last executing test programs: 20.597680247s ago: executing program 0 (id=166): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x34f0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 19.588967613s ago: executing program 0 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r5, r4, 0x80000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 18.519899473s ago: executing program 0 (id=168): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00') read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$eJzsmbGLE0EUxr+Z3STnIYqNhY2FB57obXY3KtcceIKlINyJWgZvPaKbRJIVkoBgsLGxtBBs/QcsLFJZ2NnZaqGCYGFK65GZnd2duIkmrkXw3g8y+83szJt5bzdfsyAI4sDy5fOPT08vb+6eA3AYa6jo8W9WNocb8z8+f3D22daVF68+vHzbOvJwZMa6BIABEGL+/W0Ab7Yt4NFR1RdicvWavu6Cp/o6OM5ofQMMTnJWka0OwHBLD981dPuQFmHAbrfDvTuNMHBl48nGl00NEBPnGw8Z9gCs6C2Ycb5uf3CvHgKdWIRBIkoi2Sd3a1Hxp/qNtzm2jBLI53XzyeOh7Dt63DXq54HD07oGhh2tN1GB4zhZSYz8T9hZfCuXf8EkUbxGU8WxjX8c8P8VrOATBLAEWcwn2K8j8g+djhwfj97lV31dlsP/hVDGBSB36/1qGF4tELmsTWDmKxH7B7OB04Y/2bBT/6hGzfvVbn+w0WjW94P9oOX7tYvuede94FeVEcXtb/xvRfnTqhG/NGNumZXRq0dRx+sBUcdL+37cGo6787r9Xa3hyv841k/FMeSrotKuTN+D6R9XV6nWrZmHJwiCIAiCIAiCIAiCIAiCWIiTYPGHsPhDlUgoiQn8a2r2zwAAAP//tSxqVQ==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r5, 0x9, 0x0, 0x3) r6 = getpid() syz_pidfd_open(r6, 0x0) setns(r5, 0x10000000) umount2(&(0x7f00000000c0)='./file1\x00', 0x2) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 17.329405092s ago: executing program 1 (id=171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) 16.848322983s ago: executing program 0 (id=172): syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100007729ff202404019957c2010a03010902240001000010000904070000007d"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='\'[[\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)) 14.059104307s ago: executing program 1 (id=176): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x34f0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 13.062951522s ago: executing program 1 (id=177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r5, r4, 0x80000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 12.074693377s ago: executing program 0 (id=178): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) r4 = io_uring_setup(0xb9b, &(0x7f0000000000)={0x0, 0x2f2a, 0x480, 0x4, 0xc8}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r4, 0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioprio_get$pid(0x2, r0) 11.514465103s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000040)={0xd, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000240)=""/52, 0x34}], 0x3, 0x0, 0x0) 10.096943056s ago: executing program 1 (id=183): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) r5 = io_uring_setup(0xb9b, &(0x7f0000000000)={0x0, 0x2f2a, 0x480, 0x4, 0xc8}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) waitid(0x0, r4, &(0x7f0000000000), 0x8, &(0x7f0000000400)) 9.855994872s ago: executing program 3 (id=184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) 8.648784642s ago: executing program 2 (id=185): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x34f0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) 7.668909486s ago: executing program 3 (id=186): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0) 7.503355967s ago: executing program 2 (id=187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r5, r4, 0x80000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 6.315783515s ago: executing program 2 (id=188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close(r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002280)={'wlan1\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={0x0}, 0x1, 0x0, 0x0, 0x4811}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) sendmsg$nl_netfilter(r0, 0x0, 0x1000) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) 6.251153609s ago: executing program 3 (id=189): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9rmFsS1G7vXH2BIr7WY+OhENKFgdNONgvgnCv4JXQi6dyEiuNGFgi4qrioSOTNnJpMH9ra+NvPB5XznPY87M1f0TZ0C+LG71cI8DAg1vCWCArBA1rZXsfKryKHgo7J6Q+xPRH4QqXv9Vw8s7V9tttv5pu79mqQgYJ+YcTJtOvf04bHi+RPk5f1xC6FIFqnD9Po90i3ZlZ12PRqzpLNiJBeTlRsX/vEsDk+qU4N35FsNCC2f/mD3Mq9mGTNjiA70r88gXMAQwLu+16a3aZK8eWw7z4wpSXoV48uyL+FT/L93mQnfRYYkB0rXkP3Q5+8l+EJAGa93t1psvSS3GLvX7OeOhMli5XkQc1wBA4BKGJqiXEdJ7AKApW7nxpLu9U9tdJrr+Xp+LctWziy/OCpHdHgX2Gjny2SGYdMTJgoefE6rgZ//tHcj/wABKBgaeF4jsy/pLufFE0FIFUiC3KCGFHjm+6diu6U7uIiTmANwe8DuTBaoDq6mcJmntgpCSZSGCgeEPSSYM47TrevttW0QyKXtQPkajfcoeyUThRvlK2f99LdF1kWuitwZ9TNwb5d7k5Sp8Fm0xQFQwZ1mt7tpHi/L2FbxFYwtm/edE+nqXkPXrJ6iII4UDYyIiIiIiIiI+Ev4GQAA//8sQT03") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r2], 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, 0x0) connect$unix(r4, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x2b) 6.153251406s ago: executing program 0 (id=190): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) r5 = io_uring_setup(0xb9b, &(0x7f0000000000)={0x0, 0x2f2a, 0x480, 0x4, 0xc8}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) waitid(0x0, r4, &(0x7f0000000000), 0x8, &(0x7f0000000400)) ioprio_get$pid(0x2, r0) 5.081653106s ago: executing program 2 (id=191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x3) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f0000002080)={0xc, {"a2e3ad204fc752f91b5d34f70b06d038e7ff7fc6e5539b325d098b089b3b08381a090890e0878f0e1ac6e7049b3344959b5d9a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31330d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08c4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e800ba9abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40d4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889632b3570243f989cce3803f465e41e610c2021d653a5520094ec79553299388b0000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c2d88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b19bb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0545359bafffa45237f104b98110403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae2d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e709000000000000004fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83000000000000010058b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c000003716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff7544130700000000000000f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc6c71737b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f9354b9094f22b625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c558069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e0090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c73144f8e4a737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c10613d17ca51075f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb401000000608d6f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655bff4801784c416b22f73d32d678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d7000bdbfc43c10ec23ea6283994a7dde4dcb61fea6b611fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f4820000000000000900a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2e0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47afed367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15f2dbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af500ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x100f}}, 0x1006) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000040)={0xd, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') preadv(r6, &(0x7f0000000540)=[{&(0x7f0000000480)=""/88, 0x58}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000240)=""/52, 0x34}], 0x3, 0x0, 0x0) 4.490557225s ago: executing program 3 (id=192): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(r1, &(0x7f0000000080)='net/route\x00') read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000840)=[{&(0x7f00000008c0)=""/93, 0x5d}], 0x1, 0x8, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r4, 0xa, 0x0, @void}, 0x10) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$eJzsmbGLE0EUxr+Z3STnIYqNhY2FB57obXY3KtcceIKlINyJWgZvPaKbRJIVkoBgsLGxtBBs/QcsLFJZ2NnZaqGCYGFK65GZnd2duIkmrkXw3g8y+83szJt5bzdfsyAI4sDy5fOPT08vb+6eA3AYa6jo8W9WNocb8z8+f3D22daVF68+vHzbOvJwZMa6BIABEGL+/W0Ab7Yt4NFR1RdicvWavu6Cp/o6OM5ofQMMTnJWka0OwHBLD981dPuQFmHAbrfDvTuNMHBl48nGl00NEBPnGw8Z9gCs6C2Ycb5uf3CvHgKdWIRBIkoi2Sd3a1Hxp/qNtzm2jBLI53XzyeOh7Dt63DXq54HD07oGhh2tN1GB4zhZSYz8T9hZfCuXf8EkUbxGU8WxjX8c8P8VrOATBLAEWcwn2K8j8g+djhwfj97lV31dlsP/hVDGBSB36/1qGF4tELmsTWDmKxH7B7OB04Y/2bBT/6hGzfvVbn+w0WjW94P9oOX7tYvuede94FeVEcXtb/xvRfnTqhG/NGNumZXRq0dRx+sBUcdL+37cGo6787r9Xa3hyv841k/FMeSrotKuTN+D6R9XV6nWrZmHJwiCIAiCIAiCIAiCIAiCWIiTYPGHsPhDlUgoiQn8a2r2zwAAAP//tSxqVQ==") r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fadvise64(r5, 0x9, 0x0, 0x3) r6 = getpid() syz_pidfd_open(r6, 0x0) setns(r5, 0x10000000) umount2(&(0x7f00000000c0)='./file1\x00', 0x2) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) 3.139917394s ago: executing program 3 (id=193): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1810000000000000000000000000000018070000", @ANYRES32=r3, @ANYBLOB="000000000000abc5262af6926c7200007b8adcbef8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000001440)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffe6eb}, 0x94) r4 = getpid() r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r5, 0x5c332000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001ba00)=""/102400, 0x19000) pipe(0x0) sendfile(r1, r2, 0x0, 0x20000023896) r7 = inotify_init() openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r8, 0xe0ffff, 0x9, 0x3) truncate(&(0x7f0000000000)='./file2\x00', 0x9) inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x80000006) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8000, 0x1b7) fanotify_init(0x200, 0x0) 3.078086968s ago: executing program 1 (id=194): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) sendto$inet6(r4, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r4, 0x0, 0xfdef) sendto$inet6(r4, 0x0, 0x0, 0x8040, 0x0, 0x0) 2.869593041s ago: executing program 2 (id=195): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 241.816014ms ago: executing program 2 (id=196): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x50, 0xd49}, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r5, r4, 0x80000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=197): ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8004, 0x2000000001d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) unshare(0xc040400) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee01, 0xee00, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x4080) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x15) kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00004000711037000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 79.976579][ T5778] cgroup: Unknown subsys name 'net' [ 80.112645][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.807367][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.695798][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.704548][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.714599][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.731814][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.740436][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.748959][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.758267][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.762367][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.766968][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.781809][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.792333][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.793401][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.799722][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.815688][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.823949][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.824101][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.839357][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.848583][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.856529][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.859902][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.863841][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.878990][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.895009][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.902571][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.414627][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 84.459751][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 84.541157][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 84.662400][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.679089][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.686622][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.694235][ T5791] bridge_slave_0: entered allmulticast mode [ 84.701451][ T5791] bridge_slave_0: entered promiscuous mode [ 84.750880][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.758395][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.765709][ T5791] bridge_slave_1: entered allmulticast mode [ 84.772742][ T5791] bridge_slave_1: entered promiscuous mode [ 84.813618][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.820841][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.828240][ T5787] bridge_slave_0: entered allmulticast mode [ 84.836312][ T5787] bridge_slave_0: entered promiscuous mode [ 84.844904][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.852146][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.859443][ T5787] bridge_slave_1: entered allmulticast mode [ 84.867238][ T5787] bridge_slave_1: entered promiscuous mode [ 84.899998][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.907314][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.914833][ T5792] bridge_slave_0: entered allmulticast mode [ 84.922041][ T5792] bridge_slave_0: entered promiscuous mode [ 84.957968][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.985414][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.992617][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.000133][ T5792] bridge_slave_1: entered allmulticast mode [ 85.007434][ T5792] bridge_slave_1: entered promiscuous mode [ 85.030159][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.075187][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.133672][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.147658][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.179603][ T5791] team0: Port device team_slave_0 added [ 85.186813][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.194137][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.201329][ T5794] bridge_slave_0: entered allmulticast mode [ 85.208495][ T5794] bridge_slave_0: entered promiscuous mode [ 85.218425][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.227852][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.235443][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.242662][ T5794] bridge_slave_1: entered allmulticast mode [ 85.250479][ T5794] bridge_slave_1: entered promiscuous mode [ 85.278883][ T5791] team0: Port device team_slave_1 added [ 85.314710][ T5787] team0: Port device team_slave_0 added [ 85.365781][ T5787] team0: Port device team_slave_1 added [ 85.375525][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.401192][ T5792] team0: Port device team_slave_0 added [ 85.422588][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.433621][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.440577][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.467418][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.481556][ T5792] team0: Port device team_slave_1 added [ 85.539570][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.547259][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.574406][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.608635][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.616084][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.642492][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.658154][ T5794] team0: Port device team_slave_0 added [ 85.667060][ T5794] team0: Port device team_slave_1 added [ 85.675949][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.682922][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.709894][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.721907][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.729531][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.756108][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.790668][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.797700][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.824201][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.877678][ T5791] hsr_slave_0: entered promiscuous mode [ 85.884581][ T5791] hsr_slave_1: entered promiscuous mode [ 85.908268][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.915442][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.942685][ T50] Bluetooth: hci3: command tx timeout [ 85.942703][ T5103] Bluetooth: hci1: command tx timeout [ 85.948985][ T5798] Bluetooth: hci2: command tx timeout [ 85.954518][ T5103] Bluetooth: hci0: command tx timeout [ 85.964995][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.979358][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.986407][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.012467][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.090471][ T5787] hsr_slave_0: entered promiscuous mode [ 86.097343][ T5787] hsr_slave_1: entered promiscuous mode [ 86.105737][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.113733][ T5787] Cannot create hsr debugfs directory [ 86.124258][ T5792] hsr_slave_0: entered promiscuous mode [ 86.130718][ T5792] hsr_slave_1: entered promiscuous mode [ 86.137122][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.145645][ T5792] Cannot create hsr debugfs directory [ 86.211740][ T5794] hsr_slave_0: entered promiscuous mode [ 86.218965][ T5794] hsr_slave_1: entered promiscuous mode [ 86.226961][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.234638][ T5794] Cannot create hsr debugfs directory [ 86.648338][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.665698][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.678149][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.689405][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.775838][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.794734][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.805872][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.817597][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.909719][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.920207][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.932287][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.945823][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.037808][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.058592][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.070912][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.095893][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.122022][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.185430][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.240731][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.248136][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.268740][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.304657][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311820][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.348120][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.382725][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.390115][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.401648][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.408841][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.428282][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.468715][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.490891][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.498100][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.552416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.559607][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.656841][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.775473][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.801786][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.809001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.854305][ T1303] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.861499][ T1303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.972218][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.015495][ T5103] Bluetooth: hci0: command tx timeout [ 88.015517][ T50] Bluetooth: hci3: command tx timeout [ 88.020939][ T5103] Bluetooth: hci2: command tx timeout [ 88.027848][ T50] Bluetooth: hci1: command tx timeout [ 88.109029][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.246024][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.262281][ T5791] veth0_vlan: entered promiscuous mode [ 88.296969][ T5791] veth1_vlan: entered promiscuous mode [ 88.319533][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.388121][ T5791] veth0_macvtap: entered promiscuous mode [ 88.420531][ T5792] veth0_vlan: entered promiscuous mode [ 88.430479][ T5791] veth1_macvtap: entered promiscuous mode [ 88.482881][ T5792] veth1_vlan: entered promiscuous mode [ 88.503599][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.515385][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.538240][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.559983][ T5787] veth0_vlan: entered promiscuous mode [ 88.577224][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.588293][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597587][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.606587][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.629331][ T5787] veth1_vlan: entered promiscuous mode [ 88.678887][ T5792] veth0_macvtap: entered promiscuous mode [ 88.697557][ T5792] veth1_macvtap: entered promiscuous mode [ 88.771230][ T5794] veth0_vlan: entered promiscuous mode [ 88.791729][ T5787] veth0_macvtap: entered promiscuous mode [ 88.821211][ T5794] veth1_vlan: entered promiscuous mode [ 88.844859][ T5787] veth1_macvtap: entered promiscuous mode [ 88.857055][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.868226][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.880799][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.902386][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.916973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.940544][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.951416][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.965020][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.003455][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.012210][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.021980][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.031774][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.045887][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.056759][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.067161][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.077814][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.089554][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.102571][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.115677][ T5794] veth0_macvtap: entered promiscuous mode [ 89.127052][ T5794] veth1_macvtap: entered promiscuous mode [ 89.143265][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167915][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.179217][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.189271][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.201086][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.212830][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.236197][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.248725][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.259361][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.270198][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.280267][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.291006][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.305705][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.316741][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.327414][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.338064][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.348876][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.359199][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.370998][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.385553][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.404598][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414733][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.424309][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.433272][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.466616][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.479288][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.488708][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.498701][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.906885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.008397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.017844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.111125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.111359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 90.213331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 90.222152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 90.230657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.316489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.533055][ C1] sched: RT throttling activated [ 91.535069][ T50] Bluetooth: hci2: command tx timeout [ 91.543840][ T5803] Bluetooth: hci3: command tx timeout [ 91.545914][ T50] Bluetooth: hci0: command tx timeout [ 91.551292][ T5803] Bluetooth: hci1: command tx timeout [ 91.751151][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.781630][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.888596][ T1303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.922339][ T1303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.008717][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.071356][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.098088][ T786] cfg80211: failed to load regulatory.db [ 92.149572][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.166135][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.184715][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.208554][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.340440][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.386662][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.774797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 92.774836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.293924][ T5803] Bluetooth: hci0: command tx timeout [ 94.293950][ T5103] Bluetooth: hci1: command tx timeout [ 94.299367][ T5803] Bluetooth: hci3: command tx timeout [ 94.304819][ T5103] Bluetooth: hci2: command tx timeout [ 94.503972][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.913702][ T5901] Zero length message leads to an empty skb [ 95.563541][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 95.645327][ T786] usb 3-1: device descriptor read/all, error -71 [ 95.766748][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.513593][ T28] audit: type=1326 audit(1759938844.687:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 100.535497][ T28] audit: type=1326 audit(1759938844.687:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 100.573553][ T786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.736099][ T28] audit: type=1326 audit(1759938844.687:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 101.136813][ T28] audit: type=1326 audit(1759938844.687:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 101.554086][ T5940] bridge1: entered promiscuous mode [ 101.559367][ T5940] bridge1: entered allmulticast mode [ 101.652448][ T28] audit: type=1326 audit(1759938844.687:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 102.563234][ T28] audit: type=1326 audit(1759938844.687:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 102.586003][ T5945] syz.3.18[5945]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 102.598747][ T5945] loop3: detected capacity change from 0 to 16 [ 102.623537][ T5945] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.655693][ T5943] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 102.666638][ T5943] syz.3.18: attempt to access beyond end of device [ 102.666638][ T5943] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 102.724306][ T5943] syz.3.18: attempt to access beyond end of device [ 102.724306][ T5943] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 102.755728][ T28] audit: type=1326 audit(1759938844.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 102.797493][ T28] audit: type=1326 audit(1759938844.687:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 102.832538][ T5103] Bluetooth: Unexpected continuation frame (len 18) [ 102.903326][ T28] audit: type=1326 audit(1759938844.697:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 102.970380][ T28] audit: type=1326 audit(1759938844.697:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5921 comm="syz.0.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 103.151796][ T5950] pimreg: entered allmulticast mode [ 103.178000][ T5950] pimreg: left allmulticast mode [ 103.446674][ T5953] loop3: detected capacity change from 0 to 16 [ 103.489241][ T5953] erofs: (device loop3): mounted with root inode @ nid 36. [ 105.872447][ T5965] loop1: detected capacity change from 0 to 8 [ 105.924991][ T5963] loop3: detected capacity change from 0 to 2048 [ 105.978916][ T5965] SQUASHFS error: Failed to read block 0x4de: -5 [ 106.008682][ T5963] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.044348][ T5965] SQUASHFS error: Failed to read block 0x4de: -5 [ 106.073583][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 106.073598][ T28] audit: type=1800 audit(1759938851.297:16): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 109.185198][ T5983] loop0: detected capacity change from 0 to 16 [ 109.467142][ T5983] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.531542][ T5983] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 109.552189][ T5983] syz.0.29: attempt to access beyond end of device [ 109.552189][ T5983] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 109.568995][ T5984] syz.0.29: attempt to access beyond end of device [ 109.568995][ T5984] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 113.194334][ T5997] pimreg: entered allmulticast mode [ 113.217985][ T5997] pimreg: left allmulticast mode [ 113.753667][ T6008] bridge2: entered promiscuous mode [ 113.759083][ T6008] bridge2: entered allmulticast mode [ 114.357402][ T28] audit: type=1326 audit(1759938859.567:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 114.413775][ T28] audit: type=1326 audit(1759938859.567:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 114.437322][ T28] audit: type=1326 audit(1759938859.567:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 114.517030][ T28] audit: type=1326 audit(1759938859.567:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 114.648631][ T28] audit: type=1326 audit(1759938859.567:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 114.764672][ T28] audit: type=1326 audit(1759938859.577:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 115.324665][ T28] audit: type=1326 audit(1759938859.577:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 115.480375][ T28] audit: type=1326 audit(1759938859.577:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 115.616869][ T28] audit: type=1326 audit(1759938859.577:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 115.791714][ T28] audit: type=1326 audit(1759938859.577:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 116.059730][ T6023] loop0: detected capacity change from 0 to 16 [ 116.115580][ T6023] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.174713][ T6023] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 116.194608][ T6023] syz.0.38: attempt to access beyond end of device [ 116.194608][ T6023] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 116.209424][ T6024] syz.0.38: attempt to access beyond end of device [ 116.209424][ T6024] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 116.900815][ T6031] loop3: detected capacity change from 0 to 8 [ 117.001208][ T6031] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.028931][ T6031] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.535910][ T6036] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.544916][ T6036] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.555758][ T6036] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.562771][ T6036] SQUASHFS error: Failed to read block 0x4de: -5 [ 118.568863][ T6046] pimreg: entered allmulticast mode [ 118.636589][ T6046] pimreg: left allmulticast mode [ 123.575870][ T6071] loop0: detected capacity change from 0 to 8 [ 123.605502][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 123.631071][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 123.641910][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 123.641924][ T28] audit: type=1800 audit(1759938868.867:46): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.49" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 124.588848][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.596270][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.602751][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.609351][ T6071] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.624878][ T28] audit: type=1326 audit(1759938869.797:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 124.713184][ T28] audit: type=1326 audit(1759938869.797:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 124.773708][ T28] audit: type=1326 audit(1759938869.807:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 124.835646][ T28] audit: type=1326 audit(1759938869.807:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 124.863384][ T28] audit: type=1326 audit(1759938869.807:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 124.906170][ T28] audit: type=1326 audit(1759938869.807:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 125.003095][ T28] audit: type=1326 audit(1759938869.807:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 125.063291][ T28] audit: type=1326 audit(1759938869.807:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 125.116133][ T28] audit: type=1326 audit(1759938869.807:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 125.427403][ T6084] pimreg: entered allmulticast mode [ 125.479775][ T6084] pimreg: left allmulticast mode [ 125.585556][ T6086] loop1: detected capacity change from 0 to 16 [ 125.636160][ T6086] erofs: (device loop1): mounted with root inode @ nid 36. [ 125.691417][ T6086] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 125.711527][ T6086] syz.1.47: attempt to access beyond end of device [ 125.711527][ T6086] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 125.726496][ T6087] syz.1.47: attempt to access beyond end of device [ 125.726496][ T6087] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 129.084462][ T6114] bridge3: entered promiscuous mode [ 129.089725][ T6114] bridge3: entered allmulticast mode [ 129.095791][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 129.095804][ T28] audit: type=1326 audit(1759938874.307:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.155876][ T28] audit: type=1326 audit(1759938874.307:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.185332][ T28] audit: type=1326 audit(1759938874.307:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.207871][ T28] audit: type=1326 audit(1759938874.307:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.257863][ T28] audit: type=1326 audit(1759938874.317:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.597724][ T28] audit: type=1326 audit(1759938874.327:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.753227][ T28] audit: type=1326 audit(1759938874.327:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.840766][ T28] audit: type=1326 audit(1759938874.327:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.898179][ T28] audit: type=1326 audit(1759938874.327:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 129.959174][ T28] audit: type=1326 audit(1759938874.327:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6107 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 130.034399][ T6125] loop2: detected capacity change from 0 to 8 [ 131.638885][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 131.653845][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 132.559364][ T6130] SQUASHFS error: Failed to read block 0x4de: -5 [ 132.573751][ T6130] SQUASHFS error: Failed to read block 0x4de: -5 [ 132.587345][ T6130] SQUASHFS error: Failed to read block 0x4de: -5 [ 132.620899][ T6130] SQUASHFS error: Failed to read block 0x4de: -5 [ 132.817057][ T6131] pimreg: entered allmulticast mode [ 132.859001][ T6131] pimreg: left allmulticast mode [ 133.073974][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.080703][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.375835][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 134.375849][ T28] audit: type=1326 audit(1759938879.607:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 134.447871][ T28] audit: type=1326 audit(1759938879.607:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 134.608277][ T28] audit: type=1326 audit(1759938879.607:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 134.731386][ T28] audit: type=1326 audit(1759938879.607:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.016935][ T28] audit: type=1326 audit(1759938879.607:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.055009][ T28] audit: type=1326 audit(1759938879.607:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.348165][ T6151] loop1: detected capacity change from 0 to 16 [ 135.412382][ T6151] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.478029][ T6150] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 135.488564][ T6150] syz.1.63: attempt to access beyond end of device [ 135.488564][ T6150] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 135.503682][ T6151] syz.1.63: attempt to access beyond end of device [ 135.503682][ T6151] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 135.603135][ T28] audit: type=1326 audit(1759938879.607:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.723385][ T28] audit: type=1326 audit(1759938879.607:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.768199][ T28] audit: type=1326 audit(1759938879.607:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 135.807971][ T28] audit: type=1326 audit(1759938879.607:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6141 comm="syz.3.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 137.511732][ T6167] bridge1: entered promiscuous mode [ 137.517160][ T6167] bridge1: entered allmulticast mode [ 137.849626][ T6169] pimreg: entered allmulticast mode [ 137.930385][ T6169] pimreg: left allmulticast mode [ 137.940358][ T6171] loop2: detected capacity change from 0 to 8 [ 138.096031][ T6171] SQUASHFS error: Failed to read block 0x4de: -5 [ 138.123562][ T6171] SQUASHFS error: Failed to read block 0x4de: -5 [ 140.094151][ T6189] loop3: detected capacity change from 0 to 16 [ 140.972607][ T6189] erofs: (device loop3): mounted with root inode @ nid 36. [ 140.991573][ T6185] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 141.002092][ T6185] syz.3.77: attempt to access beyond end of device [ 141.002092][ T6185] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 141.019822][ T6185] syz.3.77: attempt to access beyond end of device [ 141.019822][ T6185] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 142.018087][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 142.018101][ T28] audit: type=1326 audit(1759938887.247:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 142.383548][ T28] audit: type=1326 audit(1759938887.247:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 142.411037][ T28] audit: type=1326 audit(1759938887.287:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 142.717785][ T28] audit: type=1326 audit(1759938887.287:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 142.938649][ T28] audit: type=1326 audit(1759938887.287:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 143.027791][ T28] audit: type=1326 audit(1759938887.287:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 143.098249][ T28] audit: type=1326 audit(1759938887.297:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 143.173166][ T28] audit: type=1326 audit(1759938887.297:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 143.225857][ T28] audit: type=1326 audit(1759938887.297:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 143.311090][ T28] audit: type=1326 audit(1759938887.297:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6196 comm="syz.3.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52338eec9 code=0x7ffc0000 [ 145.898317][ T6212] bridge1: entered promiscuous mode [ 145.903666][ T6212] bridge1: entered allmulticast mode [ 146.172543][ T6214] pimreg: entered allmulticast mode [ 146.225572][ T6214] pimreg: left allmulticast mode [ 148.944406][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 148.944420][ T28] audit: type=1326 audit(1759938894.177:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.376255][ T28] audit: type=1326 audit(1759938894.177:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.401358][ T6238] loop0: detected capacity change from 0 to 16 [ 149.507613][ T6238] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.522689][ T6238] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 149.533338][ T6238] syz.0.89: attempt to access beyond end of device [ 149.533338][ T6238] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 149.551005][ T6238] syz.0.89: attempt to access beyond end of device [ 149.551005][ T6238] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 149.580246][ T28] audit: type=1326 audit(1759938894.207:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.813119][ T28] audit: type=1326 audit(1759938894.207:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.883979][ T28] audit: type=1326 audit(1759938894.207:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.911013][ T6242] loop3: detected capacity change from 0 to 8 [ 149.952635][ T28] audit: type=1326 audit(1759938894.647:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 149.988144][ T28] audit: type=1326 audit(1759938894.647:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 150.015844][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 150.022660][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 150.039665][ T28] audit: type=1326 audit(1759938894.647:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 150.224122][ T28] audit: type=1326 audit(1759938894.647:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 150.385278][ T28] audit: type=1326 audit(1759938894.647:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 150.818765][ T6248] pimreg: entered allmulticast mode [ 150.866695][ T6248] pimreg: left allmulticast mode [ 151.880551][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.887201][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 151.893724][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.461982][ T6259] bridge4: entered promiscuous mode [ 152.468518][ T6259] bridge4: entered allmulticast mode [ 153.007790][ T6242] SQUASHFS error: Failed to read block 0x4de: -5 [ 155.104453][ T6282] loop1: detected capacity change from 0 to 16 [ 155.297652][ T6282] erofs: (device loop1): mounted with root inode @ nid 36. [ 155.354934][ T6282] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 155.374629][ T6282] syz.1.101: attempt to access beyond end of device [ 155.374629][ T6282] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 155.389558][ T6283] syz.1.101: attempt to access beyond end of device [ 155.389558][ T6283] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 155.819968][ T6285] pimreg: entered allmulticast mode [ 155.859978][ T6285] pimreg: left allmulticast mode [ 156.960334][ T6296] loop1: detected capacity change from 0 to 8 [ 157.022127][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 157.033584][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 157.043417][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 157.043431][ T28] audit: type=1800 audit(1759938902.267:179): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.106" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 157.273311][ T28] audit: type=1326 audit(1759938902.497:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 157.351732][ T28] audit: type=1326 audit(1759938902.497:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 157.439462][ T28] audit: type=1326 audit(1759938902.567:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 157.575412][ T28] audit: type=1326 audit(1759938902.567:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 157.728136][ T28] audit: type=1326 audit(1759938902.567:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 157.902811][ T28] audit: type=1326 audit(1759938902.567:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 158.064920][ T28] audit: type=1326 audit(1759938902.567:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 158.221947][ T28] audit: type=1326 audit(1759938902.567:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 158.883095][ T28] audit: type=1326 audit(1759938902.567:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.0.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 158.907791][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 158.914353][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 158.921366][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 158.928545][ T6296] SQUASHFS error: Failed to read block 0x4de: -5 [ 160.428377][ T6308] bridge5: entered promiscuous mode [ 160.433726][ T6308] bridge5: entered allmulticast mode [ 163.335493][ T6335] loop0: detected capacity change from 0 to 16 [ 164.069074][ T6335] erofs: (device loop0): mounted with root inode @ nid 36. [ 164.093817][ T6331] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 164.104215][ T6331] syz.0.113: attempt to access beyond end of device [ 164.104215][ T6331] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 164.121267][ T6331] syz.0.113: attempt to access beyond end of device [ 164.121267][ T6331] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 165.200879][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 165.200893][ T28] audit: type=1326 audit(1759938910.427:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.380663][ T6345] loop1: detected capacity change from 0 to 8 [ 165.412134][ T28] audit: type=1326 audit(1759938910.477:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.507829][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 165.523663][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 165.549827][ T28] audit: type=1326 audit(1759938910.517:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.626376][ T28] audit: type=1326 audit(1759938910.517:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.678738][ T28] audit: type=1326 audit(1759938910.517:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.752973][ T28] audit: type=1326 audit(1759938910.527:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.808283][ T28] audit: type=1326 audit(1759938910.527:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.857563][ T28] audit: type=1326 audit(1759938910.527:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 165.944046][ T28] audit: type=1326 audit(1759938910.537:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 166.012199][ T28] audit: type=1326 audit(1759938910.537:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 166.562187][ T6351] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.624513][ T6351] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.675006][ T6351] SQUASHFS error: Failed to read block 0x4de: -5 [ 166.875284][ T6348] bridge2: entered promiscuous mode [ 166.880557][ T6348] bridge2: entered allmulticast mode [ 169.124690][ T6378] loop3: detected capacity change from 0 to 16 [ 169.142166][ T6378] erofs: (device loop3): mounted with root inode @ nid 36. [ 169.160810][ T6378] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 169.171907][ T6378] syz.3.123: attempt to access beyond end of device [ 169.171907][ T6378] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 169.189317][ T6378] syz.3.123: attempt to access beyond end of device [ 169.189317][ T6378] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 170.685969][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 170.685984][ T28] audit: type=1326 audit(1759938915.907:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 170.805708][ T28] audit: type=1326 audit(1759938915.917:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.303357][ T28] audit: type=1326 audit(1759938915.967:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.389385][ T28] audit: type=1326 audit(1759938915.997:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.504447][ T6402] loop2: detected capacity change from 0 to 8 [ 172.515597][ T28] audit: type=1326 audit(1759938915.997:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.575938][ T6402] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.582964][ T6402] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.600842][ T28] audit: type=1326 audit(1759938915.997:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.658506][ T28] audit: type=1326 audit(1759938915.997:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.733212][ T28] audit: type=1326 audit(1759938915.997:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.793480][ T28] audit: type=1326 audit(1759938916.007:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 172.836490][ T28] audit: type=1326 audit(1759938916.007:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.1.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 174.291550][ T6413] SQUASHFS error: Failed to read block 0x4de: -5 [ 174.298502][ T6413] SQUASHFS error: Failed to read block 0x4de: -5 [ 174.305391][ T6413] SQUASHFS error: Failed to read block 0x4de: -5 [ 174.311969][ T6413] SQUASHFS error: Failed to read block 0x4de: -5 [ 176.462308][ T6434] loop0: detected capacity change from 0 to 16 [ 176.585520][ T6434] erofs: (device loop0): mounted with root inode @ nid 36. [ 176.638181][ T6433] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 176.650192][ T6433] syz.0.136: attempt to access beyond end of device [ 176.650192][ T6433] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 176.665312][ T6434] syz.0.136: attempt to access beyond end of device [ 176.665312][ T6434] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 176.711087][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 176.711101][ T28] audit: type=1326 audit(1759938921.937:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 176.943161][ T28] audit: type=1326 audit(1759938921.937:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 176.989526][ T28] audit: type=1326 audit(1759938921.937:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 177.014129][ T28] audit: type=1326 audit(1759938921.937:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 177.043207][ T28] audit: type=1326 audit(1759938921.937:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 177.097595][ T28] audit: type=1326 audit(1759938921.977:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 177.293887][ T28] audit: type=1326 audit(1759938921.977:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 178.551091][ T28] audit: type=1326 audit(1759938921.977:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 178.737969][ T28] audit: type=1326 audit(1759938921.977:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 178.779415][ T28] audit: type=1326 audit(1759938921.977:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0a38eec9 code=0x7ffc0000 [ 179.677973][ T6451] loop1: detected capacity change from 0 to 8 [ 179.917646][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 179.952706][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 180.158867][ T6453] SQUASHFS error: Failed to read block 0x4de: -5 [ 180.165865][ T6453] SQUASHFS error: Failed to read block 0x4de: -5 [ 180.172617][ T6453] SQUASHFS error: Failed to read block 0x4de: -5 [ 180.179511][ T6453] SQUASHFS error: Failed to read block 0x4de: -5 [ 184.322380][ T6477] loop1: detected capacity change from 0 to 16 [ 185.051399][ T6477] erofs: (device loop1): mounted with root inode @ nid 36. [ 185.072213][ T6476] erofs: (device loop1): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 185.082655][ T6476] syz.1.147: attempt to access beyond end of device [ 185.082655][ T6476] loop1: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 185.100278][ T6476] syz.1.147: attempt to access beyond end of device [ 185.100278][ T6476] loop1: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 185.428542][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 185.428556][ T28] audit: type=1326 audit(1759938930.647:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 185.536639][ T28] audit: type=1326 audit(1759938930.647:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 185.910268][ T28] audit: type=1326 audit(1759938930.647:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.113493][ T6489] bridge6: entered promiscuous mode [ 186.119216][ T6489] bridge6: entered allmulticast mode [ 186.444910][ T28] audit: type=1326 audit(1759938930.657:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.533444][ T28] audit: type=1326 audit(1759938930.657:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.593183][ T28] audit: type=1326 audit(1759938930.657:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.616804][ T28] audit: type=1326 audit(1759938930.657:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.649698][ T28] audit: type=1326 audit(1759938930.657:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.738642][ T28] audit: type=1326 audit(1759938930.657:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.901774][ T28] audit: type=1326 audit(1759938930.657:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 186.942105][ T6494] loop2: detected capacity change from 0 to 8 [ 187.727299][ T6494] SQUASHFS error: Failed to read block 0x4de: -5 [ 187.754732][ T6494] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.013088][ T6498] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.029720][ T6498] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.041383][ T6498] SQUASHFS error: Failed to read block 0x4de: -5 [ 188.051431][ T6498] SQUASHFS error: Failed to read block 0x4de: -5 [ 190.940982][ T6518] loop3: detected capacity change from 0 to 16 [ 191.133748][ T6518] erofs: (device loop3): mounted with root inode @ nid 36. [ 191.187268][ T6518] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 191.206956][ T6518] syz.3.157: attempt to access beyond end of device [ 191.206956][ T6518] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 191.221979][ T6519] syz.3.157: attempt to access beyond end of device [ 191.221979][ T6519] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 192.878332][ T6525] bridge2: entered promiscuous mode [ 192.883689][ T6525] bridge2: entered allmulticast mode [ 193.416617][ T6532] loop2: detected capacity change from 0 to 8 [ 193.509374][ T6532] SQUASHFS error: Failed to read block 0x4de: -5 [ 193.516394][ T6532] SQUASHFS error: Failed to read block 0x4de: -5 [ 193.523828][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 193.523841][ T28] audit: type=1800 audit(1759938938.757:333): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.162" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 194.503752][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.516648][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.423980][ T6536] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.445406][ T6536] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.473073][ T6536] SQUASHFS error: Failed to read block 0x4de: -5 [ 196.497918][ T6536] SQUASHFS error: Failed to read block 0x4de: -5 [ 197.000081][ T28] audit: type=1326 audit(1759938942.227:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.036638][ T28] audit: type=1326 audit(1759938942.257:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.066403][ T28] audit: type=1326 audit(1759938942.257:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.099273][ T28] audit: type=1326 audit(1759938942.257:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.132057][ T28] audit: type=1326 audit(1759938942.257:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.161130][ T28] audit: type=1326 audit(1759938942.257:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.191308][ T28] audit: type=1326 audit(1759938942.257:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.227234][ T28] audit: type=1326 audit(1759938942.257:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 197.811727][ T28] audit: type=1326 audit(1759938942.257:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 199.616096][ T6569] loop0: detected capacity change from 0 to 16 [ 200.074309][ T6571] bridge3: entered promiscuous mode [ 200.079675][ T6571] bridge3: entered allmulticast mode [ 200.343595][ T6569] erofs: (device loop0): mounted with root inode @ nid 36. [ 200.372059][ T6567] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36 [ 200.382581][ T6567] syz.0.168: attempt to access beyond end of device [ 200.382581][ T6567] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 200.400786][ T6567] syz.0.168: attempt to access beyond end of device [ 200.400786][ T6567] loop0: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 202.893470][ T5842] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 203.223441][ T5842] usb 1-1: Using ep0 maxpacket: 32 [ 203.255718][ T5842] usb 1-1: config 0 has an invalid interface number: 7 but max is 0 [ 203.284576][ T5842] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.325391][ T5842] usb 1-1: config 0 has no interface number 0 [ 203.366104][ T5842] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.397775][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=10, SerialNumber=3 [ 203.463262][ T5842] usb 1-1: Product: syz [ 203.468098][ T5842] usb 1-1: Manufacturer: syz [ 203.498394][ T5842] usb 1-1: SerialNumber: syz [ 203.529074][ T5842] usb 1-1: config 0 descriptor?? [ 203.546859][ T5842] smsc95xx v2.0.0 [ 203.551046][ T5842] smsc95xx 1-1:0.7 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 203.574899][ T5842] smsc95xx: probe of 1-1:0.7 failed with error -22 [ 204.130533][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 204.130546][ T28] audit: type=1326 audit(1759938949.357:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.188852][ T28] audit: type=1326 audit(1759938949.357:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.247839][ T5842] usb 1-1: USB disconnect, device number 2 [ 204.273629][ T28] audit: type=1326 audit(1759938949.357:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.351281][ T28] audit: type=1326 audit(1759938949.377:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.499777][ T28] audit: type=1326 audit(1759938949.377:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.543270][ T28] audit: type=1326 audit(1759938949.377:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.607823][ T28] audit: type=1326 audit(1759938949.377:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.646358][ T28] audit: type=1326 audit(1759938949.377:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.795169][ T6594] loop3: detected capacity change from 0 to 8 [ 204.837939][ T28] audit: type=1326 audit(1759938949.377:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 204.918364][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 205.186623][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 205.334528][ T28] audit: type=1326 audit(1759938949.377:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz.2.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa63a78eec9 code=0x7ffc0000 [ 206.140263][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 206.146846][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 206.153446][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 206.159977][ T6594] SQUASHFS error: Failed to read block 0x4de: -5 [ 206.893216][ T5103] Bluetooth: hci0: command 0x0406 tx timeout [ 206.899615][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 207.286407][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 207.293494][ T6614] loop3: detected capacity change from 0 to 16 [ 207.304834][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 207.339110][ T6614] erofs: (device loop3): mounted with root inode @ nid 36. [ 207.357000][ T6612] syz.3.181: attempt to access beyond end of device [ 207.357000][ T6612] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 211.365314][ T6643] loop3: detected capacity change from 0 to 8 [ 211.530665][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.271105][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.312251][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 212.312291][ T28] audit: type=1800 audit(1759938957.537:386): pid=6643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.189" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 212.547220][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.561324][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.571338][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.586338][ T6643] SQUASHFS error: Failed to read block 0x4de: -5 [ 213.024402][ T28] audit: type=1326 audit(1759938958.257:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 213.105597][ T28] audit: type=1326 audit(1759938958.287:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 213.155368][ T28] audit: type=1326 audit(1759938958.287:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 213.344009][ T28] audit: type=1326 audit(1759938958.287:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 213.501127][ T6658] loop3: detected capacity change from 0 to 16 [ 214.055454][ T6658] erofs: (device loop3): mounted with root inode @ nid 36. [ 214.071946][ T6657] syz.3.192: attempt to access beyond end of device [ 214.071946][ T6657] loop3: rw=0, sector=34359739344, nr_sectors = 8 limit=16 [ 214.088636][ T28] audit: type=1326 audit(1759938958.287:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 214.238190][ T28] audit: type=1326 audit(1759938958.287:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 214.298094][ T28] audit: type=1326 audit(1759938958.287:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 214.344084][ T28] audit: type=1326 audit(1759938958.287:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 214.395702][ T28] audit: type=1326 audit(1759938958.287:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e73b8eec9 code=0x7ffc0000 [ 216.480697][ T6664] loop3: detected capacity change from 0 to 16 [ 217.287061][ T6664] erofs: (device loop3): mounted with root inode @ nid 36. [ 217.299541][ T6664] syz.3.193: attempt to access beyond end of device [ 217.299541][ T6664] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.316843][ T6664] syz.3.193: attempt to access beyond end of device [ 217.316843][ T6664] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 217.330807][ T6664] syz.3.193: attempt to access beyond end of device [ 217.330807][ T6664] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 217.346349][ T6664] syz.3.193: attempt to access beyond end of device [ 217.346349][ T6664] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.360781][ T6664] syz.3.193: attempt to access beyond end of device [ 217.360781][ T6664] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.375080][ T6664] syz.3.193: attempt to access beyond end of device [ 217.375080][ T6664] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 217.497950][ T5792] BUG: Bad page state in process syz-executor pfn:26a36 [ 217.505569][ T5792] page:ffffea00009a8d80 refcount:0 mapcount:0 mapping:ffff88805df827d8 index:0x2 pfn:0x26a36 [ 217.515967][ T5792] aops:z_erofs_cache_aops ino:0 [ 217.520875][ T5792] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 217.528791][ T5792] page_type: 0xffffffff() [ 217.533312][ T5792] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805df827d8 [ 217.541946][ T5792] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 217.550647][ T5792] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 217.558038][ T5792] page_owner tracks the page as allocated [ 217.564142][ T5792] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6664, tgid 6663 (syz.3.193), ts 217299456189, free_ts 217273187188 [ 217.586207][ T5792] post_alloc_hook+0x1cd/0x210 [ 217.591037][ T5792] get_page_from_freelist+0x195c/0x19f0 [ 217.596731][ T5792] __alloc_pages+0x1e3/0x460 [ 217.602020][ T5792] z_erofs_do_read_page+0x20c0/0x3680 [ 217.607636][ T5792] z_erofs_pcluster_readmore+0x2cf/0x450 [ 217.613880][ T5792] z_erofs_read_folio+0x208/0x540 [ 217.618949][ T5792] filemap_read_folio+0x167/0x760 [ 217.624074][ T5792] do_read_cache_folio+0x470/0x7e0 [ 217.629237][ T5792] erofs_bread+0x16f/0x630 [ 217.633778][ T5792] erofs_namei+0x28c/0xf00 [ 217.638244][ T5792] erofs_lookup+0x135/0x310 [ 217.642790][ T5792] lookup_one_qstr_excl+0x112/0x250 [ 217.648175][ T5792] filename_create+0x222/0x460 [ 217.653144][ T5792] do_symlinkat+0xbd/0x3f0 [ 217.657606][ T5792] __x64_sys_symlinkat+0x99/0xb0 [ 217.662591][ T5792] do_syscall_64+0x55/0xb0 [ 217.667143][ T5792] page last free stack trace: [ 217.671851][ T5792] free_unref_page_prepare+0x7ce/0x8e0 [ 217.677506][ T5792] free_unref_page+0x32/0x2e0 [ 217.682236][ T5792] vfree+0x1a6/0x320 [ 217.686285][ T5792] delayed_vfree_work+0x55/0x80 [ 217.691190][ T5792] process_scheduled_works+0xa45/0x15b0 [ 217.696917][ T5792] worker_thread+0xa55/0xfc0 [ 217.702154][ T5792] kthread+0x2fa/0x390 [ 217.706446][ T5792] ret_from_fork+0x48/0x80 [ 217.710916][ T5792] ret_from_fork_asm+0x11/0x20 [ 217.715837][ T5792] Modules linked in: [ 217.719786][ T5792] CPU: 1 PID: 5792 Comm: syz-executor Not tainted syzkaller #0 [ 217.727369][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 217.737445][ T5792] Call Trace: [ 217.740744][ T5792] [ 217.743696][ T5792] dump_stack_lvl+0x16c/0x230 [ 217.748405][ T5792] ? show_regs_print_info+0x20/0x20 [ 217.753625][ T5792] ? swiotlb_print_info+0x70/0x70 [ 217.758672][ T5792] bad_page+0x14b/0x170 [ 217.762843][ T5792] free_unref_page_prepare+0x887/0x8e0 [ 217.768337][ T5792] free_unref_page+0x32/0x2e0 [ 217.773033][ T5792] ? __folio_put+0xef/0x210 [ 217.777563][ T5792] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 217.784000][ T5792] erofs_shrink_workstation+0x118/0x290 [ 217.789577][ T5792] ? erofs_shrinker_unregister+0x170/0x170 [ 217.795404][ T5792] ? io_schedule+0xd0/0xd0 [ 217.799836][ T5792] ? kobject_put+0x43c/0x470 [ 217.804459][ T5792] erofs_shrinker_unregister+0x5d/0x170 [ 217.810032][ T5792] erofs_put_super+0x4e/0x150 [ 217.814770][ T5792] ? erofs_free_inode+0xb0/0xb0 [ 217.819672][ T5792] generic_shutdown_super+0x134/0x2b0 [ 217.825087][ T5792] kill_block_super+0x44/0x90 [ 217.829790][ T5792] erofs_kill_sb+0x4c/0x140 [ 217.834327][ T5792] deactivate_locked_super+0x97/0x100 [ 217.839752][ T5792] cleanup_mnt+0x429/0x4c0 [ 217.844206][ T5792] task_work_run+0x1ce/0x250 [ 217.848830][ T5792] ? task_work_cancel+0x240/0x240 [ 217.853884][ T5792] ? exit_to_user_mode_loop+0x3b/0x110 [ 217.859369][ T5792] exit_to_user_mode_loop+0xe6/0x110 [ 217.864672][ T5792] exit_to_user_mode_prepare+0xf6/0x180 [ 217.870237][ T5792] syscall_exit_to_user_mode+0x1a/0x50 [ 217.875746][ T5792] do_syscall_64+0x61/0xb0 [ 217.880207][ T5792] ? clear_bhb_loop+0x40/0x90 [ 217.884895][ T5792] ? clear_bhb_loop+0x40/0x90 [ 217.889585][ T5792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.895491][ T5792] RIP: 0033:0x7fa5233901f7 [ 217.899928][ T5792] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 217.919565][ T5792] RSP: 002b:00007fff110b2f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 217.928000][ T5792] RAX: 0000000000000000 RBX: 00007fa523411d7d RCX: 00007fa5233901f7 [ 217.935983][ T5792] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff110b3020 [ 217.943980][ T5792] RBP: 00007fff110b3020 R08: 0000000000000000 R09: 0000000000000000 [ 217.951958][ T5792] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff110b40b0 [ 217.959961][ T5792] R13: 00007fa523411d7d R14: 000000000003510d R15: 00007fff110b40f0 [ 217.967956][ T5792] [ 217.971928][ T5792] Disabling lock debugging due to kernel taint