last executing test programs: 27m18.86762349s ago: executing program 1 (id=31): pipe2$watch_queue(0x0, 0x80) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 27m17.578072724s ago: executing program 1 (id=36): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r1) write$FUSE_BMAP(r4, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any}]}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 27m17.1355084s ago: executing program 1 (id=38): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) 27m15.131683571s ago: executing program 1 (id=46): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) shutdown(r2, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x800804, &(0x7f0000000dc0)={[{@numtail}, {@shortname_lower}, {@utf8no}, {@utf8}, {}, {@fat=@tz_utc}, {@rodir}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@tz_utc}, {@numtail}, {@rodir}, {@uni_xlateno}, {@shortname_win95}]}, 0x1, 0x283, &(0x7f0000000b00)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000000680), 0x8, 0x0) write$UHID_INPUT(r4, &(0x7f0000002000)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) lstat(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='balance_dirty_pages\x00', r6, 0x0, 0x1}, 0x18) 27m14.41177185s ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 27m14.111128463s ago: executing program 1 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x2000000, 0x0, 0xfffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0), 0x0, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 26m58.874187943s ago: executing program 32 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x2000000, 0x0, 0xfffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0), 0x0, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 23m52.867615308s ago: executing program 2 (id=354): fsopen(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(0x0, 0x981f40, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x6, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 23m47.724119833s ago: executing program 2 (id=359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e7", 0x96, 0x840, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) socket$igmp(0x2, 0x3, 0x2) 23m41.550373311s ago: executing program 2 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x11, r0, 0xdc322000) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) 23m39.575861511s ago: executing program 2 (id=369): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x8}, 0x2, 0xe3, &(0x7f0000000cc0)="fcfa6271e35603cc755f1896b066cb6d4cf58b30d224ba0e4b0df06998ac6a33e0516959baf1ad8c8c60db073e7246047981d977b7b9790f5995757faa4fa3f2e4d86d1e3b3571dbff8b2d5bbe998a", 0x4f, 0xf, 0x5, 0x0, 0x7, 0x2, &(0x7f0000000d40)="17f7edbaf8da36aea55da0146a69a2c708143004f8b298651ac3a4db915cbc3a613664d2f4516be1a9cf2c4dc561f58b16252971839d1bfd95919a11671d7e37eb84e4beb80809cb580c55569ed99d1eca0999a1e2d22ec4470222ee740cb418b07e1ede148d883f113461143b0d6efa43a06c4b7ece88b353d71c7a6925ebdc43313b30dcb55ff7de1b78bec322b13b5f182ffcbe51cd34c8e6a54c50e3b0a503bd921e"}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4}, 0x94) 23m36.36906182s ago: executing program 2 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) close_range(r0, r0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3dbc4689, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r4}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 23m33.923523567s ago: executing program 2 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000e40)={0xa, 0x4e23, 0x7, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d", 0x50, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x2]}, &(0x7f0000000180)=0x54) 23m17.658306549s ago: executing program 33 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace(0x4207, r0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000e40)={0xa, 0x4e23, 0x7, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d", 0x50, 0x840, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x12, r4, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x401, 0x6, 0xfffffff9, 0x9, 0x2]}, &(0x7f0000000180)=0x54) 6m3.556749031s ago: executing program 3 (id=2823): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) getpid() r6 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r6, &(0x7f0000000240)={0x0, 0x2c, 0x2c000000, 0x2c, 0x0, 0x2c}, 0x48) sched_setaffinity(0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) socket$inet6(0xa, 0x2, 0x3a) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 6m1.587731949s ago: executing program 3 (id=2824): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x2) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x7331, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000805ea41d66c3d9f5ac76a05221e0333e62f28bc00a5cba7a4e2f94", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000908200"/28], 0x48) connect$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8044) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 6m0.271113275s ago: executing program 3 (id=2827): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000304ec3edcfd"]}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x9f59607bd2ee77dd, 0x0) 5m57.620276468s ago: executing program 3 (id=2835): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) lseek(0xffffffffffffffff, 0x3, 0x2) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x7331, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1a00000004000000000000000100000000000000805ea41d66c3d9f5ac76a05221e0333e62f28bc00a5cba7a4e2f94", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000908200"/28], 0x48) connect$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r7, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 5m55.897599587s ago: executing program 3 (id=2838): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = open(&(0x7f0000000340)='./file1\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000cc7000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x116}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5m52.353490401s ago: executing program 3 (id=2847): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_getres(0xffffffea, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 5m36.81178585s ago: executing program 34 (id=2847): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_getres(0xffffffea, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) dup3(r1, r0, 0x0) 4m13.882060902s ago: executing program 4 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) read(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 4m12.868170414s ago: executing program 4 (id=3026): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r0, 0x400, 0x2) 4m11.584487247s ago: executing program 4 (id=3031): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 4m10.113332185s ago: executing program 4 (id=3034): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee00) keyctl$setperm(0x5, r0, 0x21081c22) keyctl$get_security(0x11, r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) chroot(&(0x7f00000007c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902240200fa0074980905e4ff11070103000905010200ffe0000009"], 0x0) 4m8.543887452s ago: executing program 4 (id=3038): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 4m8.136080364s ago: executing program 4 (id=3043): timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) 4m7.624514685s ago: executing program 35 (id=3043): timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) timer_settime(0x0, 0x0, 0x0, 0x0) 8.603936159s ago: executing program 6 (id=4100): socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000004c0), &(0x7f0000001c40)=r3}, 0x20) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) creat(&(0x7f0000000000)='./file1\x00', 0xa6) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) socket$inet6(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val, @void, @mpls={[{0x3}, {}, {0xf, 0x0, 0x1}], @llc={@llc={0x80, 0xdc, "92", "cb6b8146a253a9bb7330f4725f86ff7a6543036bbf4b812424dc"}}}}, 0x2d) ppoll(&(0x7f00000001c0)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0) 8.275650305s ago: executing program 7 (id=4107): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3d11, 0x60}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 8.08846907s ago: executing program 0 (id=4109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000093024a77b0440b31000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) epoll_create1(0x0) clock_nanosleep(0x2, 0xfffffdfc, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) 7.72399774s ago: executing program 0 (id=4110): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000080)='user\x00', 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000000000000000001"], 0x0, 0x4e}, 0x28) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.649782746s ago: executing program 6 (id=4111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 7.605185159s ago: executing program 7 (id=4112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000855}, 0x0) msgget(0x1, 0x382) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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") mkdir(&(0x7f0000000200)='./file0\x00', 0x50) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 7.46997243s ago: executing program 6 (id=4114): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 7.395862206s ago: executing program 7 (id=4115): r0 = fsmount(0xffffffffffffffff, 0x1, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340)="dea08d64bea19628cfe69b6906241abc81f2911c9309f264b43ffedee87c6daab293b99e4e7c42c35eb2676594a722782e73d956a9accb4b90d3a234aac8de25cf9355ad81ec7cc09db4a906875e4efb69f9d07f253b8d467a268a84a16d27f33927128cb45dafe96e3ee43289d7c375ceb55486bd7f4e207024d00389dc86cda22e287912015090c37808f23794f3fc23cefd8241a3629622a263f90bd78ec7f701bd855f889bda1a5b1230577b807eec7622f1fe6eb271734cfd0a5770cb6727430bc3b28e95097ebee0194a0d10bf350d598b3dcc4fcdf27d61391e1c6ff22357e29c3a34f3cbfe80c39b173edbe9d8266404d0", &(0x7f00000000c0)=""/130}, 0x20) socketpair(0x3, 0x1, 0x7ff, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback={0x2000000}, 0xa79}, 0x1c) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {r2}}, './file0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 7.373171287s ago: executing program 6 (id=4116): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x400000000000247, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4051}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80802000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4010841}, 0x20000082) socket$inet6_tcp(0xa, 0x1, 0x0) 7.289818135s ago: executing program 5 (id=4117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.85442266s ago: executing program 7 (id=4118): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b000000050000000400000032a9000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x100) 5.791964925s ago: executing program 0 (id=4119): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 5.73246653s ago: executing program 7 (id=4120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.715196881s ago: executing program 0 (id=4121): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3d11, 0x60}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 5.644032257s ago: executing program 5 (id=4122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 5.619920479s ago: executing program 7 (id=4123): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000700), &(0x7f0000000280)}, 0x20) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) 5.541436115s ago: executing program 5 (id=4124): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 5.320333163s ago: executing program 5 (id=4125): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f0000000200)={[{@usrjquota}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 5.10375212s ago: executing program 5 (id=4126): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x4b, &(0x7f0000000080)=[{0x1, 0xff, 0xa, 0x7ffc040a}, {0x4, 0x6, 0xa, 0x58c3}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000940)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x38c) 4.98329113s ago: executing program 0 (id=4127): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x4, 0x7, 0xfff8}, {0x9, 0x1, 0x7, 0x1000, 0x4}, 0x1, 0xf6, 0xd28}}, @TCA_TBF_BURST={0x8, 0x6, 0x9}]}}]}, 0x60}}, 0x20040084) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 4.959759602s ago: executing program 6 (id=4128): r0 = fsmount(0xffffffffffffffff, 0x1, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340)="dea08d64bea19628cfe69b6906241abc81f2911c9309f264b43ffedee87c6daab293b99e4e7c42c35eb2676594a722782e73d956a9accb4b90d3a234aac8de25cf9355ad81ec7cc09db4a906875e4efb69f9d07f253b8d467a268a84a16d27f33927128cb45dafe96e3ee43289d7c375ceb55486bd7f4e207024d00389dc86cda22e287912015090c37808f23794f3fc23cefd8241a3629622a263f90bd78ec7f701bd855f889bda1a5b1230577b807eec7622f1fe6eb271734cfd0a5770cb6727430bc3b28e95097ebee0194a0d10bf350d598b3dcc4fcdf27d61391e1c6ff22357e29c3a34f3cbfe80c39b173edbe9d8266404d0", &(0x7f00000000c0)=""/130}, 0x20) socketpair(0x3, 0x1, 0x7ff, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback={0x2000000}, 0xa79}, 0x1c) fcntl$lock(r6, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {r2}}, './file0\x00'}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) 163.934337ms ago: executing program 6 (id=4129): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) unshare(0x22020600) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) set_robust_list(0x0, 0x0) recvmsg(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffec9, 0x0}, 0x2) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) 54.525786ms ago: executing program 5 (id=4130): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 0s ago: executing program 0 (id=4131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000480)='./file0\x00', 0xc80, &(0x7f0000000380)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d634a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d3e6cae315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d62310356f0f8a01a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="140000"], &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): 3.209464][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.216853][ T7686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.095165][T16512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1406.145280][T16512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1407.357150][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.364393][ T7684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1408.748333][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.284747][ T7666] hsr_slave_0: left promiscuous mode [ 1410.353054][ T7666] hsr_slave_1: left promiscuous mode [ 1410.385532][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.412949][ T7666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.421175][ T7666] bridge_slave_1: left allmulticast mode [ 1410.432899][ T7666] bridge_slave_1: left promiscuous mode [ 1410.447954][ T7666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.478682][ T7666] bridge_slave_0: left allmulticast mode [ 1410.478745][ T7666] bridge_slave_0: left promiscuous mode [ 1410.478933][ T7666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.380448][T16703] syz.4.2907[16703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1411.380597][T16703] syz.4.2907[16703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1412.948246][T16716] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 1412.973948][ T7666] team0 (unregistering): Port device team_slave_1 removed [ 1413.142461][ T7666] team0 (unregistering): Port device team_slave_0 removed [ 1413.533957][ T7666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.680908][ T7666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.831660][ T7666] bond0 (unregistering): Released all slaves [ 1417.536352][T16512] veth0_vlan: entered promiscuous mode [ 1417.562204][T16512] veth1_vlan: entered promiscuous mode [ 1417.703218][T16512] veth0_macvtap: entered promiscuous mode [ 1417.716813][T16512] veth1_macvtap: entered promiscuous mode [ 1417.773611][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1417.773676][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.773688][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1417.773710][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.778350][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1417.837084][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.837109][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.837122][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1417.837136][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1417.838745][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1417.892121][T16512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.892200][T16512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.892230][T16512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1417.892257][T16512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1418.033122][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.033174][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1418.099563][ T7666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1418.099584][ T7666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1419.211752][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2867'. [ 1422.883917][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.890284][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.751573][ T27] audit: type=1326 audit(2000000402.935:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1423.751729][ T27] audit: type=1326 audit(2000000402.935:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1423.771222][ T27] audit: type=1326 audit(2000000402.955:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1423.959575][ T27] audit: type=1326 audit(2000000402.955:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1423.990373][ T27] audit: type=1326 audit(2000000402.955:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1424.000330][T16845] lo: entered promiscuous mode [ 1424.033005][ T27] audit: type=1326 audit(2000000403.025:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1424.072075][T16845] lo: entered allmulticast mode [ 1424.086931][ T27] audit: type=1326 audit(2000000403.025:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1424.096991][T16845] tunl0: entered promiscuous mode [ 1424.133203][T16845] tunl0: entered allmulticast mode [ 1424.140306][T16845] gre0: entered promiscuous mode [ 1424.152919][T16845] gre0: entered allmulticast mode [ 1424.169385][ T27] audit: type=1326 audit(2000000403.025:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1424.214409][T16845] gretap0: entered promiscuous mode [ 1424.242901][T16845] gretap0: entered allmulticast mode [ 1424.269634][T16845] erspan0: entered promiscuous mode [ 1424.280432][ T27] audit: type=1326 audit(2000000403.025:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1424.319107][T16845] erspan0: entered allmulticast mode [ 1424.334038][ T27] audit: type=1326 audit(2000000403.025:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16839 comm="syz.0.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62c5f90b07 code=0x7ffc0000 [ 1424.348762][T16845] ip_vti0: entered promiscuous mode [ 1424.396272][T16845] ip_vti0: entered allmulticast mode [ 1424.419446][T16845] ip6_vti0: entered promiscuous mode [ 1424.452857][T16845] ip6_vti0: entered allmulticast mode [ 1424.483714][T16845] sit0: entered promiscuous mode [ 1424.502993][T16845] sit0: entered allmulticast mode [ 1424.540823][T16845] ip6tnl0: entered promiscuous mode [ 1424.562221][T16845] ip6tnl0: entered allmulticast mode [ 1424.574700][T16845] ip6gre0: entered promiscuous mode [ 1424.579991][T16845] ip6gre0: entered allmulticast mode [ 1424.628420][T16845] ip6gretap0: entered promiscuous mode [ 1424.665622][T16845] ip6gretap0: entered allmulticast mode [ 1424.705982][T16845] bridge0: port 3(syz_tun) entered blocking state [ 1424.712586][T16845] bridge0: port 3(syz_tun) entered forwarding state [ 1424.758988][T16845] bridge0: entered promiscuous mode [ 1424.775464][T16845] bridge0: entered allmulticast mode [ 1424.781985][T16845] vcan0: entered promiscuous mode [ 1424.820881][T16845] vcan0: entered allmulticast mode [ 1424.839779][T16845] bond0: entered promiscuous mode [ 1424.863753][T16845] bond_slave_0: entered promiscuous mode [ 1424.891197][T16845] bond_slave_1: entered promiscuous mode [ 1424.912443][T16845] bond0: entered allmulticast mode [ 1424.931076][T16845] bond_slave_0: entered allmulticast mode [ 1424.952753][T16845] bond_slave_1: entered allmulticast mode [ 1424.982824][T16845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.990426][T16845] team0: entered promiscuous mode [ 1425.058594][T16845] team_slave_0: entered promiscuous mode [ 1425.079075][T16845] team_slave_1: entered promiscuous mode [ 1425.099612][T16845] team0: entered allmulticast mode [ 1425.129591][T16845] team_slave_0: entered allmulticast mode [ 1425.152868][T16845] team_slave_1: entered allmulticast mode [ 1425.186021][T16845] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.208634][T16845] dummy0: entered promiscuous mode [ 1425.213907][T16845] dummy0: entered allmulticast mode [ 1425.221076][T16845] nlmon0: entered promiscuous mode [ 1425.226322][T16845] nlmon0: entered allmulticast mode [ 1425.253135][T16845] caif0: entered promiscuous mode [ 1425.258257][T16845] caif0: entered allmulticast mode [ 1425.272980][T16845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1428.103346][T16898] binder: Unknown parameter 'smackfstransmute' [ 1431.609655][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 1431.609673][ T27] audit: type=1326 audit(2000000410.795:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1431.692811][ T27] audit: type=1326 audit(2000000410.845:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1431.888748][ T27] audit: type=1326 audit(2000000410.845:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.351370][ T27] audit: type=1326 audit(2000000410.855:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.435720][ T27] audit: type=1326 audit(2000000410.855:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.459528][ T27] audit: type=1326 audit(2000000410.855:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.482121][ T27] audit: type=1326 audit(2000000410.855:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.504677][ T27] audit: type=1326 audit(2000000410.855:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.532240][ T27] audit: type=1326 audit(2000000410.855:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1432.622846][ T27] audit: type=1326 audit(2000000410.855:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16941 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2216f8ebe9 code=0x7ffc0000 [ 1433.195008][T16960] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1437.615100][ T966] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1438.302796][ T966] usb 5-1: Using ep0 maxpacket: 8 [ 1438.310220][ T966] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.332991][ T966] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.404936][T17018] binder: 17015:17018 ioctl 400c620e 200000000240 returned -22 [ 1438.547734][ T966] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1438.748212][ T966] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1438.788589][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.854150][ T966] usb 5-1: config 0 descriptor?? [ 1439.357929][ T966] steelseries 0003:1038:1410.0006: item fetching failed at offset 1/5 [ 1441.602935][ T966] steelseries 0003:1038:1410.0006: parse failed [ 1441.614585][ T966] steelseries: probe of 0003:1038:1410.0006 failed with error -22 [ 1441.646338][ T966] usb 5-1: USB disconnect, device number 14 [ 1447.935879][T17070] ip6gre1: entered allmulticast mode [ 1450.010562][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 1450.171966][T17083] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1453.700456][ T7684] Bluetooth: hci2: Frame reassembly failed (-84) [ 1455.118112][T17159] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1455.528798][T17157] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2984'. [ 1455.713269][ T5779] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1456.459029][T17178] fuse: Bad value for 'user_id' [ 1457.457523][T17185] overlayfs: failed to resolve './bus': -2 [ 1458.938201][T17212] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1459.556525][T17221] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1461.670785][T17239] fuse: Bad value for 'user_id' [ 1461.791309][T17243] overlayfs: failed to resolve './bus': -2 [ 1462.958549][T17260] syz.6.3006[17260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1462.958704][T17260] syz.6.3006[17260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1464.911957][T17296] fuse: Bad value for 'fd' [ 1466.355062][T17329] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1467.642713][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1467.642733][ T27] audit: type=1326 audit(2000000446.825:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1467.752759][ T27] audit: type=1326 audit(2000000446.825:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1467.785510][ T27] audit: type=1326 audit(2000000446.825:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1467.810669][ T27] audit: type=1326 audit(2000000446.825:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1467.882767][ T27] audit: type=1326 audit(2000000446.935:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1467.963695][ T27] audit: type=1326 audit(2000000446.935:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1468.022402][T17342] fuse: Bad value for 'fd' [ 1468.033940][ T27] audit: type=1326 audit(2000000446.935:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1468.103064][ T27] audit: type=1326 audit(2000000446.935:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1468.164084][ T27] audit: type=1326 audit(2000000446.935:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1468.213469][ T27] audit: type=1326 audit(2000000446.935:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17333 comm="syz.0.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1469.650175][T17364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3025'. [ 1470.617853][T17383] fuse: Bad value for 'fd' [ 1472.512831][T13516] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1472.704936][T13516] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1472.713229][T13516] usb 7-1: config 0 has no interface number 0 [ 1472.719397][T13516] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.731035][T13516] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.741509][T13516] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1472.751099][T13516] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.810892][T13516] usb 7-1: config 0 descriptor?? [ 1473.429888][T13516] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0007/input/input76 [ 1473.761211][T13516] holtek_kbd 0003:04D9:A055.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 1473.804014][T13516] usb 7-1: USB disconnect, device number 2 [ 1473.990133][T17421] fido_id[17421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1473.997758][T17425] fuse: Bad value for 'fd' [ 1474.183699][ T7670] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.243769][ T28] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1474.316623][ T7670] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.433605][ T7670] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.463567][ T28] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1474.498534][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1474.539190][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1474.573202][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 557, setting to 64 [ 1474.622116][ T28] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.639132][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.650016][ T7670] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.657731][ T28] usb 1-1: Product: syz [ 1474.678116][ T28] usb 1-1: Manufacturer: syz [ 1474.696259][ T28] usb 1-1: SerialNumber: syz [ 1474.716208][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.963282][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.982982][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1475.850762][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1475.860934][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1475.871913][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1475.880420][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1475.888608][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1475.902953][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1475.998467][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1476.011823][T17423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1476.415127][ T28] cdc_ncm 1-1:1.0: bind() failure [ 1476.430389][ T28] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1476.446255][ T28] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1476.479697][ T28] usbtest: probe of 1-1:1.1 failed with error -71 [ 1476.542025][ T28] usb 1-1: USB disconnect, device number 14 [ 1476.752271][T17438] netlink: 'syz.6.3046': attribute type 3 has an invalid length. [ 1478.302403][ T5782] Bluetooth: hci0: command tx timeout [ 1478.808510][T17449] chnl_net:caif_netlink_parms(): no params data found [ 1479.023494][T17489] fuse: Bad value for 'fd' [ 1479.119351][ T7670] hsr_slave_0: left promiscuous mode [ 1479.138934][ T7670] hsr_slave_1: left promiscuous mode [ 1479.177005][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.188052][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.210131][ T7670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.237495][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.280517][ T7670] bridge_slave_1: left allmulticast mode [ 1479.292820][ T7670] bridge_slave_1: left promiscuous mode [ 1479.305875][ T7670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.333846][ T7670] bridge_slave_0: left allmulticast mode [ 1479.339553][ T7670] bridge_slave_0: left promiscuous mode [ 1479.362051][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.489301][ T7670] veth1_macvtap: left promiscuous mode [ 1479.495134][ T7670] veth0_macvtap: left promiscuous mode [ 1479.511241][ T7670] veth1_vlan: left promiscuous mode [ 1479.517675][ T7670] veth0_vlan: left promiscuous mode [ 1480.352849][ T5782] Bluetooth: hci0: command tx timeout [ 1480.641531][T17512] binder: 17503:17512 ioctl 400c620e 200000000240 returned -22 [ 1481.636564][ T7670] team0 (unregistering): Port device team_slave_1 removed [ 1481.705130][ T7670] team0 (unregistering): Port device team_slave_0 removed [ 1481.789758][ T7670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1481.876431][ T7670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1482.437923][ T5782] Bluetooth: hci0: command tx timeout [ 1482.547917][ T7670] bond0 (unregistering): Released all slaves [ 1482.659777][T17512] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1482.669520][T17512] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1482.679309][T17512] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1483.057562][T17529] fuse: Bad value for 'fd' [ 1483.231001][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.258868][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.290805][T17449] bridge_slave_0: entered allmulticast mode [ 1483.299444][T17449] bridge_slave_0: entered promiscuous mode [ 1483.335649][T17449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.351152][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.382795][T17449] bridge_slave_1: entered allmulticast mode [ 1483.390326][T17449] bridge_slave_1: entered promiscuous mode [ 1483.657611][T17449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.732048][T17449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.309280][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.316466][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.855363][ T5782] Bluetooth: hci0: command tx timeout [ 1485.073488][T17544] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1485.083035][T17544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1485.092893][T17544] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1485.169762][T17449] team0: Port device team_slave_0 added [ 1485.259622][T17449] team0: Port device team_slave_1 added [ 1485.461657][T17449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.511122][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.623790][T17449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.637013][T17449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.644092][T17449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.722661][T17449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.027779][T17449] hsr_slave_0: entered promiscuous mode [ 1486.090013][T17449] hsr_slave_1: entered promiscuous mode [ 1486.372830][T13534] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1486.702710][T13534] usb 6-1: Using ep0 maxpacket: 32 [ 1486.714412][T13534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.733697][T13534] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.770738][T13534] usb 6-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00 [ 1486.811261][T13534] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.845029][T13534] usb 6-1: config 0 descriptor?? [ 1487.205284][T17449] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1487.237865][T17449] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1487.287638][T17449] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1487.337258][T17449] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1487.669073][T17449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1487.766122][T17449] 8021q: adding VLAN 0 to HW filter on device team0 [ 1487.886711][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.893956][T11917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1487.952577][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.959950][T11917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1488.042602][T17587] binder: 17582:17587 ioctl 400c620e 200000000240 returned -22 [ 1488.647590][T17587] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1488.657078][T17587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1488.666826][T17587] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1488.668166][T17449] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1488.686704][T17449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1489.205978][T13534] usbhid 6-1:0.0: can't add hid device: -71 [ 1489.221472][T13534] usbhid: probe of 6-1:0.0 failed with error -71 [ 1489.242991][T13534] usb 6-1: USB disconnect, device number 2 [ 1490.378412][T17449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.114167][T17613] fuse: Bad value for 'fd' [ 1491.864640][T17449] veth0_vlan: entered promiscuous mode [ 1491.925059][T17449] veth1_vlan: entered promiscuous mode [ 1491.981063][T17626] block device autoloading is deprecated and will be removed. [ 1492.046368][T17449] veth0_macvtap: entered promiscuous mode [ 1492.117092][T17449] veth1_macvtap: entered promiscuous mode [ 1492.197438][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.215195][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.230113][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1492.274370][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.404120][T17449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1493.147686][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.202740][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.222766][T17449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1493.242717][T17449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1493.268293][T17449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1493.306792][T17449] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.367490][T17449] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.411169][T17449] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.436540][T17449] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1493.718761][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.743965][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.823240][ T7668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1493.853162][ T7668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1493.963619][T14794] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1494.149128][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 1494.149144][ T27] audit: type=1326 audit(2000000473.335:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.207313][T14794] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1494.221138][T14794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.244873][ T27] audit: type=1326 audit(2000000473.365:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.269570][T14794] usb 1-1: config 0 descriptor?? [ 1494.295764][ T27] audit: type=1326 audit(2000000473.365:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.355621][ T27] audit: type=1326 audit(2000000473.375:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.419936][ T27] audit: type=1326 audit(2000000473.385:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.466232][ T27] audit: type=1326 audit(2000000473.385:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.540389][ T27] audit: type=1326 audit(2000000473.385:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.643592][ T966] kernel write not supported for file /6/net/rt_cache (pid: 966 comm: kworker/1:2) [ 1494.659954][ T27] audit: type=1326 audit(2000000473.385:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.723193][ T27] audit: type=1326 audit(2000000473.385:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1494.792755][ T27] audit: type=1326 audit(2000000473.385:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.7.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1495.151182][T14794] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1495.163165][T14794] asix: probe of 1-1:0.0 failed with error -32 [ 1495.275220][T17685] bridge: RTM_NEWNEIGH with invalid ether address [ 1496.741708][ T966] usb 1-1: USB disconnect, device number 15 [ 1498.487709][T17712] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3089'. [ 1499.823917][T17717] fuse: Bad value for 'fd' [ 1500.143529][T17717] block device autoloading is deprecated and will be removed. [ 1505.075706][T17774] netlink: 'syz.6.3108': attribute type 12 has an invalid length. [ 1506.612362][T17786] hub 8-0:1.0: USB hub found [ 1506.620467][T17786] hub 8-0:1.0: 1 port detected [ 1510.563895][T17819] overlayfs: failed to resolve './bus': -2 [ 1511.111863][T17824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1511.857587][T17827] fuse: Unknown parameter 'user_id00000000000000000000' [ 1511.964320][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 1513.182334][ T5784] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1513.366883][ T5784] usb 1-1: config 127 has an invalid interface number: 32 but max is 0 [ 1513.383520][ T5784] usb 1-1: config 127 has no interface number 0 [ 1513.410305][ T5784] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=64.06 [ 1513.432989][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.459313][ T5784] ums-freecom 1-1:127.32: USB Mass Storage device detected [ 1513.557817][T17861] overlayfs: failed to resolve './bus': -2 [ 1513.739196][T17867] fuse: Unknown parameter 'user_id00000000000000000000' [ 1514.030988][T17873] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1514.847460][T13534] usb 1-1: USB disconnect, device number 16 [ 1515.391779][T17894] syz.7.3136[17894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1515.391939][T17894] syz.7.3136[17894] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1515.995836][T17908] fuse: Bad value for 'fd' [ 1516.013026][ T5828] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1516.214331][ T5828] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1516.229159][ T5828] usb 8-1: config 0 has no interface number 0 [ 1516.236251][ T5828] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.262964][ T5828] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.308948][ T5828] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1516.359315][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.411179][ T5828] usb 8-1: config 0 descriptor?? [ 1516.539501][T17915] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1518.898456][ T5828] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0008/input/input77 [ 1519.054371][ T5828] holtek_kbd 0003:04D9:A055.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1519.134909][ T5828] usb 8-1: USB disconnect, device number 2 [ 1519.248510][T17942] fido_id[17942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1519.865370][T17955] 9pnet_fd: Insufficient options for proto=fd [ 1520.350442][T17954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1522.582216][T17989] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1522.769559][T17998] fuse: Unknown parameter '0x0000000000000003' [ 1523.219565][T18006] 9pnet_fd: Insufficient options for proto=fd [ 1523.474272][T18010] bridge: RTM_NEWNEIGH with invalid ether address [ 1524.086842][T18016] loop0: detected capacity change from 0 to 256 [ 1524.532708][ T28] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1524.753424][ T28] usb 1-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 1524.883430][ T28] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1525.070332][ T28] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1525.207182][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1525.228472][ T28] usb 1-1: SerialNumber: syz [ 1525.336273][ T28] usb 1-1: 0:2 : does not exist [ 1525.377378][ T28] usb 1-1: unit 220 not found! [ 1525.655843][T17452] usb 1-1: USB disconnect, device number 17 [ 1526.523673][T18041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3174'. [ 1527.307025][T18058] bridge: RTM_NEWNEIGH with invalid ether address [ 1530.019554][T18074] loop0: detected capacity change from 0 to 1024 [ 1530.181312][T18074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1530.489820][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.864435][T18090] fuse: Unknown parameter 'user_id00000000000000000000' [ 1532.994429][T18131] syz.7.3195[18131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1532.994576][T18131] syz.7.3195[18131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1533.391064][T18139] loop0: detected capacity change from 0 to 1024 [ 1533.439691][ T28] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1533.554269][T18139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.652578][ T28] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1533.661502][ T28] usb 7-1: config 0 has no interface number 0 [ 1533.674165][ T28] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.687030][ T28] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.702720][ T28] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1533.711821][ T28] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.754151][ T28] usb 7-1: config 0 descriptor?? [ 1534.353442][ T28] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0009/input/input82 [ 1535.021448][ T28] holtek_kbd 0003:04D9:A055.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 1535.198787][ T28] usb 7-1: USB disconnect, device number 3 [ 1535.312710][T18168] bridge: RTM_NEWNEIGH with invalid ether address [ 1538.015719][T18204] fuse: Bad value for 'fd' [ 1538.357141][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 1538.357159][ T27] audit: type=1326 audit(2000000517.545:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.435089][ T27] audit: type=1326 audit(2000000517.545:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.526627][ T27] audit: type=1326 audit(2000000517.585:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.604827][ T27] audit: type=1326 audit(2000000517.585:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.648911][T18221] random: crng reseeded on system resumption [ 1538.679198][ T27] audit: type=1326 audit(2000000517.585:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.773019][ T27] audit: type=1326 audit(2000000517.605:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1538.877220][ T27] audit: type=1326 audit(2000000517.605:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18211 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1540.074548][T18237] fuse: Bad value for 'fd' [ 1540.255023][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.378702][T18270] loop0: detected capacity change from 0 to 1024 [ 1542.481429][T18279] fuse: Bad value for 'fd' [ 1542.487638][T18270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1543.466788][T18287] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3231'. [ 1544.266032][ T27] audit: type=1326 audit(2000000523.455:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.6.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1544.467125][ T27] audit: type=1326 audit(2000000523.455:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.6.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1544.500917][ T27] audit: type=1326 audit(2000000523.455:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.6.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1544.561386][ T27] audit: type=1326 audit(2000000523.485:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18306 comm="syz.6.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1544.564982][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.406576][T18329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3245'. [ 1545.720756][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.728257][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.404875][T18352] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1549.045539][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.053363][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.195030][T18384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1551.222885][ T27] audit: type=1326 audit(2000000530.405:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.281382][ T27] audit: type=1326 audit(2000000530.405:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.366729][ T27] audit: type=1326 audit(2000000530.405:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.432046][T18395] bridge0: port 3(syz_tun) entered blocking state [ 1551.439445][T18395] bridge0: port 3(syz_tun) entered disabled state [ 1551.448280][T18395] bridge0: port 3(syz_tun) entered blocking state [ 1551.454889][T18395] bridge0: port 3(syz_tun) entered forwarding state [ 1551.464033][T18395] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1551.475438][T18400] loop0: detected capacity change from 0 to 2048 [ 1551.512799][ T27] audit: type=1326 audit(2000000530.405:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.587656][ T27] audit: type=1326 audit(2000000530.405:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.637475][ T27] audit: type=1326 audit(2000000530.405:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.746578][ T27] audit: type=1326 audit(2000000530.405:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1551.936876][T18400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1551.949898][T18374] udevd[18374]: failed to send result of seq 18021 to main daemon: Connection refused [ 1551.972717][ T27] audit: type=1326 audit(2000000530.405:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1552.063444][ T27] audit: type=1326 audit(2000000530.405:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1552.144631][ T27] audit: type=1326 audit(2000000530.405:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18391 comm="syz.0.3262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1552.308544][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1552.507335][T18424] loop0: detected capacity change from 0 to 512 [ 1552.515829][T18424] ext4: Unknown parameter 'smackfsfloor' [ 1552.594473][T18429] fuse: Unknown parameter '0x0000000000000005' [ 1552.978084][T18447] loop0: detected capacity change from 0 to 1024 [ 1553.013385][T18447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.473516][T18466] fuse: Unknown parameter '0x0000000000000005' [ 1554.079349][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.220783][T18480] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1555.640402][T18492] fuse: Unknown parameter '0x0000000000000005' [ 1556.021211][T18502] loop0: detected capacity change from 0 to 1024 [ 1556.061045][T18502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.533948][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 1556.533966][ T27] audit: type=1326 audit(2000000535.725:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.582220][ T27] audit: type=1326 audit(2000000535.725:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.642356][ T27] audit: type=1326 audit(2000000535.725:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.671612][ T27] audit: type=1326 audit(2000000535.725:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.697817][ T27] audit: type=1326 audit(2000000535.725:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.721154][ T27] audit: type=1326 audit(2000000535.725:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.754066][T18522] netlink: 'syz.7.3303': attribute type 10 has an invalid length. [ 1556.765531][ T27] audit: type=1326 audit(2000000535.725:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1556.859268][T18522] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1556.898621][ T27] audit: type=1326 audit(2000000535.725:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1557.003038][ T27] audit: type=1326 audit(2000000535.725:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1557.143936][ T27] audit: type=1326 audit(2000000535.725:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18513 comm="syz.7.3301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1557.476368][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.485776][T17452] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1557.665942][T17452] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1557.674257][T17452] usb 6-1: config 0 has no interface number 0 [ 1557.680396][T17452] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.691907][T17452] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.701931][T17452] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1557.711080][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.721979][T17452] usb 6-1: config 0 descriptor?? [ 1558.238527][T17452] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.000A/input/input84 [ 1558.352530][T17452] holtek_kbd 0003:04D9:A055.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 1558.402382][T13534] usb 6-1: USB disconnect, device number 3 [ 1558.681395][T18554] loop0: detected capacity change from 0 to 1024 [ 1558.717452][T18554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1560.484412][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.580266][T18576] raw_sendmsg: syz.7.3322 forgot to set AF_INET. Fix it! [ 1560.822353][T18588] loop0: detected capacity change from 0 to 1024 [ 1560.837596][T18590] syz.6.3326[18590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.837736][T18590] syz.6.3326[18590] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1560.840099][T18588] EXT4-fs: Ignoring removed orlov option [ 1560.878904][T18590] sd 0:0:1:0: device reset [ 1560.931895][T18588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1561.098204][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1561.971008][ T5828] hid-generic 0003:0004:0FFF.000B: unknown main item tag 0x0 [ 1561.982869][ T5828] hid-generic 0003:0004:0FFF.000B: unknown main item tag 0x0 [ 1561.998036][ T5828] hid-generic 0003:0004:0FFF.000B: unknown main item tag 0x0 [ 1562.010593][ T5828] hid-generic 0003:0004:0FFF.000B: hidraw0: USB HID v0.03 Device [syz0] on syz0 [ 1562.247857][T18612] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3336'. [ 1563.148966][T18622] overlayfs: missing 'lowerdir' [ 1563.268505][T18626] tmpfs: Bad value for 'mpol' [ 1564.402811][T13516] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1564.604126][T13516] usb 8-1: Using ep0 maxpacket: 8 [ 1564.611125][T18634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1564.622481][T13516] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 1564.637515][T13516] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.667259][T13516] usb 8-1: config 0 descriptor?? [ 1564.692455][T13516] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input85 [ 1564.724954][T18628] overlayfs: missing 'lowerdir' [ 1564.932879][ T5140] bcm5974 8-1:0.0: could not read from device [ 1564.954487][ T5140] bcm5974 8-1:0.0: could not read from device [ 1564.992233][T13516] usb 8-1: USB disconnect, device number 3 [ 1565.274202][T18645] overlayfs: missing 'lowerdir' [ 1565.628184][T18657] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3354'. [ 1565.765396][ T27] kauditd_printk_skb: 112 callbacks suppressed [ 1565.765413][ T27] audit: type=1326 audit(2000000544.955:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1565.836775][ T27] audit: type=1326 audit(2000000544.985:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1565.887564][ T27] audit: type=1326 audit(2000000544.985:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1565.931512][ T27] audit: type=1326 audit(2000000544.985:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1565.977978][ T27] audit: type=1326 audit(2000000544.985:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.017328][ T27] audit: type=1326 audit(2000000544.985:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.049190][ T27] audit: type=1326 audit(2000000544.985:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.092079][ T27] audit: type=1326 audit(2000000544.985:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.120352][ T27] audit: type=1326 audit(2000000544.985:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.149901][ T27] audit: type=1326 audit(2000000544.985:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.5.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1566.358392][T18661] overlayfs: missing 'lowerdir' [ 1566.633718][T18670] overlayfs: missing 'workdir' [ 1566.764352][T18665] sch_fq: defrate 4294967295 ignored. [ 1566.989218][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1567.454187][T18694] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1567.681627][T18693] overlayfs: missing 'lowerdir' [ 1568.225927][T18707] overlayfs: failed to clone upperpath [ 1568.504760][T18721] tmpfs: Unknown parameter 'Ú' [ 1569.690166][T18730] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1570.815600][T18721] IPv6: Can't replace route, no match found [ 1570.821874][T18725] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 1571.185643][T18740] loop0: detected capacity change from 0 to 2048 [ 1571.208601][T18740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.766594][T14543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 1571.786520][T14543] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1571.807025][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.917182][T18754] loop0: detected capacity change from 0 to 1024 [ 1571.928030][T18754] EXT4-fs: Ignoring removed orlov option [ 1571.968756][T18754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1572.320420][T18765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1572.342137][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.843139][T18798] loop0: detected capacity change from 0 to 1024 [ 1574.874018][T18798] EXT4-fs: Ignoring removed orlov option [ 1574.896802][T18798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.009967][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.085196][T18802] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3408'. [ 1575.629800][T18813] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1577.705975][T18825] loop0: detected capacity change from 0 to 1024 [ 1577.716305][T18825] EXT4-fs: Ignoring removed orlov option [ 1577.757059][T18825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.015907][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.383584][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3419'. [ 1579.107145][T18844] loop0: detected capacity change from 0 to 512 [ 1579.170620][T18844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1579.210107][T18847] syz.6.3422[18847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.210272][T18847] syz.6.3422[18847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.234949][T18844] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1579.289063][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1579.302488][T18844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.315849][T18844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.444346][ T27] kauditd_printk_skb: 259 callbacks suppressed [ 1579.444362][ T27] audit: type=1326 audit(2000000558.635:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.501513][ T27] audit: type=1326 audit(2000000558.665:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.556765][ T27] audit: type=1326 audit(2000000558.665:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.613901][ T27] audit: type=1326 audit(2000000558.665:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.685009][ T27] audit: type=1326 audit(2000000558.665:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.802804][ T27] audit: type=1326 audit(2000000558.665:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.870125][ T27] audit: type=1326 audit(2000000558.675:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.894125][ T27] audit: type=1326 audit(2000000558.675:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.918359][ T27] audit: type=1326 audit(2000000558.675:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.953940][ T27] audit: type=1326 audit(2000000558.675:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18850 comm="syz.6.3423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1579.984876][T18855] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1580.005011][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1585.296890][T18918] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1586.307889][T18934] openvswitch: netlink: Flow actions attr not present in new flow. [ 1586.752382][T18943] tipc: Enabling not permitted [ 1586.787828][T18943] tipc: Enabling of bearer rejected, failed to enable media [ 1586.950116][T18948] bridge0: port 3(syz_tun) entered blocking state [ 1586.957331][T18948] bridge0: port 3(syz_tun) entered disabled state [ 1586.965183][T18948] syz_tun: entered allmulticast mode [ 1586.981405][T18948] syz_tun: entered promiscuous mode [ 1588.959408][T18969] 9pnet_fd: Insufficient options for proto=fd [ 1589.235540][T17452] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1589.638817][T17452] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1589.647248][T17452] usb 6-1: config 0 has no interface number 0 [ 1589.653606][T17452] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1589.664570][T17452] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1589.675482][T17452] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1589.684712][T17452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.695265][T17452] usb 6-1: config 0 descriptor?? [ 1590.246222][T17452] input: HID 04d9:a055 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:04D9:A055.000C/input/input86 [ 1590.353050][T17452] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.5-1/input1 [ 1591.591039][ T5828] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 1591.642098][T18952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1591.651297][T18952] netem: change failed [ 1591.778063][T18989] loop0: detected capacity change from 0 to 1024 [ 1591.790237][T18989] EXT4-fs: Ignoring removed orlov option [ 1591.813461][T18989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1591.827456][T18994] fuse: Unknown parameter 'group_i00000000000000000000' [ 1591.854829][T18994] block device autoloading is deprecated and will be removed. [ 1591.935024][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.442957][T19011] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3476'. [ 1592.463785][T19011] netem: change failed [ 1592.527793][T17452] usb 6-1: USB disconnect, device number 4 [ 1592.597132][T19018] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3479'. [ 1592.652000][T19024] fuse: Unknown parameter 'group_i00000000000000000000' [ 1592.734400][T19028] tmpfs: Bad value for 'mpol' [ 1593.112906][T17452] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1593.244734][T19043] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3490'. [ 1593.253920][T19043] netem: change failed [ 1593.306655][T17452] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1593.317496][T17452] usb 1-1: config 0 has no interface number 0 [ 1593.329086][T19047] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3492'. [ 1593.334841][T17452] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.380953][T17452] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.409459][T17452] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1593.421622][T17452] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.433948][T17452] usb 1-1: config 0 descriptor?? [ 1593.603241][T19053] fuse: Unknown parameter 'group_id00000000000000000000' [ 1593.657350][T19053] block device autoloading is deprecated and will be removed. [ 1593.959796][T17452] input: HID 04d9:a055 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:04D9:A055.000D/input/input87 [ 1594.065798][T17452] holtek_kbd 0003:04D9:A055.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 1594.305404][T19066] binder: 19058:19066 ioctl 400c620e 200000000240 returned -22 [ 1595.214909][T19070] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3501'. [ 1595.303917][T13516] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 1595.314399][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1595.314413][ T27] audit: type=1326 audit(2000000574.495:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.362693][ T27] audit: type=1326 audit(2000000574.495:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.412807][ T27] audit: type=1326 audit(2000000574.515:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.446455][ T27] audit: type=1326 audit(2000000574.515:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.499742][ T27] audit: type=1326 audit(2000000574.515:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.527854][ T27] audit: type=1326 audit(2000000574.525:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.591407][ T27] audit: type=1326 audit(2000000574.535:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.653021][ T27] audit: type=1326 audit(2000000574.545:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.677507][ T27] audit: type=1326 audit(2000000574.565:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1595.700892][ T27] audit: type=1326 audit(2000000574.565:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19071 comm="syz.5.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1596.250895][T19072] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1597.782001][T19068] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3500'. [ 1597.797774][T19068] netem: change failed [ 1597.802876][T19096] netlink: 'syz.5.3506': attribute type 30 has an invalid length. [ 1597.828947][T19096] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.838743][T19096] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.847709][T19096] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.856545][T19096] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.925402][T19096] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.935259][T19096] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.944703][T19096] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.953879][T19096] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1598.200302][T19105] 9pnet: p9_errstr2errno: server reported unknown error [ 1598.716401][T17452] usb 1-1: USB disconnect, device number 18 [ 1598.995744][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.070482][T19114] binder: 19101:19114 ioctl 400c620e 200000000240 returned -22 [ 1600.071295][T19131] loop0: detected capacity change from 0 to 512 [ 1600.320322][ T27] kauditd_printk_skb: 125 callbacks suppressed [ 1600.320337][ T27] audit: type=1326 audit(2000000579.515:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f62c5fc14a5 code=0x7ffc0000 [ 1600.349810][ T27] audit: type=1326 audit(2000000579.535:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62c5f85ba7 code=0x7ffc0000 [ 1600.442057][ T27] audit: type=1326 audit(2000000579.535:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62c5f2add9 code=0x7ffc0000 [ 1600.513533][ T27] audit: type=1326 audit(2000000579.535:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1600.540019][ T27] audit: type=1326 audit(2000000579.565:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62c5f85ba7 code=0x7ffc0000 [ 1600.563113][T13534] Process accounting resumed [ 1600.567445][ T27] audit: type=1326 audit(2000000579.565:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62c5f2add9 code=0x7ffc0000 [ 1600.606083][ T27] audit: type=1326 audit(2000000579.565:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1600.645569][ T27] audit: type=1326 audit(2000000579.585:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f62c5f85ba7 code=0x7ffc0000 [ 1600.671782][ T27] audit: type=1326 audit(2000000579.585:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f62c5f2add9 code=0x7ffc0000 [ 1600.700136][ T27] audit: type=1326 audit(2000000579.585:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19130 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1601.020448][T19141] loop0: detected capacity change from 0 to 256 [ 1603.391978][T19124] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3516'. [ 1603.401102][T19124] netem: change failed [ 1603.405911][T19144] bridge: RTM_NEWNEIGH with invalid ether address [ 1603.786351][T19163] syz.7.3530[19163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1603.786500][T19163] syz.7.3530[19163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1604.407497][T19171] binder: 19157:19171 ioctl 400c620e 200000000240 returned -22 [ 1605.073557][T19176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1605.092788][T19176] netem: change failed [ 1605.875728][ T27] kauditd_printk_skb: 164 callbacks suppressed [ 1605.875743][ T27] audit: type=1326 audit(2000000585.065:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19187 comm="syz.7.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1606.039552][ T27] audit: type=1326 audit(2000000585.095:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19187 comm="syz.7.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1606.119476][ T27] audit: type=1326 audit(2000000585.095:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19187 comm="syz.7.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1606.143294][ T27] audit: type=1326 audit(2000000585.095:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19187 comm="syz.7.3537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1606.191814][T19194] 9pnet_fd: Insufficient options for proto=fd [ 1607.169920][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.176612][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.466064][T19195] bridge: RTM_NEWNEIGH with invalid ether address [ 1608.802079][T19207] syz.5.3543[19207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1608.802234][T19207] syz.5.3543[19207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1608.819303][T19207] netlink: 'syz.5.3543': attribute type 12 has an invalid length. [ 1608.957058][T18411] hid-generic 0003:0004:0FFF.000E: unknown main item tag 0x0 [ 1608.980334][T18411] hid-generic 0003:0004:0FFF.000E: unknown main item tag 0x0 [ 1608.998291][T18411] hid-generic 0003:0004:0FFF.000E: unknown main item tag 0x0 [ 1609.015886][T18411] hid-generic 0003:0004:0FFF.000E: hidraw0: USB HID v0.03 Device [syz0] on syz0 [ 1610.427765][T19222] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3548'. [ 1612.208927][T19238] bridge: RTM_NEWNEIGH with invalid ether address [ 1613.567373][ T27] audit: type=1326 audit(2000000592.745:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.5.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1613.610036][ T27] audit: type=1326 audit(2000000592.745:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.5.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1613.657210][ T27] audit: type=1326 audit(2000000592.745:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.5.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1613.683323][ T27] audit: type=1326 audit(2000000592.785:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19245 comm="syz.5.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1616.393103][T19267] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1617.036376][T19261] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1617.260127][T19271] loop0: detected capacity change from 0 to 512 [ 1617.319577][T19271] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1617.338383][T19278] netlink: 'syz.6.3564': attribute type 10 has an invalid length. [ 1617.346588][T19271] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1617.373946][T19271] EXT4-fs (loop0): mount failed [ 1617.401656][T19278] team0: Port device dummy0 added [ 1617.417707][T19278] netlink: 'syz.6.3564': attribute type 10 has an invalid length. [ 1617.430155][T19278] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1617.466562][T19278] team0: Failed to send options change via netlink (err -105) [ 1617.474527][T19278] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1617.498307][T19278] team0: Port device dummy0 removed [ 1617.521302][T19278] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1617.970037][ T27] audit: type=1326 audit(2000000597.155:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1618.009373][ T27] audit: type=1326 audit(2000000597.185:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1618.035993][ T27] audit: type=1326 audit(2000000597.185:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1618.060157][ T27] audit: type=1326 audit(2000000597.185:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1618.089611][ T27] audit: type=1326 audit(2000000597.185:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1618.137784][T19296] IPVS: Error connecting to the multicast addr [ 1618.471365][T19302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3570'. [ 1619.263607][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 1619.263628][ T27] audit: type=1326 audit(2000000597.745:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a672add9 code=0x7ffc0000 [ 1619.318171][ T27] audit: type=1326 audit(2000000598.445:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93a6785ba7 code=0x7ffc0000 [ 1619.382826][ T27] audit: type=1326 audit(2000000598.445:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a672add9 code=0x7ffc0000 [ 1619.478222][ T27] audit: type=1326 audit(2000000598.445:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1619.542697][ T27] audit: type=1326 audit(2000000598.475:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93a6785ba7 code=0x7ffc0000 [ 1619.602723][ T27] audit: type=1326 audit(2000000598.485:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a672add9 code=0x7ffc0000 [ 1619.652942][ T27] audit: type=1326 audit(2000000598.485:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1619.693204][ T27] audit: type=1326 audit(2000000598.535:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93a6785ba7 code=0x7ffc0000 [ 1619.738231][ T27] audit: type=1326 audit(2000000598.535:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93a672add9 code=0x7ffc0000 [ 1619.765804][ T27] audit: type=1326 audit(2000000598.535:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19288 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1623.422216][T19330] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3580'. [ 1624.942884][T19355] netlink: 'syz.0.3588': attribute type 11 has an invalid length. [ 1624.950897][T19355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1625.443635][T19371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1628.092652][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1628.092671][ T27] audit: type=1326 audit(2000000607.275:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.182316][ T27] audit: type=1326 audit(2000000607.275:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.262114][ T27] audit: type=1326 audit(2000000607.275:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.322724][ T27] audit: type=1326 audit(2000000607.275:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.532676][ T27] audit: type=1326 audit(2000000607.275:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.575788][ T27] audit: type=1326 audit(2000000607.285:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1628.664394][T19412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3605'. [ 1629.003406][ T27] audit: type=1326 audit(2000000607.285:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1629.257947][ T27] audit: type=1326 audit(2000000607.285:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1629.373836][ T27] audit: type=1326 audit(2000000607.285:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1629.422675][ T27] audit: type=1326 audit(2000000607.285:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19400 comm="syz.5.3604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1629.654706][ T8] Process accounting resumed [ 1631.026707][T19444] bridge: RTM_NEWNEIGH with invalid ether address [ 1632.164353][T19449] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1632.186675][T19449] netem: change failed [ 1634.189886][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1634.189900][ T27] audit: type=1326 audit(2000000613.365:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.5.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1634.268475][ T27] audit: type=1326 audit(2000000613.365:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.5.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1634.310730][ T27] audit: type=1326 audit(2000000613.415:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.5.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1634.336597][ T27] audit: type=1326 audit(2000000613.415:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.5.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1634.441449][ T27] audit: type=1326 audit(2000000613.425:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19470 comm="syz.5.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1634.720611][T19478] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1635.466657][T13516] hid-generic 0003:0004:0FFF.000F: unknown main item tag 0x0 [ 1635.492801][T13516] hid-generic 0003:0004:0FFF.000F: unknown main item tag 0x0 [ 1635.500269][T13516] hid-generic 0003:0004:0FFF.000F: unknown main item tag 0x0 [ 1635.527422][T13516] hid-generic 0003:0004:0FFF.000F: hidraw0: USB HID v0.03 Device [syz0] on syz0 [ 1636.025227][T19495] bridge: RTM_NEWNEIGH with invalid ether address [ 1636.156360][T19388] Set syz1 is full, maxelem 65536 reached [ 1637.310574][ T27] audit: type=1326 audit(2000000616.425:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1637.422764][ T27] audit: type=1326 audit(2000000616.425:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1637.488660][ T27] audit: type=1326 audit(2000000616.425:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1637.596555][ T27] audit: type=1326 audit(2000000616.425:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1637.764664][T19512] bridge0: port 3(syz_tun) entered blocking state [ 1637.771762][T19512] bridge0: port 3(syz_tun) entered disabled state [ 1637.779633][T19512] syz_tun: entered allmulticast mode [ 1637.793262][T19512] syz_tun: entered promiscuous mode [ 1637.801061][T19512] bridge0: port 3(syz_tun) entered blocking state [ 1637.807634][T19512] bridge0: port 3(syz_tun) entered forwarding state [ 1637.830913][T19512] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1637.985298][ T27] audit: type=1326 audit(2000000616.425:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19502 comm="syz.0.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1638.650317][T18411] Process accounting resumed [ 1640.333599][ T8] Process accounting resumed [ 1641.782770][ T8] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1641.994930][ T8] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1642.009790][ T8] usb 8-1: config 0 has no interface number 0 [ 1642.026957][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.054435][ T8] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1642.092402][ T8] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1642.119334][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.132774][T19571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3664'. [ 1642.148947][ T8] usb 8-1: config 0 descriptor?? [ 1642.872829][ T8] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0010/input/input88 [ 1643.127123][ T8] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1643.403868][ T8] usb 8-1: USB disconnect, device number 4 [ 1644.061851][T19597] loop0: detected capacity change from 0 to 1024 [ 1644.105508][T19597] EXT4-fs: Ignoring removed orlov option [ 1644.546427][T19597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1645.026747][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1645.274110][T19616] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3682'. [ 1645.506369][T19623] fuse: Unknown parameter '0xffffffffffffffff' [ 1645.695182][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 1645.695194][ T27] audit: type=1326 audit(2000000624.885:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.725856][ T27] audit: type=1326 audit(2000000624.885:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.752187][T19626] overlayfs: failed to clone upperpath [ 1645.777779][ T27] audit: type=1326 audit(2000000624.885:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.826401][ T27] audit: type=1326 audit(2000000624.885:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.850257][ T27] audit: type=1326 audit(2000000624.885:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.876273][ T27] audit: type=1326 audit(2000000624.885:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.903530][ T27] audit: type=1326 audit(2000000624.885:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1645.978182][ T27] audit: type=1326 audit(2000000624.885:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1646.074135][ T27] audit: type=1326 audit(2000000624.885:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1646.130266][ T27] audit: type=1326 audit(2000000624.885:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19627 comm="syz.5.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1646.219934][T19637] binder: 19629:19637 ioctl 400c620e 200000000240 returned -22 [ 1647.217473][T19652] fuse: Unknown parameter '0x0000000000000003' [ 1647.253119][T19648] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3694'. [ 1648.614239][T19681] fuse: Unknown parameter '0x0000000000000003' [ 1648.635474][T19681] block device autoloading is deprecated and will be removed. [ 1648.889691][T18411] Process accounting resumed [ 1650.272895][ T8] Process accounting resumed [ 1650.332931][T19719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1650.371927][T19718] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3726'. [ 1650.403000][T19718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.410484][T19718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.443529][T19718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.462732][T19718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.857257][T19731] binder: 19723:19731 ioctl 400c620e 200000000240 returned -22 [ 1652.647253][ T8] Process accounting resumed [ 1652.755111][T19749] loop0: detected capacity change from 0 to 1024 [ 1652.773450][T19749] EXT4-fs: Ignoring removed orlov option [ 1652.791246][T19749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1652.889406][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.308737][T19764] binder: 19760:19764 ioctl 400c620e 200000000240 returned -22 [ 1654.291472][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1654.291491][ T27] audit: type=1326 audit(2000000633.475:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1654.390891][ T27] audit: type=1326 audit(2000000633.515:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1654.414948][ T27] audit: type=1326 audit(2000000633.515:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1654.437778][ T27] audit: type=1326 audit(2000000633.515:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1654.497723][ T27] audit: type=1326 audit(2000000633.515:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1654.910162][ T27] audit: type=1326 audit(2000000633.515:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1655.160735][ T27] audit: type=1326 audit(2000000633.515:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1655.287311][ T27] audit: type=1326 audit(2000000633.515:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1655.348554][ T27] audit: type=1326 audit(2000000633.515:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1655.374414][ T27] audit: type=1326 audit(2000000633.525:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19765 comm="syz.6.3742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1656.983478][T19818] syz.6.3761[19818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1656.983624][T19818] syz.6.3761[19818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1657.039502][T19817] loop0: detected capacity change from 0 to 1024 [ 1657.093590][T19817] EXT4-fs: Ignoring removed orlov option [ 1657.217199][T19817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1657.504334][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1658.721923][T19852] loop0: detected capacity change from 0 to 1024 [ 1658.739613][T19852] EXT4-fs: Ignoring removed orlov option [ 1658.788166][T19852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1658.982287][T14543] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1661.562720][T19901] 9p: Unknown access argument 18446744073709551615: -34 [ 1661.603162][T19905] $Hÿ: renamed from bond0 (while UP) [ 1661.620303][T19905] $Hÿ: left allmulticast mode [ 1661.637425][T19905] bond_slave_0: left allmulticast mode [ 1661.670361][T19905] bond_slave_1: left allmulticast mode [ 1662.348215][T19922] bridge: RTM_NEWNEIGH with invalid ether address [ 1663.715156][T13534] Process accounting resumed [ 1664.789413][ T27] kauditd_printk_skb: 44 callbacks suppressed [ 1664.789430][ T27] audit: type=1326 audit(2000000643.975:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1664.819201][ T27] audit: type=1326 audit(2000000643.975:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1664.852192][ T27] audit: type=1326 audit(2000000643.975:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1664.885890][ T27] audit: type=1326 audit(2000000643.975:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1664.929769][ T27] audit: type=1326 audit(2000000643.985:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1664.967249][T19970] bridge: RTM_NEWNEIGH with invalid ether address [ 1664.984143][ T27] audit: type=1326 audit(2000000643.985:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1665.041812][ T27] audit: type=1326 audit(2000000643.985:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1665.269659][ T27] audit: type=1326 audit(2000000643.985:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1665.318188][ T27] audit: type=1326 audit(2000000643.985:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1665.341014][ T27] audit: type=1326 audit(2000000643.985:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19963 comm="syz.7.3821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1666.181840][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3827'. [ 1666.692740][T13534] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1666.910838][T13534] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1666.925088][T13534] usb 8-1: config 0 has no interface number 0 [ 1666.941605][T13534] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.974833][T13534] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.987683][T13534] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1667.006166][T13534] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.035893][T13534] usb 8-1: config 0 descriptor?? [ 1667.689781][T13534] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0011/input/input89 [ 1668.002498][T13534] holtek_kbd 0003:04D9:A055.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1668.247740][T13534] usb 8-1: USB disconnect, device number 5 [ 1668.614753][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.780949][T20012] netlink: 468 bytes leftover after parsing attributes in process `syz.7.3839'. [ 1669.123726][T20022] netlink: 'syz.6.3844': attribute type 21 has an invalid length. [ 1669.131686][T20022] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3844'. [ 1670.723912][ T5784] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1670.934971][ T5784] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1670.960983][ T5784] usb 8-1: config 0 has no interface number 0 [ 1670.980390][ T5784] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1671.005409][ T5784] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1671.027809][ T5784] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1671.052114][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.071015][ T5784] usb 8-1: config 0 descriptor?? [ 1671.595804][ T5784] input: HID 04d9:a055 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:04D9:A055.0012/input/input90 [ 1672.385895][ T5784] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.7-1/input1 [ 1672.415675][ T5784] usb 8-1: USB disconnect, device number 6 [ 1672.733147][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 1672.733159][ T27] audit: type=1326 audit(2000000651.905:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1672.812694][ T27] audit: type=1326 audit(2000000651.905:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1672.836621][T20073] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3864'. [ 1672.872668][ T27] audit: type=1326 audit(2000000651.915:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1672.942650][ T27] audit: type=1326 audit(2000000651.915:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.002681][ T27] audit: type=1326 audit(2000000651.915:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.083011][ T27] audit: type=1326 audit(2000000651.915:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.150075][ T27] audit: type=1326 audit(2000000651.915:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.222724][ T27] audit: type=1326 audit(2000000651.915:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.283890][ T27] audit: type=1326 audit(2000000651.915:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.366926][ T27] audit: type=1326 audit(2000000651.915:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20070 comm="syz.7.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1673.872517][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1674.080228][T20098] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1675.156348][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3883'. [ 1677.144536][T20137] fuse: Unknown parameter '0x0000000000000003' [ 1677.622957][ T8] Process accounting resumed [ 1678.584046][T20164] fuse: Unknown parameter '0x0000000000000003' [ 1678.708853][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3904'. [ 1678.857201][T20167] overlayfs: failed to clone upperpath [ 1680.387968][T20196] fuse: Unknown parameter '0x0000000000000003' [ 1680.424847][T20199] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3916'. [ 1681.054852][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 1681.054865][ T27] audit: type=1326 audit(2000000660.245:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.095372][ T27] audit: type=1326 audit(2000000660.265:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.146133][T20215] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1681.166976][ T27] audit: type=1326 audit(2000000660.265:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.192386][ T27] audit: type=1326 audit(2000000660.265:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.372037][ T27] audit: type=1326 audit(2000000660.265:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.372336][ T27] audit: type=1326 audit(2000000660.265:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.377103][ T27] audit: type=1326 audit(2000000660.265:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.377771][ T27] audit: type=1326 audit(2000000660.265:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.378000][ T27] audit: type=1326 audit(2000000660.265:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1681.378156][ T27] audit: type=1326 audit(2000000660.265:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20213 comm="syz.7.3923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe23998ebe9 code=0x7ffc0000 [ 1682.378260][T20230] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1683.998378][T20257] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1684.619762][T20256] Process accounting resumed [ 1684.755771][T20264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3940'. [ 1685.654867][T20274] fuse: Unknown parameter 'fd0x0000000000000003' [ 1685.878613][T20277] syz.0.3945 uses obsolete (PF_INET,SOCK_PACKET) [ 1686.064003][T20282] netlink: 'syz.0.3945': attribute type 1 has an invalid length. [ 1686.349804][T20282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1686.472916][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3949'. [ 1688.835120][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1688.835136][ T27] audit: type=1326 audit(2000000668.025:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20324 comm="syz.6.3958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x0 [ 1688.939045][ T27] audit: type=1326 audit(2000000668.075:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20324 comm="syz.6.3958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fa25938ebe9 code=0x0 [ 1689.046106][ T27] audit: type=1326 audit(2000000668.095:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.105061][ T27] audit: type=1326 audit(2000000668.095:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.162742][ T27] audit: type=1326 audit(2000000668.095:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.212641][ T27] audit: type=1326 audit(2000000668.095:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.270695][ T27] audit: type=1326 audit(2000000668.095:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.302385][T20335] syz.7.3961[20335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1689.303603][T20335] syz.7.3961[20335] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1689.322657][ T27] audit: type=1326 audit(2000000668.095:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.405216][ T27] audit: type=1326 audit(2000000668.095:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1689.408470][T20335] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3961'. [ 1689.443589][ T27] audit: type=1326 audit(2000000668.095:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20323 comm="syz.5.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1691.371291][T20359] 9pnet_fd: Insufficient options for proto=fd [ 1693.157400][T20386] overlayfs: failed to clone upperpath [ 1693.873412][T20398] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3986'. [ 1693.897443][T20400] syz.6.3988[20400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1693.897586][T20400] syz.6.3988[20400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1694.140376][T20408] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1697.826075][T20427] netlink: 'syz.6.4000': attribute type 11 has an invalid length. [ 1697.852984][T20427] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4000'. [ 1698.542784][T20443] lo speed is unknown, defaulting to 1000 [ 1698.550175][T20443] lo speed is unknown, defaulting to 1000 [ 1698.571678][T20443] lo speed is unknown, defaulting to 1000 [ 1698.607224][T20443] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1698.667866][T20443] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1699.291838][T20443] lo speed is unknown, defaulting to 1000 [ 1699.299933][T20443] lo speed is unknown, defaulting to 1000 [ 1699.308133][T20443] lo speed is unknown, defaulting to 1000 [ 1699.316069][T20443] lo speed is unknown, defaulting to 1000 [ 1699.453291][T20446] loop0: detected capacity change from 0 to 512 [ 1699.473946][T20446] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1699.511001][T20446] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.4004: casefold flag without casefold feature [ 1699.543620][T20446] EXT4-fs (loop0): get root inode failed [ 1699.549347][T20446] EXT4-fs (loop0): mount failed [ 1699.848934][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 1699.848950][ T27] audit: type=1326 audit(2000000679.035:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20455 comm="syz.0.4008" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62c5f8ebe9 code=0x0 [ 1701.225027][T20480] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1702.493451][ T5784] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1702.638748][ T27] audit: type=1326 audit(2000000681.815:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20489 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1702.851729][ T27] audit: type=1326 audit(2000000681.885:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20489 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1702.922690][ T5784] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1702.939528][ T27] audit: type=1326 audit(2000000681.885:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20489 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1702.962062][ T27] audit: type=1326 audit(2000000681.885:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20489 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1702.965508][ T5784] usb 8-1: config 0 has no interface number 0 [ 1702.984564][ T27] audit: type=1326 audit(2000000681.965:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20489 comm="syz.0.4018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1703.085156][ T5784] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1703.106970][ T5784] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1703.137929][ T5784] usb 8-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1703.170019][ T5784] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1703.194949][ T5784] usb 8-1: config 0 descriptor?? [ 1703.768528][ T5784] usbhid 8-1:0.1: can't add hid device: -71 [ 1703.774777][ T5784] usbhid: probe of 8-1:0.1 failed with error -71 [ 1703.784439][ T5784] usb 8-1: USB disconnect, device number 7 [ 1703.977402][T20510] bridge: RTM_NEWNEIGH with invalid ether address [ 1704.412433][T20514] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 1707.204160][T20547] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1707.436701][T20551] serio: Serial port ptm0 [ 1708.106053][T20549] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4042'. [ 1708.673378][T20572] bridge: RTM_NEWNEIGH with invalid ether address [ 1709.260246][T20579] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1709.658432][ T27] audit: type=1326 audit(2000000688.775:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1709.728226][ T27] audit: type=1326 audit(2000000688.775:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1709.781338][ T27] audit: type=1326 audit(2000000688.785:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1709.833098][ T27] audit: type=1326 audit(2000000688.785:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1709.882691][ T27] audit: type=1326 audit(2000000688.785:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1709.932797][ T27] audit: type=1326 audit(2000000688.785:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa25938d550 code=0x7ffc0000 [ 1709.962010][ T27] audit: type=1326 audit(2000000688.785:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1710.028760][ T27] audit: type=1326 audit(2000000688.785:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1710.109137][T20604] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1710.132657][ T27] audit: type=1326 audit(2000000688.785:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1710.158340][ T27] audit: type=1326 audit(2000000688.785:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20589 comm="syz.6.4058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25938ebe9 code=0x7ffc0000 [ 1710.189147][T20604] serio: Serial port ptm0 [ 1711.113037][T20614] 9pnet_fd: Insufficient options for proto=fd [ 1711.585735][T20634] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1711.638302][T20637] serio: Serial port ptm0 [ 1711.762092][T20641] 9pnet_fd: Insufficient options for proto=fd [ 1712.407024][T13516] Process accounting resumed [ 1712.459904][T20664] 9pnet_virtio: no channels available for device syz [ 1713.043331][T20678] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4096'. [ 1713.063430][T20678] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4096'. [ 1713.272502][T20680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1713.304243][T20680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4097'. [ 1713.433451][T18411] Process accounting resumed [ 1714.511203][ T5784] Process accounting resumed [ 1714.668367][ T27] kauditd_printk_skb: 113 callbacks suppressed [ 1714.668384][ T27] audit: type=1326 audit(2000000693.855:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1714.705153][ T27] audit: type=1326 audit(2000000693.855:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1714.735054][ T27] audit: type=1326 audit(2000000693.885:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1714.779972][ T27] audit: type=1326 audit(2000000693.885:3984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1714.834061][T20728] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 1716.175788][ T27] audit: type=1326 audit(2000000693.885:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1716.215359][ T27] audit: type=1326 audit(2000000693.885:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1716.261455][T20733] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4117'. [ 1716.271053][ T27] audit: type=1326 audit(2000000693.885:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20723 comm="syz.5.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a678ebe9 code=0x7ffc0000 [ 1716.296518][T20733] unsupported nlmsg_type 40 [ 1716.462268][T18411] Process accounting resumed [ 1717.009329][ T27] audit: type=1326 audit(2000000696.195:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20754 comm="syz.5.4126" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93a678ebe9 code=0x0 [ 1718.492801][T20762] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 1722.131236][ T27] audit: type=1326 audit(2000000701.315:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.170682][T20769] loop0: detected capacity change from 0 to 128 [ 1722.177231][ T27] audit: type=1326 audit(2000000701.315:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.177281][ T27] audit: type=1326 audit(2000000701.315:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.177323][ T27] audit: type=1326 audit(2000000701.325:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.177366][ T27] audit: type=1326 audit(2000000701.325:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.177409][ T27] audit: type=1326 audit(2000000701.345:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.300571][T20767] BUG: assuming non migratable context at include/linux/filter.h:599 [ 1722.338252][T20767] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 20767, name: syz.5.4130 [ 1722.362185][T20767] 2 locks held by syz.5.4130/20767: [ 1722.367872][T20767] #0: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: ip6_send_skb+0x10f/0x380 [ 1722.382371][T20767] #1: ffffffff8cd2fba0 (rcu_read_lock){....}-{1:2}, at: nf_hook+0x9e/0x370 [ 1722.396028][T20767] CPU: 0 PID: 20767 Comm: syz.5.4130 Not tainted 6.6.101-syzkaller #0 [ 1722.404238][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1722.406099][ T27] audit: type=1326 audit(2000000701.345:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.414305][T20767] Call Trace: [ 1722.414319][T20767] [ 1722.414329][T20767] dump_stack_lvl+0x16c/0x230 [ 1722.414361][T20767] ? show_regs_print_info+0x20/0x20 [ 1722.414385][T20767] ? nf_nat_inet_fn+0x93e/0xbc0 [ 1722.414421][T20767] __cant_migrate+0x234/0x2e0 [ 1722.462541][T20767] ? __cant_sleep+0x210/0x210 [ 1722.467276][T20767] ? nf_nat_ipv6_fn+0x21b/0x2d0 [ 1722.469399][ T27] audit: type=1326 audit(2000000701.355:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f62c5f8ebe9 code=0x7ffc0000 [ 1722.472154][T20767] nf_hook_run_bpf+0x90/0x1e0 [ 1722.472185][T20767] ? ip6table_filter_table_init+0xb0/0xb0 [ 1722.500879][ T27] audit: type=1326 audit(2000000701.355:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62c5f8ec23 code=0x7ffc0000 [ 1722.504982][T20767] ? bpf_nf_link_attach+0x810/0x810 [ 1722.505017][T20767] ? nf_nat_ipv6_out+0x2f3/0x380 [ 1722.527454][ T27] audit: type=1326 audit(2000000701.355:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20768 comm="syz.0.4131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f62c5f8d69f code=0x7ffc0000 [ 1722.532428][T20767] ? bpf_nf_link_attach+0x810/0x810 [ 1722.532455][T20767] nf_hook_slow+0xbd/0x200 [ 1722.532482][T20767] nf_hook+0x215/0x370 [ 1722.573512][T20767] ? nf_hook+0x9e/0x370 [ 1722.577720][T20767] ? ip6_make_skb+0x4c0/0x4c0 [ 1722.582394][T20767] ? ip6_output+0x3b0/0x3b0 [ 1722.586989][T20767] ? ip6_dst_hoplimit+0x350/0x350 [ 1722.592030][T20767] ? ip6_setup_cork+0xa2f/0xfe0 [ 1722.596884][T20767] ? __ip6_local_out+0x880/0x880 [ 1722.601833][T20767] ? read_lock_is_recursive+0x20/0x20 [ 1722.607228][T20767] ip6_output+0x272/0x3b0 [ 1722.611574][T20767] ? ip6_output+0x3b0/0x3b0 [ 1722.616090][T20767] ? ip6_send_skb+0x10f/0x380 [ 1722.620771][T20767] ip6_send_skb+0x1d5/0x380 [ 1722.625283][T20767] udp_v6_send_skb+0xbbb/0x1860 [ 1722.630163][T20767] udpv6_sendmsg+0x1bb8/0x22f0 [ 1722.634952][T20767] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1722.639819][T20767] ? udp_v6_early_demux+0xf60/0xf60 [ 1722.645046][T20767] ? lock_chain_count+0x20/0x20 [ 1722.649913][T20767] ? _local_bh_enable+0xa0/0xa0 [ 1722.654778][T20767] ? inet_send_prepare+0x1b3/0x260 [ 1722.659898][T20767] ? inet_send_prepare+0x1b3/0x260 [ 1722.665016][T20767] ? inet6_sendmsg+0x5f/0xd0 [ 1722.669617][T20767] __sys_sendto+0x46a/0x620 [ 1722.674138][T20767] ? __ia32_sys_getpeername+0x90/0x90 [ 1722.679535][T20767] ? _raw_spin_unlock_irq+0x23/0x50 [ 1722.684802][T20767] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1722.690795][T20767] ? lock_chain_count+0x20/0x20 [ 1722.695657][T20767] __x64_sys_sendto+0xde/0xf0 [ 1722.700357][T20767] do_syscall_64+0x55/0xb0 [ 1722.704783][T20767] ? clear_bhb_loop+0x40/0x90 [ 1722.709466][T20767] ? clear_bhb_loop+0x40/0x90 [ 1722.714155][T20767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1722.720064][T20767] RIP: 0033:0x7f93a678ebe9 [ 1722.724486][T20767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1722.744103][T20767] RSP: 002b:00007f93a76cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1722.752527][T20767] RAX: ffffffffffffffda RBX: 00007f93a69b5fa0 RCX: 00007f93a678ebe9 [ 1722.760510][T20767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1722.768483][T20767] RBP: 00007f93a6811e19 R08: 0000200000000300 R09: 000000000000001c [ 1722.776463][T20767] R10: 0000000020000001 R11: 0000000000000246 R12: 0000000000000000 [ 1722.784437][T20767] R13: 00007f93a69b6038 R14: 00007f93a69b5fa0 R15: 00007ffd81a3b548 [ 1722.792428][T20767] [ 1730.036136][ T1289] ieee802154 phy0 wpan0: encryption failed: -22