T26] audit: type=1326 audit(1742989860.118:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.827142][ T26] audit: type=1326 audit(1742989860.118:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 170.966509][ T26] audit: type=1326 audit(1742989860.118:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5081 comm="syz.4.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 171.922535][ T5097] device veth1_to_hsr left promiscuous mode [ 172.987564][ T5122] netlink: 1704 bytes leftover after parsing attributes in process `syz.1.230'. [ 173.956258][ T5144] loop3: detected capacity change from 0 to 512 [ 175.166281][ T5144] EXT4-fs (loop3): 1 orphan inode deleted [ 175.172159][ T5144] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.185199][ T5144] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.005698][ T4326] __quota_error: 44 callbacks suppressed [ 176.005718][ T4326] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 176.142578][ T4326] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:7: Failed to release dquot type 1 [ 176.316174][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 178.154697][ T5156] netlink: 1704 bytes leftover after parsing attributes in process `syz.2.243'. [ 178.200733][ T5161] loop3: detected capacity change from 0 to 1024 [ 178.366334][ T5161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 178.603765][ T5168] device veth1_to_hsr entered promiscuous mode [ 178.613913][ T5167] device veth1_to_hsr left promiscuous mode [ 178.731667][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.241'. [ 179.284227][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 179.756216][ T5182] loop3: detected capacity change from 0 to 256 [ 181.039628][ T5182] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 182.695612][ T5192] loop3: detected capacity change from 0 to 164 [ 184.424939][ T5201] overlayfs: failed to clone upperpath [ 185.638651][ T5210] device veth1_to_hsr entered promiscuous mode [ 185.663780][ T5209] device veth1_to_hsr left promiscuous mode [ 187.130818][ T5225] netlink: 24 bytes leftover after parsing attributes in process `syz.4.264'. [ 187.225726][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 188.612186][ T4303] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 188.844970][ T4303] usb 4-1: Using ep0 maxpacket: 16 [ 188.864419][ T4303] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 189.004947][ T4303] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.410726][ T4303] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.415154][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.423248][ T4303] usb 4-1: Product: syz [ 191.427594][ T4303] usb 4-1: Manufacturer: syz [ 191.432239][ T4303] usb 4-1: SerialNumber: syz [ 191.704981][ T4303] usb 4-1: can't set config #1, error -71 [ 191.849021][ T4303] usb 4-1: USB disconnect, device number 3 [ 192.885387][ T5270] netlink: 24 bytes leftover after parsing attributes in process `syz.1.276'. [ 193.650046][ T26] audit: type=1326 audit(1742989885.308:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 193.699021][ T26] audit: type=1326 audit(1742989885.348:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 194.064876][ T26] audit: type=1326 audit(1742989885.428:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 194.162817][ T5284] loop3: detected capacity change from 0 to 512 [ 195.067390][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.073808][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.102693][ T5284] EXT4-fs (loop3): Test dummy encryption mode enabled [ 195.109681][ T5284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.154089][ T5284] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.282: bad orphan inode 131083 [ 195.184021][ T5284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.198556][ T26] audit: type=1326 audit(1742989885.438:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.221663][ T5282] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.282: invalid block [ 195.234287][ T26] audit: type=1326 audit(1742989885.438:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.257124][ T26] audit: type=1326 audit(1742989885.458:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.414374][ T26] audit: type=1326 audit(1742989885.458:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.444669][ T26] audit: type=1326 audit(1742989885.458:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.466905][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 195.575294][ T26] audit: type=1326 audit(1742989885.488:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 195.767812][ T5295] loop3: detected capacity change from 0 to 16 [ 195.810308][ T26] audit: type=1326 audit(1742989885.498:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9755d8d169 code=0x7ffc0000 [ 196.495493][ T5295] erofs: (device loop3): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 202.060798][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 202.067680][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 202.073739][ T4272] Bluetooth: hci1: command 0x0406 tx timeout [ 202.355002][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 202.361115][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 202.961106][ T5340] loop3: detected capacity change from 0 to 512 [ 202.975689][ T5340] ext4: Unknown parameter 'euid' [ 203.861594][ T5334] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.305054][ T5340] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 211.644977][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 211.645049][ T26] audit: type=1326 audit(1742989903.238:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5400 comm="syz.0.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98eed8d169 code=0x0 [ 212.426910][ T5406] loop3: detected capacity change from 0 to 16 [ 212.534469][ T5406] erofs: (device loop3): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 218.145115][ T32] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.303107][ T5461] device veth1_to_hsr entered promiscuous mode [ 218.310421][ T5460] device veth1_to_hsr left promiscuous mode [ 218.345046][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 218.356803][ T32] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 218.389123][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.430713][ T32] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.460513][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.491019][ T32] usb 4-1: Product: syz [ 218.501170][ T32] usb 4-1: Manufacturer: syz [ 218.511311][ T32] usb 4-1: SerialNumber: syz [ 218.554407][ T5463] device veth1_macvtap left promiscuous mode [ 218.571836][ T5463] device macsec0 entered promiscuous mode [ 218.793773][ T32] usb 4-1: 0:2 : does not exist [ 218.808276][ T32] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 219.484984][ T32] usb 4-1: USB disconnect, device number 4 [ 219.802266][ T5479] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 219.825064][ T26] audit: type=1326 audit(1742989911.488:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5475 comm="syz.3.336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f39b3f8d169 code=0x0 [ 219.917563][ T5467] udevd[5467]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.796931][ T5498] device veth1_to_hsr entered promiscuous mode [ 220.804350][ T5496] device veth1_to_hsr left promiscuous mode [ 221.390978][ T5513] syz.4.345[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.391097][ T5513] syz.4.345[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.578613][ T3640] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.510567][ T5525] syz.0.350 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 223.811981][ T3640] usb 4-1: device descriptor read/64, error -71 [ 224.085005][ T3640] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 224.459238][ T5538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 225.525139][ T5549] loop3: detected capacity change from 0 to 512 [ 225.837473][ T5549] EXT4-fs (loop3): Test dummy encryption mode enabled [ 225.867294][ T5549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 226.745776][ T5549] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.357: bad orphan inode 131083 [ 226.809933][ T5549] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 226.935876][ T5549] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.357: invalid block [ 228.308145][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 229.048567][ T5582] loop3: detected capacity change from 0 to 512 [ 229.220568][ T5582] EXT4-fs (loop3): 1 orphan inode deleted [ 229.226567][ T5582] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 229.236578][ T4460] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.247874][ T5582] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.325058][ T4460] EXT4-fs error (device loop3): ext4_release_dquot:6818: comm kworker/u4:11: Failed to release dquot type 1 [ 230.905493][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 233.310199][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'. [ 233.351776][ T5611] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 233.361595][ T5611] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 233.742814][ T5624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 233.760941][ T5624] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 233.888480][ T5624] loop3: detected capacity change from 0 to 2048 [ 236.426704][ T5644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.385'. [ 237.692727][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 237.720706][ T5655] tipc: Started in network mode [ 237.742411][ T5655] tipc: Node identity 1, cluster identity 4711 [ 237.763922][ T5655] tipc: Node number set to 1 [ 240.341534][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 240.609323][ T34] Bluetooth: hci5: Frame reassembly failed (-84) [ 240.711226][ T34] Bluetooth: hci5: Frame reassembly failed (-84) [ 241.354672][ T5690] process 'syz.4.402' launched '/dev/fd/-1' with NULL argv: empty string added [ 242.574911][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 242.899237][ T5710] loop3: detected capacity change from 0 to 164 [ 243.904385][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 244.064998][ T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.266633][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.294934][ T22] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.326040][ T22] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.348567][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 244.364896][ T22] usb 4-1: SerialNumber: syz [ 244.596417][ T22] usb 4-1: 0:2 : does not exist [ 244.823463][ T22] usb 4-1: USB disconnect, device number 7 [ 246.668993][ T5467] udevd[5467]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.115290][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 251.769425][ T5822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.441'. [ 252.316723][ T5832] kvm: emulating exchange as write [ 255.122793][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.454'. [ 255.421360][ T5872] loop3: detected capacity change from 0 to 512 [ 255.705589][ T5872] EXT4-fs (loop3): 1 orphan inode deleted [ 255.711516][ T5872] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 255.729059][ T5872] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.799456][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.816772][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864905][ T26] audit: type=1800 audit(1742989947.488:1580): pid=5872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.452" name="bus" dev="loop3" ino=16 res=0 errno=0 [ 256.362073][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 256.651891][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 257.768817][ T5903] syz.1.460[5903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.769361][ T5903] syz.1.460[5903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.954099][ T5912] loop3: detected capacity change from 0 to 512 [ 259.824796][ T5912] EXT4-fs (loop3): Test dummy encryption mode enabled [ 259.831643][ T5912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 260.290089][ T5912] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.464: bad orphan inode 131083 [ 260.325710][ T5912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 260.347255][ T5911] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.464: invalid block [ 260.579476][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 262.036819][ T5941] device veth1_macvtap left promiscuous mode [ 262.048602][ T5941] device macsec0 entered promiscuous mode [ 262.098652][ T5948] device veth1_to_hsr entered promiscuous mode [ 262.108173][ T5943] device veth1_to_hsr left promiscuous mode [ 264.925448][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 269.088826][ T5995] device veth1_to_hsr entered promiscuous mode [ 269.096537][ T5994] device veth1_to_hsr left promiscuous mode [ 270.719241][ T4305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.382919][ T4305] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 271.436920][ T4305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.476948][ T4305] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 271.507918][ T4305] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 271.704355][ T4305] usb 4-1: Manufacturer: syz [ 271.722002][ T4305] usb 4-1: config 0 descriptor?? [ 271.962413][ T6039] device veth1_to_hsr entered promiscuous mode [ 271.972960][ T6038] device veth1_to_hsr left promiscuous mode [ 271.984833][ T4305] rc_core: IR keymap rc-hauppauge not found [ 271.994370][ T4305] Registered IR keymap rc-empty [ 272.038760][ T4305] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 272.125801][ T4305] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6 [ 272.287098][ C1] igorplugusb 4-1:0.0: receive overflow, at least 33 lost [ 272.294401][ T6044] rc rc0: two consecutive events of type space [ 272.508462][ T4302] usb 4-1: USB disconnect, device number 8 [ 272.537806][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 276.344648][ T6106] loop3: detected capacity change from 0 to 512 [ 276.362785][ T6106] EXT4-fs (loop3): Test dummy encryption mode enabled [ 276.369736][ T6106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 276.577889][ T6106] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.523: bad orphan inode 131083 [ 276.590223][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.630646][ T6106] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.523: invalid block [ 277.033259][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 277.429238][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.526'. [ 281.319960][ T6151] device veth1_to_hsr entered promiscuous mode [ 281.327383][ T6150] device veth1_to_hsr left promiscuous mode [ 281.671303][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 281.979032][ T7] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 281.995351][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.022292][ T7] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 282.884033][ T7] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 282.892677][ T7] usb 4-1: Manufacturer: syz [ 282.914098][ T7] usb 4-1: config 0 descriptor?? [ 283.005104][ T7] rc_core: IR keymap rc-hauppauge not found [ 283.011348][ T7] Registered IR keymap rc-empty [ 283.023486][ T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 283.037642][ T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 283.476898][ C0] igorplugusb 4-1:0.0: receive overflow, at least 33 lost [ 283.696837][ T4302] usb 4-1: USB disconnect, device number 9 [ 284.145054][ T6187] device veth1_to_hsr entered promiscuous mode [ 284.162208][ T6186] device veth1_to_hsr left promiscuous mode [ 290.566214][ T6231] loop3: detected capacity change from 0 to 512 [ 290.923383][ T6231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 290.930371][ T6231] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 291.288612][ T6229] device veth1_to_hsr entered promiscuous mode [ 291.295894][ T6227] device veth1_to_hsr left promiscuous mode [ 291.346210][ T6231] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.561: bad orphan inode 131083 [ 291.358368][ T6231] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 291.376477][ T6230] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.561: invalid block [ 291.609998][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 292.411224][ T6250] loop3: detected capacity change from 0 to 2048 [ 292.419154][ T6250] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.217566][ T6250] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 294.634176][ T6271] device veth1_to_hsr entered promiscuous mode [ 294.641777][ T6270] device veth1_to_hsr left promiscuous mode [ 297.174202][ T6312] loop3: detected capacity change from 0 to 512 [ 297.462092][ T6312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.528622][ T6312] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.643590][ T6312] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.585: bg 0: block 328: padding at end of block bitmap is not set [ 299.507606][ T6332] device veth1_to_hsr entered promiscuous mode [ 299.524324][ T6331] device veth1_to_hsr left promiscuous mode [ 301.787910][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.599'. [ 303.161606][ T6365] device veth1_to_hsr entered promiscuous mode [ 303.181255][ T6364] device veth1_to_hsr left promiscuous mode [ 304.725487][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 314.212865][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.637'. [ 316.720468][ T6507] device veth1_to_hsr entered promiscuous mode [ 316.733962][ T6506] device veth1_to_hsr left promiscuous mode [ 317.315676][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.414858][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.967183][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 323.914303][ T6566] device veth1_to_hsr entered promiscuous mode [ 323.922251][ T6565] device veth1_to_hsr left promiscuous mode [ 327.378580][ T6604] device veth1_to_hsr entered promiscuous mode [ 327.387362][ T6602] device veth1_to_hsr left promiscuous mode [ 330.933176][ T6652] device veth1_to_hsr entered promiscuous mode [ 330.944992][ T6651] device veth1_to_hsr left promiscuous mode [ 350.071124][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.081908][ T4272] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.095753][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.103872][ T4272] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.113877][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.132637][ T4276] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.140328][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.545118][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.957162][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.090706][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.215127][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 354.254947][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 354.697381][ T6817] chnl_net:caif_netlink_parms(): no params data found [ 355.028808][ T6817] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.056185][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.074954][ T6817] device bridge_slave_0 entered promiscuous mode [ 355.137774][ T6817] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.147864][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.176155][ T6817] device bridge_slave_1 entered promiscuous mode [ 356.227693][ T6817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.345049][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 356.362943][ T6817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.589593][ T6817] team0: Port device team_slave_0 added [ 357.739537][ T6817] team0: Port device team_slave_1 added [ 358.091746][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.120872][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.194419][ T6817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.291817][ T6817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.315854][ T6817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.425013][ T4276] Bluetooth: hci0: command 0x0419 tx timeout [ 358.542456][ T6817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.485083][ T75] device hsr_slave_0 left promiscuous mode [ 360.492562][ T75] device hsr_slave_1 left promiscuous mode [ 360.558170][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.599183][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.798327][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.814877][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.771780][ T75] device bridge_slave_1 left promiscuous mode [ 361.780079][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.810576][ T75] device bridge_slave_0 left promiscuous mode [ 361.826474][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.886585][ T75] device veth0_macvtap left promiscuous mode [ 361.893197][ T75] device veth1_vlan left promiscuous mode [ 361.913524][ T75] device veth0_vlan left promiscuous mode [ 365.555530][ T4265] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 365.566137][ T4265] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 365.574613][ T4265] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 365.591893][ T4265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 365.601020][ T4265] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 365.609910][ T4265] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.683405][ T75] team0 (unregistering): Port device team_slave_1 removed [ 365.727206][ T75] team0 (unregistering): Port device team_slave_0 removed [ 365.772186][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.820453][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.346703][ T75] bond0 (unregistering): Released all slaves [ 366.452278][ T6817] device hsr_slave_0 entered promiscuous mode [ 366.460103][ T6817] device hsr_slave_1 entered promiscuous mode [ 366.468724][ T6817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.476395][ T6817] Cannot create hsr debugfs directory [ 366.615889][ T6183] bridge0: port 3(syz_tun) entered disabled state [ 366.675326][ T6183] device syz_tun left promiscuous mode [ 366.682243][ T6183] bridge0: port 3(syz_tun) entered disabled state [ 367.424898][ T6817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 367.499798][ T6817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 367.596584][ T6817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 367.608896][ T6817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 367.716204][ T4276] Bluetooth: hci5: command 0x0409 tx timeout [ 368.287524][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 369.774838][ T4265] Bluetooth: hci5: command 0x041b tx timeout [ 370.115072][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.141197][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.163544][ T6978] device bridge_slave_0 entered promiscuous mode [ 370.353725][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.385723][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.401892][ T6978] device bridge_slave_1 entered promiscuous mode [ 371.307577][ T75] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.350889][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.381960][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.507360][ T6978] team0: Port device team_slave_0 added [ 371.555052][ T75] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.607402][ T6817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.617763][ T6978] team0: Port device team_slave_1 added [ 371.684478][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.722079][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.774494][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.812957][ T75] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.847496][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.854486][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.855280][ T4265] Bluetooth: hci5: command 0x040f tx timeout [ 371.898448][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.931963][ T6817] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.992166][ T75] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.038707][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 372.056176][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 372.102330][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 372.123489][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 372.150216][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.157540][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.353382][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 372.362216][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 372.413091][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.118792][ T4363] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.126031][ T4363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.164786][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.229605][ T6978] device hsr_slave_0 entered promiscuous mode [ 373.255454][ T6978] device hsr_slave_1 entered promiscuous mode [ 373.268969][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.297360][ T6978] Cannot create hsr debugfs directory [ 373.338429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.349046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.368187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.393519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.424839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.445646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.493447][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.502821][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.534227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.572654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.625574][ T6817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.935163][ T4265] Bluetooth: hci5: command 0x0419 tx timeout [ 375.316809][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 375.324585][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 375.445181][ T6817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.479215][ T6978] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.530971][ T6978] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.555189][ T6978] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.632871][ T6978] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.030410][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.173141][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 376.196355][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 376.224305][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.278575][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.309217][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.349759][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.357004][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.414608][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 376.567707][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.602037][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.626493][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.633725][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.682623][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.772740][ T75] device hsr_slave_0 left promiscuous mode [ 376.787231][ T75] device hsr_slave_1 left promiscuous mode [ 376.811661][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.834819][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.853834][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.879970][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.912555][ T75] device bridge_slave_1 left promiscuous mode [ 376.927855][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.952852][ T75] device bridge_slave_0 left promiscuous mode [ 376.977395][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.065753][ T75] device veth0_macvtap left promiscuous mode [ 377.071949][ T75] device veth1_vlan left promiscuous mode [ 377.087642][ T75] device veth0_vlan left promiscuous mode [ 378.616569][ T75] team0 (unregistering): Port device team_slave_1 removed [ 378.659980][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.666385][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.676153][ T75] team0 (unregistering): Port device team_slave_0 removed [ 378.722365][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.768001][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.298249][ T75] bond0 (unregistering): Released all slaves [ 379.371670][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 379.381554][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.391130][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.400553][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 379.411900][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 379.421343][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 379.471614][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.496356][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.598862][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.616538][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.633586][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.648323][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.673648][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 379.705898][ T6817] device veth0_vlan entered promiscuous mode [ 379.716755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.740277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.786708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.817942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.843710][ T6817] device veth1_vlan entered promiscuous mode [ 379.977369][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 379.995775][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.038737][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.068342][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.109096][ T6817] device veth0_macvtap entered promiscuous mode [ 380.139890][ T6817] device veth1_macvtap entered promiscuous mode [ 380.223524][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.352375][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.374836][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.397570][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.194807][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.208141][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.335830][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.372998][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.396023][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.436238][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.453707][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.509712][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.542403][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.562862][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.583912][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.604343][ T6817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.625530][ T6817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.648678][ T6817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.666815][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.679345][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.701627][ T6817] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.719120][ T6817] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.734804][ T6817] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.754894][ T6817] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.776943][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.784608][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.821262][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.991930][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.028358][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.063073][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.091135][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.114531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.161939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 382.411671][ T7229] loop5: detected capacity change from 0 to 16 [ 382.468752][ T7229] erofs: (device loop5): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 382.845032][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.893580][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.985462][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 384.039931][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.275090][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.322013][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.517406][ T6978] device veth0_vlan entered promiscuous mode [ 385.592011][ T6978] device veth1_vlan entered promiscuous mode [ 385.834225][ T6978] device veth0_macvtap entered promiscuous mode [ 385.912789][ T6978] device veth1_macvtap entered promiscuous mode [ 386.052011][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.124531][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.178547][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.229582][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.280233][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.335197][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.390828][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.429446][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.471143][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.514543][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.554464][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.580111][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.604141][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.668816][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.703342][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.724759][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.749696][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.882631][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.966233][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.997894][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.042895][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.202979][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.216538][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.228680][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.240856][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.313166][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.667581][ T6978] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.695666][ T6978] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.724803][ T6978] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.733664][ T6978] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.959506][ T4954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.990248][ T4954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.064496][ T4954] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 389.109967][ T4507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.143980][ T4507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.191007][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.998554][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 391.112755][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 394.125015][ T4307] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 394.336425][ T4307] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 394.366565][ T4307] usb 7-1: config 0 has no interface number 0 [ 394.394617][ T4307] usb 7-1: config 0 interface 11 has no altsetting 0 [ 395.235860][ T4307] usb 7-1: New USB device found, idVendor=1871, idProduct=0306, bcdDevice=21.d2 [ 395.245422][ T4307] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 395.253480][ T4307] usb 7-1: Manufacturer: syz [ 395.305441][ T4307] usb 7-1: config 0 descriptor?? [ 395.541837][ T4307] usb 7-1: Found UVC 0.00 device (1871:0306) [ 395.584389][ T4307] usb 7-1: No valid video chain found. [ 396.418751][ T4307] usb 7-1: USB disconnect, device number 2 [ 397.104509][ T7407] loop6: detected capacity change from 0 to 1024 [ 397.160188][ T7407] EXT4-fs: Ignoring removed orlov option [ 397.209293][ T7407] EXT4-fs (loop6): Test dummy encryption mode enabled [ 397.268743][ T7407] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 398.527057][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 401.689536][ T4307] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 401.741076][ T4307] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.921391][ T7503] loop6: detected capacity change from 0 to 256 [ 403.001945][ T7503] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.506262][ T7535] device veth1_macvtap left promiscuous mode [ 405.512474][ T7535] device macsec0 entered promiscuous mode [ 408.174121][ T7566] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 408.210447][ T7566] tipc: Enabled bearer , priority 10 [ 410.161133][ T7593] device veth1_macvtap left promiscuous mode [ 410.179979][ T7593] device macsec0 entered promiscuous mode [ 411.884866][ T4341] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 412.096536][ T4341] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.144772][ T4341] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.230857][ T4341] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 412.286791][ T4341] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 412.475622][ T4341] usb 7-1: SerialNumber: syz [ 413.348520][ T4341] usb 7-1: 0:2 : does not exist [ 413.487448][ T4341] usb 7-1: USB disconnect, device number 3 [ 413.797711][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.271589][ T7655] bridge: RTM_DELNEIGH with unconfigured vlan 64 on bridge_slave_0 [ 414.443204][ T26] audit: type=1326 audit(1742990106.098:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 414.505023][ T26] audit: type=1326 audit(1742990106.138:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 414.573587][ T26] audit: type=1326 audit(1742990106.138:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 414.707026][ T26] audit: type=1326 audit(1742990106.138:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 414.892358][ T26] audit: type=1326 audit(1742990106.138:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 414.963836][ T26] audit: type=1326 audit(1742990106.138:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 415.029535][ T26] audit: type=1326 audit(1742990106.138:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 415.169716][ T26] audit: type=1326 audit(1742990106.138:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 415.283428][ T26] audit: type=1326 audit(1742990106.138:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 415.578323][ T26] audit: type=1326 audit(1742990106.138:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.6.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 417.583417][ T7727] loop5: detected capacity change from 0 to 512 [ 417.631054][ T7727] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 417.681955][ T7727] EXT4-fs (loop5): orphan cleanup on readonly fs [ 417.696218][ T7727] EXT4-fs error (device loop5): ext4_quota_enable:6982: comm syz.5.932: Bad quota inum: 64, type: 0 [ 417.716632][ T7727] EXT4-fs (loop5): Remounting filesystem read-only [ 417.724895][ T7727] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 417.770599][ T7727] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 417.820028][ T7727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 418.216116][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 419.002719][ T7774] overlayfs: failed to clone upperpath [ 419.054951][ T4307] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 419.327196][ T4307] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.354782][ T4307] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.735801][ T4307] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 419.745387][ T4307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 419.753567][ T4307] usb 7-1: SerialNumber: syz [ 420.054119][ T4307] usb 7-1: 0:2 : does not exist [ 420.086210][ T4307] usb 7-1: USB disconnect, device number 4 [ 420.346203][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.448586][ T7807] xt_hashlimit: size too large, truncated to 1048576 [ 421.058168][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.952'. [ 425.695100][ T4307] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 425.906941][ T4307] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.944573][ T4307] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.974512][ T4307] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 425.992295][ T4307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 426.003476][ T4307] usb 7-1: SerialNumber: syz [ 426.254514][ T4307] usb 7-1: 0:2 : does not exist [ 428.434974][ T4307] usb 7-1: USB disconnect, device number 5 [ 429.393352][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.681331][ T7938] loop6: detected capacity change from 0 to 16 [ 429.704005][ T7938] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 430.958932][ T7959] loop6: detected capacity change from 0 to 164 [ 434.395655][ T6765] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 435.424890][ T6765] usb 6-1: Using ep0 maxpacket: 32 [ 435.457055][ T6765] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 435.494363][ T6765] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 435.564767][ T6765] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 435.601566][ T6765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 435.679202][ T6765] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 435.720021][ T6765] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 435.762727][ T6765] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 435.800579][ T6765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.845013][ T6765] usb 6-1: config 0 descriptor?? [ 436.109125][ T6765] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 436.310463][ T7] usb 6-1: USB disconnect, device number 2 [ 436.348541][ T7] usblp0: removed [ 437.489647][ T8052] loop6: detected capacity change from 0 to 512 [ 437.863916][ T8052] EXT4-fs (loop6): 1 orphan inode deleted [ 437.869833][ T8052] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 437.882278][ T8052] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.974761][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 437.974780][ T26] audit: type=1800 audit(1742990129.568:1603): pid=8052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.994" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 438.221911][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 438.444962][ T6765] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 439.774206][ T6765] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 439.857067][ T6765] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 439.902156][ T6765] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 439.930654][ T6765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 440.097487][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.104003][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.138459][ T6765] usb 6-1: SerialNumber: syz [ 440.621630][ T6765] usb 6-1: 0:2 : does not exist [ 440.917497][ T6765] usb 6-1: USB disconnect, device number 3 [ 441.416233][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.526099][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1006'. [ 444.700595][ T8139] loop6: detected capacity change from 0 to 512 [ 444.744104][ T8139] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 444.812851][ T8139] EXT4-fs (loop6): orphan cleanup on readonly fs [ 444.832230][ T8139] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.1013: Bad quota inum: 64, type: 0 [ 444.879618][ T8139] EXT4-fs (loop6): Remounting filesystem read-only [ 444.891797][ T8139] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 444.907247][ T8139] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 444.914000][ T8139] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 447.394002][ T8174] device lo entered promiscuous mode [ 447.400991][ T8174] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 447.413998][ T8173] device lo left promiscuous mode [ 447.695628][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 449.610552][ T4335] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 451.114007][ T4335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.887722][ T4335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.898961][ T4335] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 451.925559][ T4335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 451.933628][ T4335] usb 6-1: SerialNumber: syz [ 452.173227][ T4335] usb 6-1: 0:2 : does not exist [ 452.981117][ T4335] usb 6-1: USB disconnect, device number 4 [ 453.207039][ T7368] udevd[7368]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.395381][ T8277] netlink: 'syz.4.1041': attribute type 3 has an invalid length. [ 458.681666][ T8296] tipc: Started in network mode [ 458.715063][ T8296] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 458.758606][ T8296] tipc: Enabling of bearer rejected, failed to enable media [ 458.914142][ T8301] device veth1_macvtap left promiscuous mode [ 458.940921][ T8301] device macsec0 entered promiscuous mode [ 459.192887][ T8304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 459.619957][ T8319] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.697367][ T8390] loop5: detected capacity change from 0 to 512 [ 469.791466][ T8390] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 469.866052][ T8390] EXT4-fs (loop5): orphan cleanup on readonly fs [ 469.898839][ T8390] EXT4-fs error (device loop5): ext4_quota_enable:6982: comm syz.5.1071: Bad quota inum: 64, type: 0 [ 470.201981][ T8390] EXT4-fs (loop5): Remounting filesystem read-only [ 470.242182][ T8390] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 470.579461][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1068'. [ 470.604856][ T8390] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 470.642222][ T8390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 471.986925][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 472.994926][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 473.174485][ T8424] device ipip0 entered promiscuous mode [ 474.699444][ T8445] loop6: detected capacity change from 0 to 164 [ 475.019389][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1087'. [ 475.198584][ T8460] xt_bpf: check failed: parse error [ 475.241818][ T8463] loop5: detected capacity change from 0 to 128 [ 475.378039][ T8465] usb usb1: usbfs: process 8465 (syz.5.1089) did not claim interface 0 before use [ 478.525693][ T8507] loop6: detected capacity change from 0 to 164 [ 478.907559][ T8515] loop5: detected capacity change from 0 to 4096 [ 479.067566][ T8515] EXT4-fs (loop5): Test dummy encryption mode enabled [ 479.128372][ T8520] device batadv_slave_1 entered promiscuous mode [ 479.156893][ T8515] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 479.178474][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 479.392017][ T8519] device batadv_slave_1 left promiscuous mode [ 479.615532][ T8515] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 480.002964][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 480.585081][ T8548] loop5: detected capacity change from 0 to 128 [ 481.807926][ T8548] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 481.865156][ T8548] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 483.499137][ T8569] loop6: detected capacity change from 0 to 164 [ 484.673669][ T8583] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20002 [ 484.712465][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 484.767405][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'. [ 484.873674][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.202944][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.337195][ T4335] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 485.544845][ T4335] usb 6-1: Using ep0 maxpacket: 16 [ 485.567604][ T4335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.631284][ T4335] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.704879][ T4335] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 485.744980][ T4335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.802719][ T4335] usb 6-1: config 0 descriptor?? [ 486.256545][ T4335] hid-alps 0003:044E:120C.0004: unbalanced delimiter at end of report description [ 486.305870][ T4335] hid-alps 0003:044E:120C.0004: parse failed [ 486.350443][ T4335] hid-alps: probe of 0003:044E:120C.0004 failed with error -22 [ 486.455587][ T4335] usb 6-1: USB disconnect, device number 5 [ 486.862050][ T8597] loop6: detected capacity change from 0 to 40427 [ 486.949023][ T8597] F2FS-fs (loop6): invalid crc value [ 487.338917][ T8597] F2FS-fs (loop6): Found nat_bits in checkpoint [ 488.063526][ T8597] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 488.255893][ T4265] Bluetooth: hci5: command 0x0406 tx timeout [ 489.190949][ T8645] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1132'. [ 489.201373][ T8645] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1132'. [ 489.251532][ T8644] loop5: detected capacity change from 0 to 164 [ 489.837205][ T8659] loop6: detected capacity change from 0 to 16 [ 489.890940][ T8659] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 489.912163][ T8661] tipc: Invalid UDP bearer configuration [ 489.912209][ T8661] tipc: Enabling of bearer rejected, failed to enable media [ 491.842559][ T8680] loop6: detected capacity change from 0 to 1024 [ 491.893265][ T8680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 492.021289][ T8680] EXT4-fs (loop6): shut down requested (1) [ 492.195311][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 492.509616][ T8700] device pim6reg1 entered promiscuous mode [ 493.200247][ T8713] tipc: Started in network mode [ 493.205400][ T8713] tipc: Node identity ac14140f, cluster identity 4711 [ 493.217514][ T8713] tipc: Enabled bearer , priority 10 [ 494.715017][ T32] tipc: Node number set to 2886997007 [ 495.622551][ T8723] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 495.672847][ T8723] tipc: Enabled bearer , priority 10 [ 495.770885][ T8731] loop5: detected capacity change from 0 to 512 [ 495.877470][ T8731] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 495.916574][ T8731] System zones: 0-5 [ 495.986778][ T8731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 496.005990][ T8740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1160'. [ 496.025906][ T8740] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1160'. [ 496.175773][ T8731] fs-verity: sha512 using implementation "sha512-avx2" [ 496.194497][ T8731] EXT4-fs warning (device loop5): ext4_begin_enable_verity:137: inode #16: comm syz.5.1157: verity is only allowed on extent-based files [ 497.206314][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 498.463281][ T8766] 9pnet_fd: p9_fd_create_tcp (8766): problem connecting socket to 127.0.0.1 [ 499.064031][ T8787] loop5: detected capacity change from 0 to 164 [ 499.703636][ T8795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1172'. [ 499.718001][ T8795] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1172'. [ 499.996383][ T26] audit: type=1326 audit(1742990191.658:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.081335][ T26] audit: type=1326 audit(1742990191.688:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39b3f84127 code=0x7ffc0000 [ 500.168051][ T26] audit: type=1326 audit(1742990191.688:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39b3f29359 code=0x7ffc0000 [ 500.192718][ T26] audit: type=1326 audit(1742990191.688:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.217755][ T26] audit: type=1326 audit(1742990191.688:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.242868][ T26] audit: type=1326 audit(1742990191.688:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39b3f84127 code=0x7ffc0000 [ 500.267505][ T26] audit: type=1326 audit(1742990191.688:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f39b3f29359 code=0x7ffc0000 [ 500.292171][ T26] audit: type=1326 audit(1742990191.688:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.322316][ T26] audit: type=1326 audit(1742990191.688:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.350654][ T26] audit: type=1326 audit(1742990191.688:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 500.484787][ T4302] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 500.686511][ T4302] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.544376][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.551074][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.561158][ T4302] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 501.581010][ T4302] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 501.606646][ T4302] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 501.636746][ T4302] usb 7-1: SerialNumber: syz [ 501.815097][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1184'. [ 501.825622][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1184'. [ 501.873351][ T4302] usb 7-1: 0:2 : does not exist [ 501.934609][ T4302] usb 7-1: USB disconnect, device number 6 [ 502.227005][ T8417] udevd[8417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.367800][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1188'. [ 504.679507][ T8870] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1197'. [ 504.690589][ T8870] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1197'. [ 505.822465][ T8879] loop5: detected capacity change from 0 to 164 [ 506.232484][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 506.500116][ T8887] overlayfs: failed to clone upperpath [ 507.202887][ T8868] loop6: detected capacity change from 0 to 40427 [ 507.222731][ T8896] loop5: detected capacity change from 0 to 512 [ 507.231392][ T8896] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 507.252922][ T8868] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 507.263113][ T8868] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 507.402132][ T8896] EXT4-fs (loop5): orphan cleanup on readonly fs [ 507.545358][ T8868] F2FS-fs (loop6): Found nat_bits in checkpoint [ 507.566976][ T8896] EXT4-fs error (device loop5): ext4_quota_enable:6982: comm syz.5.1206: Bad quota inum: 64, type: 0 [ 507.914969][ T8896] EXT4-fs (loop5): Remounting filesystem read-only [ 507.951366][ T8896] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 508.044946][ T8896] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 508.051809][ T8896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 509.342164][ T8919] loop6: detected capacity change from 0 to 16 [ 509.375254][ T8919] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 509.824337][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 510.801291][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 513.690753][ T8953] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 514.007291][ T8962] overlayfs: failed to clone upperpath [ 514.733438][ T8968] loop6: detected capacity change from 0 to 512 [ 514.775533][ T8968] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 514.969096][ T8968] EXT4-fs (loop6): orphan cleanup on readonly fs [ 514.996777][ T8968] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.1226: Bad quota inum: 64, type: 0 [ 515.043606][ T8968] EXT4-fs (loop6): Remounting filesystem read-only [ 515.163729][ T8968] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 515.319933][ T8968] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 515.336975][ T8968] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 515.602554][ T26] kauditd_printk_skb: 193 callbacks suppressed [ 515.602572][ T26] audit: type=1326 audit(1742990207.258:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 515.637383][ T26] audit: type=1326 audit(1742990207.258:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 515.792242][ T26] audit: type=1326 audit(1742990207.258:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 518.238512][ T26] audit: type=1326 audit(1742990207.258:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 518.344290][ T26] audit: type=1326 audit(1742990207.258:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.3.1230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 518.420540][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 518.963641][ T9016] overlayfs: failed to clone upperpath [ 519.871027][ T9021] loop5: detected capacity change from 0 to 2048 [ 519.991332][ T9021] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 520.441391][ T9037] device batadv_slave_1 entered promiscuous mode [ 520.467318][ T9042] loop6: detected capacity change from 0 to 512 [ 520.473579][ T9037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1246'. [ 521.871793][ T9042] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 522.321122][ T9042] EXT4-fs (loop6): orphan cleanup on readonly fs [ 522.501330][ T9042] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.1247: Bad quota inum: 64, type: 0 [ 522.853881][ T9042] EXT4-fs (loop6): Remounting filesystem read-only [ 522.998999][ T9042] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 523.068194][ T9042] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 523.096460][ T9042] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 523.451213][ T9036] device batadv_slave_1 left promiscuous mode [ 523.493221][ T9034] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 523.997088][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 526.869493][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 528.870282][ T9091] loop6: detected capacity change from 0 to 512 [ 531.454283][ T9091] EXT4-fs: failed to create workqueue [ 531.460830][ T9091] EXT4-fs (loop6): mount failed [ 533.338938][ T9110] loop6: detected capacity change from 0 to 164 [ 533.683954][ T9118] overlayfs: failed to clone upperpath [ 533.789333][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 536.035734][ T9139] loop6: detected capacity change from 0 to 16 [ 536.058492][ T9139] erofs: (device loop6): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 536.909076][ T9149] loop6: detected capacity change from 0 to 16 [ 536.928516][ T9149] erofs: Unknown parameter 'ߜӍ [ 536.928516][ T9149] r;' [ 539.281397][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 539.310927][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1276'. [ 539.416310][ T8417] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 540.298578][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1278'. [ 544.388712][ T9211] loop6: detected capacity change from 0 to 256 [ 544.412580][ T9211] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.471291][ T9211] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 544.549736][ T9211] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 549.793778][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 549.804500][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 550.026745][ T9262] tipc: Started in network mode [ 550.031918][ T9262] tipc: Node identity ac14140f, cluster identity 4711 [ 550.042506][ T9262] tipc: Enabled bearer , priority 10 [ 551.164828][ T6765] tipc: Node number set to 2886997007 [ 551.194365][ T9272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1317'. [ 553.237530][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 553.248444][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 554.401083][ T9309] tipc: Enabling of bearer rejected, already enabled [ 555.262624][ T9315] device batadv_slave_1 entered promiscuous mode [ 555.277474][ T9314] device batadv_slave_1 left promiscuous mode [ 557.655216][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 557.665379][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 559.603413][ T9359] tipc: Enabling of bearer rejected, already enabled [ 559.622369][ T9357] 9pnet_fd: Insufficient options for proto=fd [ 561.747037][ T9389] mmap: syz.1.1353 (9389) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 562.999072][ T9405] tipc: Enabling of bearer rejected, already enabled [ 563.094093][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.108826][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.756839][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1361'. [ 566.116029][ T4276] Bluetooth: hci2: sending frame failed (-49) [ 566.124076][ T4265] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 566.167240][ T9432] xt_hashlimit: size too large, truncated to 1048576 [ 566.651271][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 566.661701][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 567.420503][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1376'. [ 568.113198][ T9459] loop6: detected capacity change from 0 to 2048 [ 568.244048][ T9459] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 569.619041][ T9475] bridge: RTM_NEWNEIGH with invalid ether address [ 569.775058][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 569.784124][ T9477] loop5: detected capacity change from 0 to 16 [ 569.843400][ T9477] erofs: (device loop5): z_erofs_parse_cfgs: algorithm 1 isn't enabled on this kernel [ 570.297356][ T9487] overlayfs: failed to clone upperpath [ 571.506116][ T9504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 574.135467][ T9517] tipc: Enabled bearer , priority 10 [ 575.722922][ T5855] tipc: Node number set to 1 [ 576.534996][ T9549] xt_TCPMSS: Only works on TCP SYN packets [ 577.018275][ T5855] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 577.226742][ T5855] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.264715][ T5855] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.310972][ T5855] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 577.695170][ T5855] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 577.753627][ T5855] usb 7-1: SerialNumber: syz [ 577.839367][ T9556] tipc: Enabling of bearer rejected, already enabled [ 578.739171][ T5855] usb 7-1: 0:2 : does not exist [ 578.972305][ T5855] usb 7-1: USB disconnect, device number 7 [ 579.247624][ T8417] udevd[8417]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.265965][ T9579] loop5: detected capacity change from 0 to 128 [ 581.273360][ T9579] EXT4-fs: Ignoring removed nobh option [ 581.284032][ T9579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 581.293521][ T9579] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 581.456076][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 581.682531][ T9594] loop6: detected capacity change from 0 to 512 [ 581.736742][ T9594] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 581.802893][ T9594] EXT4-fs (loop6): orphan cleanup on readonly fs [ 581.866376][ T9594] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.1418: Bad quota inum: 64, type: 0 [ 581.878067][ T9594] EXT4-fs (loop6): Remounting filesystem read-only [ 581.884843][ T9594] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 582.619661][ T9594] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 582.619707][ T9594] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 583.236488][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 585.973733][ T9642] tipc: Enabled bearer , priority 10 [ 588.455896][ T9679] tipc: Enabling of bearer rejected, already enabled [ 589.785455][ T9690] loop6: detected capacity change from 0 to 256 [ 589.838234][ T9690] FAT-fs (loop6): Unrecognized mount option "rodtr" or missing value [ 590.109723][ T9690] loop6: detected capacity change from 0 to 128 [ 590.145971][ T26] audit: type=1326 audit(1742990281.748:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9682 comm="syz.5.1448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a8198d169 code=0x0 [ 590.181939][ T9690] EXT4-fs: Ignoring removed nobh option [ 590.265688][ T9690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 590.301220][ T9690] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 592.732682][ T9706] loop5: detected capacity change from 0 to 512 [ 592.787206][ T9706] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 592.876578][ T9706] EXT4-fs (loop5): orphan cleanup on readonly fs [ 592.914941][ T9706] EXT4-fs error (device loop5): ext4_quota_enable:6982: comm syz.5.1454: Bad quota inum: 64, type: 0 [ 592.970619][ T9706] EXT4-fs (loop5): Remounting filesystem read-only [ 593.024896][ T9706] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 593.110452][ T9706] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 593.161297][ T9706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 593.798276][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 593.980922][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 594.122665][ T9716] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 594.917300][ T9729] tipc: Enabling of bearer rejected, already enabled [ 598.256701][ T9752] loop6: detected capacity change from 0 to 40427 [ 598.408603][ T9773] overlayfs: failed to clone upperpath [ 598.988115][ T9752] F2FS-fs (loop6): invalid crc value [ 599.029018][ T9752] F2FS-fs (loop6): Found nat_bits in checkpoint [ 599.148890][ T9752] F2FS-fs (loop6): Start checkpoint disabled! [ 599.193845][ T9752] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 601.259058][ T9802] loop5: detected capacity change from 0 to 512 [ 601.315796][ T9802] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 601.476213][ T9802] EXT4-fs (loop5): orphan cleanup on readonly fs [ 601.482719][ T9802] EXT4-fs error (device loop5): ext4_quota_enable:6982: comm syz.5.1484: Bad quota inum: 64, type: 0 [ 601.531098][ T9802] EXT4-fs (loop5): Remounting filesystem read-only [ 601.537975][ T9802] EXT4-fs warning (device loop5): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 601.553483][ T9802] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 601.566202][ T9802] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 602.435449][ T9814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1488'. [ 602.446369][ T9814] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1488'. [ 603.351383][ T9826] syz.3.1492[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.351499][ T9826] syz.3.1492[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.496934][ T6817] EXT4-fs (loop5): unmounting filesystem. [ 605.665991][ T9847] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1500'. [ 605.676372][ T9847] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1500'. [ 605.879348][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 605.913358][ T9851] loop5: detected capacity change from 0 to 256 [ 605.955450][ T9851] exfat: Unknown parameter 'name}t' [ 608.405286][ T9885] syz.3.1513[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.405400][ T9885] syz.3.1513[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.725897][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1514'. [ 608.748351][ T9889] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1514'. [ 608.786175][ T26] audit: type=1326 audit(1742990300.448:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 608.861094][ T26] audit: type=1326 audit(1742990300.478:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 608.949085][ T9891] loop6: detected capacity change from 0 to 4096 [ 608.973861][ T26] audit: type=1326 audit(1742990300.478:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.048904][ T9891] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 609.064531][ T26] audit: type=1326 audit(1742990300.478:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.170547][ T26] audit: type=1326 audit(1742990300.478:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.274808][ T26] audit: type=1326 audit(1742990300.488:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.315267][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 609.329625][ T26] audit: type=1326 audit(1742990300.488:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.435441][ T26] audit: type=1326 audit(1742990300.488:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f53f078d169 code=0x7ffc0000 [ 609.524730][ T26] audit: type=1326 audit(1742990300.488:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53f078d1a3 code=0x7ffc0000 [ 609.603944][ T26] audit: type=1326 audit(1742990300.518:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.6.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f53f078bc1f code=0x7ffc0000 [ 611.135040][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 612.273184][ T9914] loop6: detected capacity change from 0 to 512 [ 612.337216][ T9914] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 612.378443][ T9914] EXT4-fs (loop6): orphan cleanup on readonly fs [ 612.404712][ T9914] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.1523: Bad quota inum: 64, type: 0 [ 612.469439][ T9914] EXT4-fs (loop6): Remounting filesystem read-only [ 612.498508][ T9914] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=64). Please run e2fsck to fix. [ 612.556999][ T9914] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 612.563809][ T9914] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 614.080739][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'. [ 614.165179][ T9930] loop5: detected capacity change from 0 to 512 [ 614.188666][ T9930] EXT4-fs (loop5): fragment/cluster size (4096) != block size (1024) [ 614.599018][ T9921] overlayfs: failed to clone upperpath [ 614.701122][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 614.812608][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1532'. [ 615.769806][ T9946] device wg2 entered promiscuous mode [ 616.126806][ T9958] tipc: Enabling of bearer rejected, already enabled [ 618.572098][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1534'. [ 619.286351][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1547'. [ 619.954284][ T9997] tipc: Started in network mode [ 619.959768][ T9997] tipc: Node identity ac14140f, cluster identity 4711 [ 619.968626][ T9997] tipc: Enabled bearer , priority 10 [ 620.986732][ T6765] tipc: Node number set to 2886997007 [ 624.532228][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.603193][T10025] tipc: Enabling of bearer rejected, already enabled [ 624.632552][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.474952][T10040] tipc: Enabling of bearer rejected, already enabled [ 626.054232][T10041] loop6: detected capacity change from 0 to 512 [ 626.283099][T10041] EXT4-fs (loop6): 1 orphan inode deleted [ 626.309355][ T4507] __quota_error: 20 callbacks suppressed [ 626.309374][ T4507] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 626.333601][ T26] audit: type=1326 audit(1742990770.990:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 626.346792][ T4507] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:12: Failed to release dquot type 1 [ 626.374850][T10041] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 626.408312][ T26] audit: type=1326 audit(1742990771.030:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 626.408397][T10041] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.493105][ T26] audit: type=1326 audit(1742990771.030:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 626.557046][ T26] audit: type=1326 audit(1742990771.030:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 626.627475][ T26] audit: type=1326 audit(1742990771.030:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10047 comm="syz.3.1564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39b3f8d169 code=0x7ffc0000 [ 626.716741][ T26] audit: type=1800 audit(1742990771.350:1848): pid=10041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1560" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 626.854865][T10054] ipt_CLUSTERIP: Please specify destination IP [ 627.366605][T10064] tipc: Enabling of bearer rejected, already enabled [ 629.924982][T10074] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1574'. [ 629.934535][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 631.450778][T10082] tipc: Enabling of bearer rejected, already enabled [ 632.536461][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 638.656150][T10125] loop5: detected capacity change from 0 to 40427 [ 638.675939][T10125] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 638.682963][T10125] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 638.745400][T10125] F2FS-fs (loop5): invalid crc value [ 638.770162][T10125] F2FS-fs (loop5): Found nat_bits in checkpoint [ 638.791255][ T6978] EXT4-fs (loop6): unmounting filesystem. [ 638.965653][T10125] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 638.993359][T10125] F2FS-fs (loop5): Start checkpoint disabled! [ 639.047876][T10125] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 639.071173][T10125] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 639.226406][T10140] syz.5.1590: attempt to access beyond end of device [ 639.226406][T10140] loop5: rw=2049, sector=53248, nr_sectors = 104 limit=40427 [ 639.348333][T10125] syz.5.1590: attempt to access beyond end of device [ 639.348333][T10125] loop5: rw=2049, sector=53352, nr_sectors = 440 limit=40427 [ 639.464807][T10140] syz.5.1590: attempt to access beyond end of device [ 639.464807][T10140] loop5: rw=2049, sector=53248, nr_sectors = 112 limit=40427 [ 639.924881][ T4363] kworker/u4:9: attempt to access beyond end of device [ 639.924881][ T4363] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 640.290324][T10153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 641.597019][T10161] tipc: Enabling of bearer rejected, already enabled [ 644.255727][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 644.273522][T10185] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 647.953746][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1612'. [ 648.168564][T10209] tipc: Enabling of bearer rejected, already enabled [ 649.069404][T10215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 649.238123][T10219] ------------[ cut here ]------------ [ 649.244478][T10219] Please remove unsupported % in format string [ 649.252164][T10219] WARNING: CPU: 1 PID: 10219 at lib/vsprintf.c:2661 format_decode+0x12d2/0x1f10 [ 649.261380][T10219] Modules linked in: [ 649.265582][T10219] CPU: 1 PID: 10219 Comm: syz.3.1617 Not tainted 6.1.131-syzkaller #0 [ 649.273884][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.284073][T10219] RIP: 0010:format_decode+0x12d2/0x1f10 [ 649.289777][T10219] Code: e0 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 8e 31 8c e8 ae dc a6 f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 649.309537][T10219] RSP: 0018:ffffc9000da0f680 EFLAGS: 00010246 [ 649.315697][T10219] RAX: d82c1e5ac6f34b00 RBX: 00000000ffffffdb RCX: 0000000000080000 [ 649.323712][T10219] RDX: ffffc9000e3e2000 RSI: 00000000000044a8 RDI: 00000000000044a9 [ 649.331805][T10219] RBP: ffffc9000da0f770 R08: ffffffff8152c26e R09: fffff52001b41e31 [ 649.339904][T10219] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 649.348317][T10219] R13: ffff0000ffffff00 R14: ffffc9000da0f9ac R15: 1ffff92001b41f35 [ 649.356445][T10219] FS: 00007f39b4d356c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 649.365492][T10219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.372123][T10219] CR2: ffffffffde000000 CR3: 000000005c519000 CR4: 00000000003506e0 [ 649.380278][T10219] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.388368][T10219] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.396479][T10219] Call Trace: [ 649.399816][T10219] [ 649.402833][T10219] ? __warn+0x15a/0x520 [ 649.407145][T10219] ? format_decode+0x12d2/0x1f10 [ 649.412150][T10219] ? report_bug+0x2af/0x500 [ 649.416858][T10219] ? format_decode+0x12d2/0x1f10 [ 649.421902][T10219] ? handle_bug+0x3d/0x70 [ 649.426376][T10219] ? exc_invalid_op+0x16/0x40 [ 649.431108][T10219] ? asm_exc_invalid_op+0x16/0x20 [ 649.436252][T10219] ? __warn_printk+0x28e/0x350 [ 649.441080][T10219] ? format_decode+0x12d2/0x1f10 [ 649.446165][T10219] ? vsnprintf+0x1c70/0x1c70 [ 649.451193][T10219] ? bstr_printf+0x1bb/0x1160 [ 649.456074][T10219] bstr_printf+0x130/0x1160 [ 649.460654][T10219] ? vbin_printf+0x1be0/0x1be0 [ 649.465559][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.471252][T10219] ? bpf_trace_printk+0x111/0x220 [ 649.476396][T10219] bpf_trace_printk+0x19d/0x220 [ 649.481300][T10219] ? ktime_get+0x1ac/0x270 [ 649.485849][T10219] ? bpf_probe_write_user+0xd0/0xd0 [ 649.491106][T10219] ? ktime_get+0x1ac/0x270 [ 649.495639][T10219] ? ktime_get+0x242/0x270 [ 649.500124][T10219] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 649.505735][T10219] bpf_test_run+0x40f/0x8b0 [ 649.510333][T10219] ? convert___skb_to_skb+0x630/0x630 [ 649.515920][T10219] ? eth_type_trans+0x3cd/0x7a0 [ 649.520854][T10219] ? eth_get_headlen+0x240/0x240 [ 649.525960][T10219] ? convert___skb_to_skb+0x41/0x630 [ 649.531315][T10219] ? build_skb+0x136/0x280 [ 649.535841][T10219] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 649.541297][T10219] ? cpu_online+0xb0/0xb0 [ 649.545757][T10219] ? cpu_online+0xb0/0xb0 [ 649.550513][T10219] bpf_prog_test_run+0x32f/0x3a0 [ 649.555568][T10219] __sys_bpf+0x3eb/0x6c0 [ 649.559868][T10219] ? bpf_link_show_fdinfo+0x300/0x300 [ 649.565463][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.571007][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.576613][T10219] ? syscall_enter_from_user_mode+0x2e/0x230 [ 649.582660][T10219] ? lockdep_hardirqs_on+0x94/0x130 [ 649.588065][T10219] __x64_sys_bpf+0x78/0x90 [ 649.592552][T10219] do_syscall_64+0x3b/0xb0 [ 649.597088][T10219] ? clear_bhb_loop+0x45/0xa0 [ 649.601831][T10219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.607868][T10219] RIP: 0033:0x7f39b3f8d169 [ 649.612335][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.632352][T10219] RSP: 002b:00007f39b4d35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.640907][T10219] RAX: ffffffffffffffda RBX: 00007f39b41a5fa0 RCX: 00007f39b3f8d169 [ 649.649008][T10219] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 649.657544][T10219] RBP: 00007f39b400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 649.665630][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.673735][T10219] R13: 0000000000000000 R14: 00007f39b41a5fa0 R15: 00007ffe7a311a28 [ 649.681837][T10219] [ 649.684959][T10219] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 649.692280][T10219] CPU: 1 PID: 10219 Comm: syz.3.1617 Not tainted 6.1.131-syzkaller #0 [ 649.700906][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 649.711070][T10219] Call Trace: [ 649.714358][T10219] [ 649.717300][T10219] dump_stack_lvl+0x1e3/0x2cb [ 649.722003][T10219] ? nf_tcp_handle_invalid+0x647/0x647 [ 649.727484][T10219] ? panic+0x764/0x764 [ 649.731576][T10219] ? 0xffffffffa0004b94 [ 649.735744][T10219] ? vscnprintf+0x59/0x80 [ 649.740097][T10219] panic+0x318/0x764 [ 649.744013][T10219] ? __warn+0x169/0x520 [ 649.748189][T10219] ? memcpy_page_flushcache+0xfc/0xfc [ 649.753681][T10219] __warn+0x348/0x520 [ 649.757678][T10219] ? format_decode+0x12d2/0x1f10 [ 649.762642][T10219] report_bug+0x2af/0x500 [ 649.766987][T10219] ? format_decode+0x12d2/0x1f10 [ 649.771947][T10219] handle_bug+0x3d/0x70 [ 649.776118][T10219] exc_invalid_op+0x16/0x40 [ 649.780665][T10219] asm_exc_invalid_op+0x16/0x20 [ 649.785534][T10219] RIP: 0010:format_decode+0x12d2/0x1f10 [ 649.791103][T10219] Code: e0 03 01 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 07 84 c0 0f 85 30 0c 00 00 41 0f be 36 48 c7 c7 a0 8e 31 8c e8 ae dc a6 f6 <0f> 0b e9 01 fa ff ff 48 8b 4c 24 18 80 e1 07 38 c1 0f 8c e3 ed ff [ 649.810724][T10219] RSP: 0018:ffffc9000da0f680 EFLAGS: 00010246 [ 649.816809][T10219] RAX: d82c1e5ac6f34b00 RBX: 00000000ffffffdb RCX: 0000000000080000 [ 649.824816][T10219] RDX: ffffc9000e3e2000 RSI: 00000000000044a8 RDI: 00000000000044a9 [ 649.832828][T10219] RBP: ffffc9000da0f770 R08: ffffffff8152c26e R09: fffff52001b41e31 [ 649.840836][T10219] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff0a00ffffff00 [ 649.848823][T10219] R13: ffff0000ffffff00 R14: ffffc9000da0f9ac R15: 1ffff92001b41f35 [ 649.856836][T10219] ? __warn_printk+0x28e/0x350 [ 649.861636][T10219] ? vsnprintf+0x1c70/0x1c70 [ 649.866252][T10219] ? bstr_printf+0x1bb/0x1160 [ 649.870953][T10219] bstr_printf+0x130/0x1160 [ 649.875482][T10219] ? vbin_printf+0x1be0/0x1be0 [ 649.880295][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.885775][T10219] ? bpf_trace_printk+0x111/0x220 [ 649.890819][T10219] bpf_trace_printk+0x19d/0x220 [ 649.895686][T10219] ? ktime_get+0x1ac/0x270 [ 649.900132][T10219] ? bpf_probe_write_user+0xd0/0xd0 [ 649.905342][T10219] ? ktime_get+0x1ac/0x270 [ 649.909817][T10219] ? ktime_get+0x242/0x270 [ 649.914259][T10219] bpf_prog_12183cdb1cd51dab+0x2e/0x32 [ 649.919739][T10219] bpf_test_run+0x40f/0x8b0 [ 649.924277][T10219] ? convert___skb_to_skb+0x630/0x630 [ 649.929674][T10219] ? eth_type_trans+0x3cd/0x7a0 [ 649.934558][T10219] ? eth_get_headlen+0x240/0x240 [ 649.939525][T10219] ? convert___skb_to_skb+0x41/0x630 [ 649.944857][T10219] ? build_skb+0x136/0x280 [ 649.949390][T10219] bpf_prog_test_run_skb+0xaf1/0x13a0 [ 649.954840][T10219] ? cpu_online+0xb0/0xb0 [ 649.959225][T10219] ? cpu_online+0xb0/0xb0 [ 649.963594][T10219] bpf_prog_test_run+0x32f/0x3a0 [ 649.968549][T10219] __sys_bpf+0x3eb/0x6c0 [ 649.972808][T10219] ? bpf_link_show_fdinfo+0x300/0x300 [ 649.978204][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.983689][T10219] ? print_irqtrace_events+0x210/0x210 [ 649.989179][T10219] ? syscall_enter_from_user_mode+0x2e/0x230 [ 649.995181][T10219] ? lockdep_hardirqs_on+0x94/0x130 [ 650.000402][T10219] __x64_sys_bpf+0x78/0x90 [ 650.004846][T10219] do_syscall_64+0x3b/0xb0 [ 650.009276][T10219] ? clear_bhb_loop+0x45/0xa0 [ 650.013975][T10219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.019899][T10219] RIP: 0033:0x7f39b3f8d169 [ 650.024334][T10219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.043956][T10219] RSP: 002b:00007f39b4d35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 650.052416][T10219] RAX: ffffffffffffffda RBX: 00007f39b41a5fa0 RCX: 00007f39b3f8d169 [ 650.060403][T10219] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 650.068415][T10219] RBP: 00007f39b400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 650.076398][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.084381][T10219] R13: 0000000000000000 R14: 00007f39b41a5fa0 R15: 00007ffe7a311a28 [ 650.092383][T10219] [ 650.095677][T10219] Kernel Offset: disabled [ 650.100064][T10219] Rebooting in 86400 seconds..