last executing test programs: 8m16.487279467s ago: executing program 2 (id=3): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r3, 0x9, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) getpid() syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x859, 0x5, 0x32c}, &(0x7f00000002c0), &(0x7f00000000c0)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000) 8m13.837389503s ago: executing program 2 (id=12): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000003c0)={0x0, 0xec25, 0x400, 0x0, 0x24d, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m58.387585056s ago: executing program 32 (id=12): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r1 = socket$alg(0x26, 0x5, 0x0) close(r0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f00000003c0)={0x0, 0xec25, 0x400, 0x0, 0x24d, 0x0, r3}, &(0x7f00000006c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f0000000140)=[{&(0x7f0000001800)=""/216, 0xd8}, {&(0x7f0000000440)=""/128, 0x80}], 0x2}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7m0.219169115s ago: executing program 6 (id=108): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) 6m57.040841214s ago: executing program 6 (id=112): socket$kcm(0x29, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6m56.218083957s ago: executing program 6 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x20000000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m54.133018705s ago: executing program 6 (id=117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x2, 0x100000, 0x6, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m53.029523707s ago: executing program 6 (id=119): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@multicast2, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) 6m50.557629266s ago: executing program 6 (id=120): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0xb1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 6m35.278892713s ago: executing program 33 (id=120): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0xb1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 5m51.175200771s ago: executing program 5 (id=203): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x101080) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd_index=0x8, 0x8000000004, 0x0, 0x0, 0x2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x320, &(0x7f0000001280)={0x0, 0xb70f, 0x800, 0x0, 0x1, 0x0, r0}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x0) 5m48.609219715s ago: executing program 5 (id=205): syz_open_dev$video4linux(&(0x7f0000000540), 0x10000fc3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000200)='stripe', 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = syz_io_uring_setup(0xed0, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0xd) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008800000b7040000000000008500000033000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/172, 0xac}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r8}, 0x18) pwritev2(r7, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 5m47.470553327s ago: executing program 5 (id=207): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x800016, 0x0, 0x1, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1200008, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdad4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5m46.819533917s ago: executing program 5 (id=209): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {}, {0x7}}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) openat(r7, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m40.614841121s ago: executing program 5 (id=218): io_setup(0x7, &(0x7f0000000280)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xfffffffffffffffb]}, 0x0, 0x0, 0x8) 5m37.269198893s ago: executing program 5 (id=222): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {}, {0x7}}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) openat(r7, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m21.486632812s ago: executing program 34 (id=222): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {}, {0x7}}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, 0x0, 0x200008c0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r1) write$cgroup_int(r6, &(0x7f0000000040)=0x800000000001c8, 0x12) openat(r7, &(0x7f0000000080)='./file1\x00', 0x42, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m12.171943606s ago: executing program 1 (id=253): openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xffffffffffffff8c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008095) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1) write$dsp(r4, &(0x7f0000000480)="75d512d39077459e67ee110daaf0413bc745ef85bc9f2141d513969bd8000000", 0x1000c) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109301) 5m7.762913818s ago: executing program 1 (id=259): socket$kcm(0x29, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5m7.42888231s ago: executing program 1 (id=260): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x9, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x402, 0xc1) getdents(r1, &(0x7f00000000c0)=""/31, 0x1f) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x26800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x2e8}}], 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {}, 0xa}}, 0x26) syz_io_uring_setup(0x1c17, &(0x7f0000000380)={0x0, 0x3b7c, 0x4, 0x2000003, 0x3}, &(0x7f00000001c0), &(0x7f0000000240)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f00000006c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='./file0\x00') 5m2.743025035s ago: executing program 1 (id=263): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(0x0, 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, 0x0}}], 0x1, 0x4000841) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x58, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x40, 0x1, 0x0, 0x1, [@nested={0x3b, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @u32=0x9}, @generic="0753e778c928f9d66fb555dd766a38c43349d9f22e916f559c14536d8a81c74d6084ab0b0416863c7e7f7541ca8f72"]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x50, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x177) 4m57.371240548s ago: executing program 1 (id=272): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0002}]}) socket$pptp(0x18, 0x1, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1c1) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) io_setup(0x200, &(0x7f0000000140)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb00000000000000000a00003087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff000000000000000001000080000000000000000100"/112], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000000000000000", @ANYRES64=r7, @ANYBLOB="d813bccd376983eb88185867bbebf39f9a819c6f90c981afcde9505e3d7cadc038a5bd1ba3aa91530002826816a4d3c3ff5cb7bdf9a468109a83a993fe6749f4cbf66d599d97d58ffad369df43afd97f4ed0906450c21b68d790a119b1b6de85df827c55ed82aa40b38f6361fafbe8b5baaf9c30cb", @ANYBLOB="516f1ee7cf2bcd893a580000000000000000000000578c0405c0b0a7a3789156ce8bd7a301c7632cfe9405fb75c387e8ab5b6bd4936e6a222a3a25608a020bf9656a5a5c4a91619a335c68f284ed178a718004f5f5935bd80270c3eb5a14965bf8bc6c156bbf1ffd1c077e9d9e1daf8e3fa4ff897a67b53b5309ba85ca467728727f131bb9430b4ad74f2ca557c6671c1d02833f6fb8a0823c71ca358504f18e67d20dd1deb663cbf57bed1c126b4544eea137bfd580be9b9745e7e81df706f89e29740917b10beea2a0f4aa6f3d8f09c2b5ef348603dce46b8eee3e59dbdf8eeeebb3fbc7084c7b6d3c0a64213a9ad158790bf290", @ANYRES32, @ANYRESHEX=r2], 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 4m53.45769959s ago: executing program 1 (id=277): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d557"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 4m37.45822024s ago: executing program 35 (id=277): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000220000012bbd7000ffdbdf250280d4d557"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b33, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 4.560430018s ago: executing program 0 (id=767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.488200796s ago: executing program 0 (id=788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.397898054s ago: executing program 8 (id=789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2.053351153s ago: executing program 0 (id=792): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffda) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.035657398s ago: executing program 7 (id=793): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x4d) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x1b, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x2, 0x4, 0x6, 0x10}, @call={0x85, 0x0, 0x0, 0x6c}, @call={0x85, 0x0, 0x0, 0x40}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x1000, 0x7b, &(0x7f0000000580)=""/123, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x3, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000940)=[{0x3, 0x3, 0xe}, {0x0, 0x2, 0x2, 0xc}, {0x2, 0x4, 0xc, 0xb}, {0x1, 0x4, 0xa, 0x684c976f6558be6c}, {0x3, 0x5, 0x7, 0x3}], 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) 1.918010685s ago: executing program 3 (id=795): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 1.871568695s ago: executing program 8 (id=797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.684866025s ago: executing program 8 (id=798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(0x3) 1.625009521s ago: executing program 4 (id=799): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.62472184s ago: executing program 9 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.480285835s ago: executing program 3 (id=801): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r1, 0x0, 0x11000000}, 0x38) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fbf860"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1ff8d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002706870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a83984e68a6d80a5f5222ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0007000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1f6428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000a034000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1ebbb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa5210b16eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1.437649818s ago: executing program 0 (id=802): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='task_newtask\x00', r2}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.386088496s ago: executing program 9 (id=803): socketpair(0x1e, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.378940865s ago: executing program 4 (id=804): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.292774618s ago: executing program 7 (id=805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.197145045s ago: executing program 8 (id=806): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.111561695s ago: executing program 4 (id=807): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, r0, 0x0, 0x2}, 0x50) 1.058520286s ago: executing program 3 (id=808): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x20) 1.005957625s ago: executing program 7 (id=809): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) r3 = getpid() write$cgroup_pid(r2, &(0x7f0000000480)=r3, 0x12) 1.004162369s ago: executing program 0 (id=810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 981.561177ms ago: executing program 8 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'vxcan1\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) 925.582658ms ago: executing program 9 (id=812): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 714.878526ms ago: executing program 4 (id=813): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 667.477353ms ago: executing program 9 (id=814): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000003000003"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r1}, 0xc) 617.84516ms ago: executing program 3 (id=815): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000014c80020850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0xf, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 617.39756ms ago: executing program 7 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 568.233624ms ago: executing program 0 (id=817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000240), &(0x7f0000000400)=r2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 434.168946ms ago: executing program 8 (id=818): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 429.374435ms ago: executing program 7 (id=819): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) 337.875542ms ago: executing program 3 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) 337.440407ms ago: executing program 4 (id=821): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 336.716022ms ago: executing program 9 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$sock(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)}, 0x1) 171.726123ms ago: executing program 4 (id=823): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 152.27542ms ago: executing program 9 (id=824): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000070a00006a0a00fe0000000c850000006c000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 101.180857ms ago: executing program 7 (id=825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe40, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=826): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='page_pool_state_hold\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 67295 subj=unconfined pid=7188 comm="syz.7.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 255.238479][ T7187] program syz.3.212 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.279843][ T5914] usb 4-1: string descriptor 0 read error: -71 [ 255.294992][ T31] audit: type=1326 audit(1768733475.272:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7188 comm="syz.7.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 255.342660][ T5914] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 255.469042][ T5181] bcm5974 4-1:0.0: could not read from device [ 255.546056][ T5914] usb 4-1: USB disconnect, device number 5 [ 255.563468][ T5181] bcm5974 4-1:0.0: could not read from device [ 258.233255][ T7210] loop3: detected capacity change from 0 to 512 [ 258.551268][ T7210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.603331][ T7210] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.175934][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.182611][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.376755][ T7210] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.436687][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 260.436709][ T31] audit: type=1326 audit(1768733481.852:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 260.598613][ T31] audit: type=1326 audit(1768733481.852:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 260.731234][ T31] audit: type=1326 audit(1768733481.882:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 260.835557][ T31] audit: type=1326 audit(1768733481.882:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 260.955784][ T31] audit: type=1326 audit(1768733481.882:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 261.080785][ T31] audit: type=1326 audit(1768733481.882:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 261.190008][ T31] audit: type=1326 audit(1768733481.882:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 261.302885][ T31] audit: type=1326 audit(1768733481.882:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 261.466376][ T31] audit: type=1326 audit(1768733481.942:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 261.608127][ T31] audit: type=1326 audit(1768733481.942:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7216 comm="syz.0.220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 262.445983][ T6474] usbhid 8-1:0.0: can't add hid device: -32 [ 262.490867][ T6474] usbhid 8-1:0.0: probe with driver usbhid failed with error -32 [ 262.689824][ T6474] usb 8-1: USB disconnect, device number 2 [ 265.414979][ T6474] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 265.612115][ T6474] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 265.698022][ T6474] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 267.260929][ T6474] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.286775][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 267.286797][ T31] audit: type=1326 audit(1768733487.682:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 267.314885][ T6474] usb 8-1: Product: syz [ 267.334890][ T6474] usb 8-1: Manufacturer: syz [ 267.344937][ T6474] usb 8-1: SerialNumber: syz [ 267.397299][ T6474] usb 8-1: config 0 descriptor?? [ 267.426386][ T31] audit: type=1326 audit(1768733487.682:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 267.607569][ T6474] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 267.637429][ T37] usb 8-1: Failed to submit usb control message: -71 [ 267.643452][ T6474] usb 8-1: USB disconnect, device number 3 [ 267.715215][ T37] usb 8-1: unable to send the bmi data to the device: -71 [ 267.726476][ T31] audit: type=1326 audit(1768733487.682:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 267.775025][ T37] usb 8-1: unable to get target info from device [ 267.781421][ T37] usb 8-1: could not get target info (-71) [ 267.834953][ T31] audit: type=1326 audit(1768733487.692:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 267.957394][ T37] usb 8-1: could not probe fw (-71) [ 267.957439][ T31] audit: type=1326 audit(1768733487.692:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 268.101035][ T31] audit: type=1326 audit(1768733487.692:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 268.223161][ T31] audit: type=1326 audit(1768733487.692:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 268.415027][ T31] audit: type=1326 audit(1768733487.692:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 268.645163][ T31] audit: type=1326 audit(1768733487.692:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 268.765554][ T31] audit: type=1326 audit(1768733487.702:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7257 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 269.709372][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 270.333040][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 272.689825][ T7300] loop3: detected capacity change from 0 to 1024 [ 272.804593][ T7300] hfsplus: xattr searching failed [ 278.384121][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 278.384138][ T31] audit: type=1804 audit(1768733499.792:428): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.242" name="/newroot/43/bus/bus" dev="overlay" ino=267 res=1 errno=0 [ 278.519141][ T7332] netlink: 'syz.0.241': attribute type 4 has an invalid length. [ 278.530669][ T7332] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.600249][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.7.243'. [ 278.732208][ T31] audit: type=1804 audit(1768733499.832:429): pid=7335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.242" name="/newroot/43/bus/bus" dev="overlay" ino=267 res=1 errno=0 [ 278.823440][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 278.841650][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 278.851731][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 278.861767][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 278.870027][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.216327][ T7339] lo speed is unknown, defaulting to 1000 [ 280.924959][ T5850] Bluetooth: hci6: command tx timeout [ 282.147339][ T6041] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.601203][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 282.615852][ T5850] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 282.923434][ T7374] loop0: detected capacity change from 0 to 64 [ 283.005642][ T5850] Bluetooth: hci6: command tx timeout [ 283.020535][ T7374] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop0 [ 283.271771][ T7374] program syz.0.247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.085067][ T5850] Bluetooth: hci6: command tx timeout [ 286.073655][ T6041] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.207218][ T30] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 286.851670][ T30] usb 8-1: device descriptor read/all, error -71 [ 287.168279][ T5850] Bluetooth: hci6: command tx timeout [ 287.301335][ T7411] loop7: detected capacity change from 0 to 1024 [ 287.453982][ T6041] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.525289][ T7411] hfsplus: xattr searching failed [ 290.589020][ T6041] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.683009][ T5850] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 290.739102][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.799004][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.899147][ T7339] bridge_slave_0: entered allmulticast mode [ 291.049517][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.257'. [ 291.107243][ T7339] bridge_slave_0: entered promiscuous mode [ 291.139213][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.189575][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.205108][ T7339] bridge_slave_1: entered allmulticast mode [ 291.297991][ T7339] bridge_slave_1: entered promiscuous mode [ 291.754971][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.838744][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.751803][ T7339] team0: Port device team_slave_0 added [ 292.843482][ T7339] team0: Port device team_slave_1 added [ 292.869779][ T6041] bridge_slave_1: left allmulticast mode [ 292.888008][ T6041] bridge_slave_1: left promiscuous mode [ 292.893797][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.956114][ T6041] bridge_slave_0: left allmulticast mode [ 293.000348][ T6041] bridge_slave_0: left promiscuous mode [ 293.031609][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.840503][ T31] audit: type=1800 audit(1768733517.252:430): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.264" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 296.436160][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.523924][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.075352][ T6041] bond0 (unregistering): Released all slaves [ 297.839236][ T7459] netdevsim netdevsim1: Direct firmware load for / [ 297.839236][ T7459] failed with error -2 [ 297.914908][ T7459] netdevsim netdevsim1: Falling back to sysfs fallback for: / [ 297.914908][ T7459] [ 299.206839][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.213799][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.382499][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.430312][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.476308][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.115114][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.176674][ T7481] netlink: 'syz.3.267': attribute type 4 has an invalid length. [ 300.942073][ T7479] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.422504][ T7494] loop0: detected capacity change from 0 to 40427 [ 301.433245][ T7494] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 301.441069][ T7494] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 301.450550][ T7494] F2FS-fs (loop0): invalid crc value [ 301.709672][ T7494] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 301.720035][ T7494] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 301.728059][ T7494] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 301.788044][ T7339] hsr_slave_0: entered promiscuous mode [ 301.796613][ T7339] hsr_slave_1: entered promiscuous mode [ 301.811997][ T7339] debugfs: 'hsr0' already exists in 'hsr' [ 301.821434][ T7339] Cannot create hsr debugfs directory [ 303.165104][ T31] audit: type=1326 audit(1768733524.562:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.257514][ T31] audit: type=1326 audit(1768733524.562:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.411613][ T31] audit: type=1326 audit(1768733524.572:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.444691][ T6041] hsr_slave_0: left promiscuous mode [ 303.504086][ T6041] hsr_slave_1: left promiscuous mode [ 303.555016][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.557127][ T31] audit: type=1326 audit(1768733524.572:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.562429][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.688404][ T31] audit: type=1326 audit(1768733524.572:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.765338][ T7511] blktrace: Concurrent blktraces are not allowed on loop5 [ 303.806265][ T6041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.813695][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.874985][ T31] audit: type=1326 audit(1768733524.572:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 303.919891][ T7513] loop4: detected capacity change from 0 to 512 [ 303.991730][ T7513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.008295][ T31] audit: type=1326 audit(1768733524.572:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 304.038460][ T7513] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.125082][ T6041] veth1_macvtap: left promiscuous mode [ 304.131881][ T6041] veth0_macvtap: left promiscuous mode [ 304.147283][ T7513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.185960][ T6041] veth1_vlan: left promiscuous mode [ 304.192625][ T31] audit: type=1326 audit(1768733524.572:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 304.247906][ T6041] veth0_vlan: left promiscuous mode [ 304.284479][ T31] audit: type=1326 audit(1768733524.572:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 304.775050][ T31] audit: type=1326 audit(1768733524.572:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7495 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6078f749 code=0x7ffc0000 [ 306.405026][ T5915] IPVS: starting estimator thread 0... [ 306.622801][ T7535] IPVS: using max 35 ests per chain, 84000 per kthread [ 307.070422][ T7538] loop7: detected capacity change from 0 to 1024 [ 307.375392][ T7538] hfsplus: xattr searching failed [ 308.704969][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 308.919338][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 308.934531][ T24] usb 8-1: config 0 has no interfaces? [ 308.941804][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.954901][ T24] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 309.003003][ T24] usb 8-1: Manufacturer: syz [ 309.035775][ T24] usb 8-1: config 0 descriptor?? [ 309.847910][ T7565] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 310.113533][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.191114][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 310.688543][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 313.638138][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 313.638163][ T31] audit: type=1804 audit(1768733534.952:466): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.289" name="/newroot/54/bus/bus" dev="overlay" ino=340 res=1 errno=0 [ 314.056781][ T31] audit: type=1804 audit(1768733534.972:467): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.289" name="/newroot/54/bus/bus" dev="overlay" ino=340 res=1 errno=0 [ 314.797889][ T788] usb 8-1: USB disconnect, device number 6 [ 315.681912][ T31] audit: type=1804 audit(1768733537.092:468): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.290" name="/newroot/19/bus/bus" dev="overlay" ino=129 res=1 errno=0 [ 316.041458][ T31] audit: type=1804 audit(1768733537.092:469): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.290" name="/newroot/19/bus/bus" dev="overlay" ino=129 res=1 errno=0 [ 320.152028][ T7596] loop3: detected capacity change from 0 to 32768 [ 320.359502][ T7596] ERROR: (device loop3): diRead: i_ino != di_number [ 320.359502][ T7596] [ 320.623442][ T7581] netdevsim netdevsim4: Direct firmware load for / [ 320.623442][ T7581] failed with error -2 [ 320.708426][ T7581] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 320.708426][ T7581] [ 321.752029][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.769406][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 321.770984][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.801109][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 321.952528][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 321.970424][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.565378][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.619232][ T7339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 322.859477][ T7339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 322.940143][ T7339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 323.014417][ T7616] lo speed is unknown, defaulting to 1000 [ 323.026182][ T7339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 323.179595][ T6041] IPVS: stop unused estimator thread 0... [ 323.385017][ T5815] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.615719][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 323.687869][ T5815] usb 1-1: config 0 has no interfaces? [ 323.716196][ T5815] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.725639][ T5815] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.733623][ T5815] usb 1-1: Manufacturer: syz [ 323.756786][ T5815] usb 1-1: config 0 descriptor?? [ 324.238162][ T6106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.691995][ T5839] Bluetooth: hci5: command tx timeout [ 324.705962][ T6106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.985794][ T6106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.231339][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.436849][ T6106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.896491][ T7656] loop4: detected capacity change from 0 to 256 [ 325.970794][ T7656] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 326.212783][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.266389][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.273775][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.333716][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.340848][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.426492][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 326.529796][ T5915] usb 1-1: USB disconnect, device number 5 [ 326.774951][ T5850] Bluetooth: hci5: command tx timeout [ 327.235667][ T31] audit: type=1804 audit(1768733548.542:470): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.302" name="/newroot/56/bus/bus" dev="overlay" ino=350 res=1 errno=0 [ 327.304924][ T31] audit: type=1804 audit(1768733548.552:471): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.302" name="/newroot/56/bus/bus" dev="overlay" ino=350 res=1 errno=0 [ 328.094986][ T31] audit: type=1804 audit(1768733549.472:472): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.304" name="/newroot/22/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 328.601317][ T31] audit: type=1804 audit(1768733549.492:473): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.304" name="/newroot/22/bus/bus" dev="overlay" ino=155 res=1 errno=0 [ 328.729608][ T7339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 328.772531][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 328.845175][ T5850] Bluetooth: hci5: command tx timeout [ 328.872613][ T6106] bridge_slave_1: left allmulticast mode [ 328.918676][ T6106] bridge_slave_1: left promiscuous mode [ 328.925785][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.251372][ T6106] bridge_slave_0: left allmulticast mode [ 329.348027][ T6106] bridge_slave_0: left promiscuous mode [ 329.353868][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.925440][ T5839] Bluetooth: hci5: command tx timeout [ 331.197745][ T6106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.225670][ T6106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.244151][ T6106] bond0 (unregistering): Released all slaves [ 331.350757][ T7702] loop4: detected capacity change from 0 to 1024 [ 331.413374][ T7702] hfsplus: xattr searching failed [ 331.581147][ T6106] bond1 (unregistering): Released all slaves [ 332.081014][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.155057][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.215200][ T7616] bridge_slave_0: entered allmulticast mode [ 332.240625][ T7616] bridge_slave_0: entered promiscuous mode [ 332.395434][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.475917][ T7704] loop7: detected capacity change from 0 to 1024 [ 332.945083][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.970160][ T7704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.027035][ T7616] bridge_slave_1: entered allmulticast mode [ 333.174371][ T7616] bridge_slave_1: entered promiscuous mode [ 334.077545][ T7716] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 334.078083][ T31] audit: type=1800 audit(1768733555.492:474): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.309" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 334.482456][ T6792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.857253][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.830020][ T7738] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 336.094906][ T31] audit: type=1326 audit(1768733557.362:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.245120][ T6025] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 336.271643][ T31] audit: type=1326 audit(1768733557.362:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.294746][ T31] audit: type=1326 audit(1768733557.362:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.367154][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.425282][ T6025] usb 4-1: Using ep0 maxpacket: 32 [ 336.448009][ T31] audit: type=1326 audit(1768733557.362:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.478769][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.525175][ T6025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.538945][ T31] audit: type=1326 audit(1768733557.362:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.684192][ T7727] netdevsim netdevsim7: Direct firmware load for / [ 336.684192][ T7727] failed with error -2 [ 336.729934][ T6025] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 336.840335][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.852633][ T6025] usb 4-1: config 0 descriptor?? [ 336.865437][ T31] audit: type=1326 audit(1768733557.362:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 336.899918][ T7744] macvlan2: entered promiscuous mode [ 336.905503][ T7744] macvlan2: entered allmulticast mode [ 336.969353][ T7744] bond1: entered promiscuous mode [ 336.995608][ T7744] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 337.081681][ T7727] netdevsim netdevsim7: Falling back to sysfs fallback for: / [ 337.081681][ T7727] [ 337.093690][ T31] audit: type=1326 audit(1768733557.362:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 337.211151][ T7744] bond1: left promiscuous mode [ 337.237360][ T31] audit: type=1326 audit(1768733557.362:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 337.359766][ T6025] ft260 0003:0403:6030.0002: unknown main item tag 0x7 [ 337.450814][ T31] audit: type=1326 audit(1768733557.362:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7730 comm="syz.3.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 337.557919][ T6025] ft260 0003:0403:6030.0002: chip code: 6424 8183 [ 337.630871][ T7616] team0: Port device team_slave_0 added [ 337.771966][ T6025] ft260 0003:0403:6030.0002: failed to retrieve system status [ 337.787327][ T6106] hsr_slave_0: left promiscuous mode [ 337.849953][ T6025] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -5 [ 337.903350][ T6106] hsr_slave_1: left promiscuous mode [ 337.977118][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.027390][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.063141][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.072661][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.079344][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.132643][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.143283][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.288939][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.352380][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.572236][ T6106] veth1_macvtap: left promiscuous mode [ 338.614638][ T6106] veth0_macvtap: left promiscuous mode [ 338.668389][ T6106] veth1_vlan: left promiscuous mode [ 338.704305][ T6106] veth0_vlan: left promiscuous mode [ 340.003018][ T7768] loop7: detected capacity change from 0 to 512 [ 340.169863][ T7768] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.208611][ T5850] Bluetooth: hci0: command tx timeout [ 340.259523][ T7768] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.319013][ T5815] usb 4-1: USB disconnect, device number 6 [ 340.357125][ T7768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.934470][ T7777] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ [ 340.934823][ T7777] CIFS mount error: No usable UNC path provided in device string! [ 340.934823][ T7777] [ 341.165205][ T7777] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.049023][ T5815] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 342.247638][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 342.288818][ T5850] Bluetooth: hci0: command tx timeout [ 342.465086][ T5815] usb 5-1: config 0 has no interfaces? [ 342.595463][ T5815] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 342.644984][ T5815] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 342.653091][ T5815] usb 5-1: Manufacturer: syz [ 342.694628][ T5815] usb 5-1: config 0 descriptor?? [ 342.772932][ T6106] team0 (unregistering): Port device team_slave_1 removed [ 342.887163][ T6106] team0 (unregistering): Port device team_slave_0 removed [ 344.385129][ T5850] Bluetooth: hci0: command tx timeout [ 344.592341][ T7806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 344.743053][ T7616] team0: Port device team_slave_1 added [ 344.992786][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.319'. [ 345.016368][ T7786] syz_tun: entered allmulticast mode [ 345.061405][ T7787] dvmrp6: entered allmulticast mode [ 345.193725][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.218999][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.300871][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.391718][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.421943][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.472558][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.635201][ T7758] lo speed is unknown, defaulting to 1000 [ 345.797313][ T7616] hsr_slave_0: entered promiscuous mode [ 345.823385][ T7616] hsr_slave_1: entered promiscuous mode [ 345.829733][ T7616] debugfs: 'hsr0' already exists in 'hsr' [ 345.844985][ T7616] Cannot create hsr debugfs directory [ 346.145246][ T5815] usb 5-1: USB disconnect, device number 5 [ 346.444996][ T5850] Bluetooth: hci0: command tx timeout [ 348.691962][ T31] kauditd_printk_skb: 34 callbacks suppressed [ 348.691985][ T31] audit: type=1326 audit(1768733569.122:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.006310][ T31] audit: type=1326 audit(1768733569.122:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.119938][ T31] audit: type=1326 audit(1768733569.122:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.415086][ T31] audit: type=1326 audit(1768733569.132:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.494928][ T31] audit: type=1326 audit(1768733569.132:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.619448][ T31] audit: type=1326 audit(1768733569.132:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.754934][ T31] audit: type=1326 audit(1768733569.132:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 349.881142][ T31] audit: type=1326 audit(1768733569.132:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 350.037363][ T31] audit: type=1326 audit(1768733569.142:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 350.214966][ T31] audit: type=1326 audit(1768733569.142:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.7.328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 351.844608][ T7861] blktrace: Concurrent blktraces are not allowed on loop5 [ 351.954744][ T7864] __vm_enough_memory: pid: 7864, comm: syz.7.329, bytes: 4503599627366400 not enough memory for the allocation [ 352.394177][ T7758] chnl_net:caif_netlink_parms(): no params data found [ 352.702524][ T7616] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 353.364162][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 353.506930][ T7879] syz_tun: entered allmulticast mode [ 353.553518][ T7616] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 353.753947][ T7883] dvmrp6: entered allmulticast mode [ 353.900359][ T7616] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 354.295334][ T7892] __vm_enough_memory: pid: 7892, comm: syz.3.336, bytes: 4503599627366400 not enough memory for the allocation [ 354.414661][ T7616] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 354.949633][ T6106] bridge_slave_1: left allmulticast mode [ 354.994513][ T6106] bridge_slave_1: left promiscuous mode [ 355.027741][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.947825][ T6106] bridge_slave_0: left allmulticast mode [ 356.953956][ T6106] bridge_slave_0: left promiscuous mode [ 357.037355][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.386475][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 359.386497][ T31] audit: type=1326 audit(1768733579.832:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.485276][ T31] audit: type=1326 audit(1768733579.832:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.512704][ T31] audit: type=1326 audit(1768733579.832:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.549844][ T31] audit: type=1326 audit(1768733579.842:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.694943][ T31] audit: type=1326 audit(1768733579.842:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.728335][ T31] audit: type=1326 audit(1768733579.842:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.768426][ T31] audit: type=1326 audit(1768733579.842:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.844983][ T31] audit: type=1326 audit(1768733579.842:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 359.966859][ T31] audit: type=1326 audit(1768733579.852:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 360.040797][ T31] audit: type=1326 audit(1768733579.852:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7913 comm="syz.4.339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3e3b8f749 code=0x7ffc0000 [ 360.808723][ T6106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.934227][ T6106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.981090][ T6106] bond0 (unregistering): Released all slaves [ 361.331930][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.385353][ T7758] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.446723][ T7758] bridge_slave_0: entered allmulticast mode [ 361.461729][ T7923] fuse: Bad value for 'fd' [ 361.463410][ T7758] bridge_slave_0: entered promiscuous mode [ 361.534590][ T6106] hsr_slave_0: left promiscuous mode [ 361.576398][ T6106] hsr_slave_1: left promiscuous mode [ 361.633939][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.737075][ T6106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.121092][ T5850] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 362.530390][ T7936] blktrace: Concurrent blktraces are not allowed on loop5 [ 363.793937][ T6106] team0 (unregistering): Port device team_slave_1 removed [ 363.968578][ T6106] team0 (unregistering): Port device team_slave_0 removed [ 364.604021][ T7947] netlink: 'syz.7.348': attribute type 4 has an invalid length. [ 365.400607][ T7758] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.452924][ T7758] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.479068][ T7758] bridge_slave_1: entered allmulticast mode [ 365.501536][ T7758] bridge_slave_1: entered promiscuous mode [ 365.517123][ T7923] ipip0: entered promiscuous mode [ 365.541534][ T7923] ipip0: entered allmulticast mode [ 366.075476][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 366.075498][ T31] audit: type=1800 audit(1768733587.492:588): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.350" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 366.157810][ T7758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.198794][ T7758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.264966][ T7952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 366.343101][ T7954] syz_tun: entered allmulticast mode [ 366.408920][ T7955] dvmrp6: entered allmulticast mode [ 366.891455][ T7963] netdevsim netdevsim4: Direct firmware load for / [ 366.891455][ T7963] failed with error -2 [ 366.902127][ T7963] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 366.902127][ T7963] [ 367.429766][ T7758] team0: Port device team_slave_0 added [ 367.879803][ T7758] team0: Port device team_slave_1 added [ 368.223549][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.236534][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.313385][ T7758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.426621][ T7758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.447927][ T7758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.536507][ T7758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.998488][ T7758] hsr_slave_0: entered promiscuous mode [ 369.022890][ T7758] hsr_slave_1: entered promiscuous mode [ 369.044656][ T7758] debugfs: 'hsr0' already exists in 'hsr' [ 369.071634][ T7758] Cannot create hsr debugfs directory [ 369.578377][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 369.605911][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.948253][ T7991] blktrace: Concurrent blktraces are not allowed on loop5 [ 370.226991][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.300998][ T8000] loop3: detected capacity change from 0 to 256 [ 370.431193][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.438437][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.431591][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.438790][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.737422][ T7758] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 372.810216][ T7758] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 372.915391][ T7758] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 373.039206][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 373.099581][ T8030] syz_tun: entered allmulticast mode [ 373.135192][ T8028] dvmrp6: entered allmulticast mode [ 373.199430][ T7758] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 373.626679][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.171036][ T7758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.347517][ T7758] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.452330][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.459503][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.597344][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.604490][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.136317][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.7.367'. [ 375.789764][ T7616] veth0_vlan: entered promiscuous mode [ 375.909804][ T7616] veth1_vlan: entered promiscuous mode [ 375.977040][ T31] audit: type=1326 audit(1768733597.392:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.344625][ T7758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.384942][ T5967] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 376.384962][ T31] audit: type=1326 audit(1768733597.432:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.466035][ T31] audit: type=1326 audit(1768733597.432:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.561917][ T7616] veth0_macvtap: entered promiscuous mode [ 376.577971][ T31] audit: type=1326 audit(1768733597.432:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.672227][ T7616] veth1_macvtap: entered promiscuous mode [ 376.692906][ T5967] usb 8-1: Using ep0 maxpacket: 32 [ 376.745662][ T31] audit: type=1326 audit(1768733597.442:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.817832][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.826047][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.898610][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.905995][ T31] audit: type=1326 audit(1768733597.492:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 376.981676][ T3689] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.011508][ T5967] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.036952][ T31] audit: type=1326 audit(1768733597.492:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 377.088753][ T3689] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.119050][ T5967] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 377.158423][ T3689] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.204899][ T5967] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.226663][ T31] audit: type=1326 audit(1768733597.492:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ebf38f749 code=0x7ffc0000 [ 377.275784][ T5967] usb 8-1: config 0 descriptor?? [ 377.300214][ T31] audit: type=1326 audit(1768733597.542:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ebf38df90 code=0x7ffc0000 [ 377.340368][ T3689] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.391496][ T8086] blktrace: Concurrent blktraces are not allowed on loop5 [ 377.440936][ T31] audit: type=1326 audit(1768733597.542:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8064 comm="syz.7.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3ebf38f34b code=0x7ffc0000 [ 377.728482][ T8092] loop4: detected capacity change from 0 to 256 [ 377.850475][ T5967] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 377.866368][ T7390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.929167][ T7390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.001688][ T5967] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 378.036452][ T3546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.110967][ T3546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.202682][ T5967] ft260 0003:0403:6030.0003: failed to retrieve system status [ 378.265777][ T5967] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -5 [ 379.228404][ T7758] veth0_vlan: entered promiscuous mode [ 379.239771][ T7758] veth1_vlan: entered promiscuous mode [ 379.434136][ T7758] veth0_macvtap: entered promiscuous mode [ 379.470852][ T7758] veth1_macvtap: entered promiscuous mode [ 379.712817][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.788552][ T7758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.920372][ T3689] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.973278][ T3689] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.065289][ T3689] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.150113][ T3920] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.399019][ T3920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.449727][ T3920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.660550][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.708640][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.130689][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.379'. [ 381.286639][ T6848] usb 8-1: USB disconnect, device number 7 [ 381.466369][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.8.239'. [ 381.485695][ T8128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.492953][ T8128] IPv6: NLM_F_CREATE should be set when creating new route [ 381.500209][ T8128] IPv6: NLM_F_CREATE should be set when creating new route [ 381.507443][ T8128] IPv6: NLM_F_CREATE should be set when creating new route [ 381.795836][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 382.582253][ T31] kauditd_printk_skb: 27 callbacks suppressed [ 382.582276][ T31] audit: type=1326 audit(1768733603.962:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 382.849643][ T31] audit: type=1326 audit(1768733603.962:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 382.994423][ T31] audit: type=1326 audit(1768733603.962:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 383.037240][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.383'. [ 383.056797][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.067760][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.407415][ T31] audit: type=1326 audit(1768733603.962:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 383.582044][ T31] audit: type=1326 audit(1768733603.962:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 383.840614][ T31] audit: type=1326 audit(1768733603.962:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 384.103345][ T31] audit: type=1326 audit(1768733603.962:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 384.347326][ T8144] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 384.347326][ T8144] program syz.4.383 not setting count and/or reply_len properly [ 384.382413][ T31] audit: type=1326 audit(1768733603.962:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 384.558568][ T31] audit: type=1326 audit(1768733603.982:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 384.690103][ T31] audit: type=1326 audit(1768733603.982:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 387.024958][ T24] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 387.180523][ T24] usb 9-1: no configurations [ 387.196463][ T24] usb 9-1: can't read configurations, error -22 [ 387.369920][ T24] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 387.425303][ T30] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 387.597411][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.392'. [ 387.665536][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 387.671572][ T24] usb 9-1: no configurations [ 387.681423][ T24] usb 9-1: can't read configurations, error -22 [ 387.757184][ T30] usb 8-1: config 5 has an invalid interface number: 168 but max is 0 [ 387.766252][ T24] usb usb9-port1: attempt power cycle [ 387.796585][ T30] usb 8-1: config 5 has no interface number 0 [ 387.846780][ T30] usb 8-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 387.905143][ T30] usb 8-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 387.934685][ T30] usb 8-1: config 5 interface 168 has no altsetting 0 [ 387.955963][ T30] usb 8-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 387.981098][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.017498][ T30] usb 8-1: Product: syz [ 388.039113][ T30] usb 8-1: Manufacturer: syz [ 388.064031][ T30] usb 8-1: SerialNumber: syz [ 388.092919][ T8175] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 388.195167][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 388.216583][ T24] usb 9-1: no configurations [ 388.221290][ T24] usb 9-1: can't read configurations, error -22 [ 388.466175][ T24] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 388.595641][ T24] usb 9-1: no configurations [ 388.619948][ T24] usb 9-1: can't read configurations, error -22 [ 388.662012][ T24] usb usb9-port1: unable to enumerate USB device [ 391.663028][ T30] pn533_usb 8-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 391.791859][ T30] usb 8-1: USB disconnect, device number 8 [ 392.414963][ T5840] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 392.637849][ T5840] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 392.648047][ T5840] usb 4-1: config 0 has no interface number 0 [ 392.819248][ T5840] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.978899][ T5840] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 393.054911][ T5840] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 393.074989][ T5840] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 393.105325][ T5840] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 393.120925][ T5840] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 393.148244][ T5840] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 393.221267][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.301389][ T5840] usb 4-1: config 0 descriptor?? [ 393.322969][ T8202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.330769][ T8202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.406148][ T5840] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 394.591077][ T8217] loop0: detected capacity change from 0 to 1024 [ 394.733602][ T8217] hfsplus: xattr searching failed [ 395.662304][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 395.662330][ T31] audit: type=1804 audit(1768733617.032:655): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.398" name="/newroot/74/bus/bus" dev="overlay" ino=456 res=1 errno=0 [ 396.109277][ T31] audit: type=1804 audit(1768733617.052:656): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.398" name="/newroot/74/bus/bus" dev="overlay" ino=456 res=1 errno=0 [ 396.677436][ T24] usb 4-1: USB disconnect, device number 7 [ 397.086114][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 397.440279][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.9.401'. [ 397.835641][ T8239] syz_tun: entered allmulticast mode [ 398.327311][ T8239] dvmrp6: entered allmulticast mode [ 398.796228][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 399.173828][ T8253] loop4: detected capacity change from 0 to 256 [ 399.586332][ T8259] affs: No valid root block on device nullb0 [ 400.481324][ T8253] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 400.765221][ T7205] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 400.946309][ T7205] usb 4-1: no configurations [ 400.966505][ T7205] usb 4-1: can't read configurations, error -22 [ 401.105006][ T7205] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 401.300171][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 401.316114][ T7205] usb 4-1: no configurations [ 401.326927][ T7205] usb 4-1: can't read configurations, error -22 [ 401.375464][ T7205] usb usb4-port1: attempt power cycle [ 401.676038][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 401.721635][ T5815] usb 1-1: config 5 has an invalid interface number: 168 but max is 0 [ 401.755056][ T7205] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 401.794966][ T5815] usb 1-1: config 5 has no interface number 0 [ 401.830855][ T5815] usb 1-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 401.878889][ T7205] usb 4-1: no configurations [ 401.883587][ T7205] usb 4-1: can't read configurations, error -22 [ 401.965042][ T5815] usb 1-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.984826][ T8286] loop9: detected capacity change from 0 to 1024 [ 401.984990][ T5815] usb 1-1: config 5 interface 168 has no altsetting 0 [ 402.011696][ T5815] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 402.145059][ T7205] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 402.245107][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.265104][ T5815] usb 1-1: Product: syz [ 402.269306][ T5815] usb 1-1: Manufacturer: syz [ 402.274063][ T5815] usb 1-1: SerialNumber: syz [ 402.321098][ T8269] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 402.336294][ T7205] usb 4-1: no configurations [ 402.340998][ T7205] usb 4-1: can't read configurations, error -22 [ 402.435617][ T7205] usb usb4-port1: unable to enumerate USB device [ 402.525648][ T8286] hfsplus: xattr searching failed [ 402.778688][ T8293] netlink: 'syz.7.410': attribute type 4 has an invalid length. [ 402.994020][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 403.035778][ T8297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.043035][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 403.050337][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 403.057578][ T8297] IPv6: NLM_F_CREATE should be set when creating new route [ 403.078330][ T8293] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.141266][ T5815] pn533_usb 1-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 403.206197][ T5815] usb 1-1: USB disconnect, device number 6 [ 403.427338][ T8299] loop9: detected capacity change from 0 to 1024 [ 403.590598][ T8299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.585942][ T8312] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 404.685066][ T31] audit: type=1800 audit(1768733626.052:657): pid=8311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.413" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 404.948970][ T7616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.724959][ T31] audit: type=1800 audit(1768733628.052:658): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.418" name="bus" dev="overlay" ino=486 res=0 errno=0 [ 408.116852][ T8350] program syz.7.421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 408.819161][ T8357] fuse: Bad value for 'fd' [ 409.039281][ T8357] ipip0: entered promiscuous mode [ 409.045609][ T8357] ipip0: entered allmulticast mode [ 410.175967][ T30] IPVS: starting estimator thread 0... [ 410.515180][ T8368] IPVS: using max 23 ests per chain, 55200 per kthread [ 411.121189][ T8377] siw: device registration error -23 [ 411.415101][ T6474] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 413.645706][ T6474] usb 4-1: no configurations [ 413.711646][ T6474] usb 4-1: can't read configurations, error -22 [ 413.944997][ T6474] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 414.140242][ T6474] usb 4-1: device descriptor read/all, error -71 [ 414.205445][ T6474] usb usb4-port1: attempt power cycle [ 414.754987][ T5967] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 414.955386][ T5967] usb 5-1: Using ep0 maxpacket: 8 [ 415.111831][ T5967] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 415.284831][ T5967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 415.337322][ T5967] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 415.419566][ T5967] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 415.554659][ T5967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.615228][ T5967] usb 5-1: Product: syz [ 415.619476][ T5967] usb 5-1: Manufacturer: syz [ 415.624065][ T5967] usb 5-1: SerialNumber: syz [ 415.897357][ T5967] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 415.928488][ T5967] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 416.053989][ T5967] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 417.069809][ T8424] netlink: 'syz.0.435': attribute type 4 has an invalid length. [ 417.651792][ T5840] usb 5-1: USB disconnect, device number 6 [ 418.865317][ T5915] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 419.085274][ T5915] usb 8-1: Using ep0 maxpacket: 16 [ 419.243780][ T5915] usb 8-1: config 0 has no interfaces? [ 419.366285][ T5915] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 419.439753][ T5915] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 419.534636][ T8452] kAFS: unable to lookup cell '(,c¾Ì' [ 419.586320][ T5915] usb 8-1: Manufacturer: syz [ 419.642335][ T5915] usb 8-1: config 0 descriptor?? [ 420.356233][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 422.224669][ T5929] usb 8-1: USB disconnect, device number 9 [ 422.443846][ T8475] loop8: detected capacity change from 0 to 1024 [ 422.904951][ T5929] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 423.112490][ T8475] hfsplus: xattr searching failed [ 423.247343][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.308965][ T5929] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 423.407747][ T5929] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 423.465032][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.474963][ T5929] usb 8-1: Product: syz [ 423.480002][ T5929] usb 8-1: Manufacturer: syz [ 423.529474][ T5929] usb 8-1: SerialNumber: syz [ 423.584205][ T5929] usb 8-1: config 0 descriptor?? [ 424.116710][ T5929] usb 8-1: USB disconnect, device number 10 [ 424.985947][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.3.446'. [ 425.054673][ T8501] netlink: 40 bytes leftover after parsing attributes in process `syz.7.447'. [ 425.446321][ T8500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 425.453628][ T8500] IPv6: NLM_F_CREATE should be set when creating new route [ 425.461079][ T8500] IPv6: NLM_F_CREATE should be set when creating new route [ 425.468368][ T8500] IPv6: NLM_F_CREATE should be set when creating new route [ 425.733101][ T8508] lo speed is unknown, defaulting to 1000 [ 429.355113][ T5850] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 431.021299][ T6848] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 431.537222][ T6848] usb 1-1: Using ep0 maxpacket: 16 [ 431.869640][ T6848] usb 1-1: config 0 has no interfaces? [ 431.889095][ T6848] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 431.940873][ T6848] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 431.963723][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.457'. [ 431.983075][ T6848] usb 1-1: Manufacturer: syz [ 432.004531][ T6848] usb 1-1: config 0 descriptor?? [ 432.248788][ T8553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.300666][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 432.607131][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 432.660424][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 432.690630][ T24] usb 8-1: config 241 has an invalid interface number: 213 but max is 0 [ 432.724954][ T24] usb 8-1: config 241 has no interface number 0 [ 432.741513][ T24] usb 8-1: config 241 interface 213 has no altsetting 0 [ 432.775754][ T24] usb 8-1: New USB device found, idVendor=0008, idProduct=3090, bcdDevice=15.61 [ 432.813719][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.858362][ T24] usb 8-1: Product: syz [ 432.882259][ T24] usb 8-1: Manufacturer: syz [ 432.891201][ T24] usb 8-1: SerialNumber: syz [ 433.200002][ T24] uvcvideo 8-1:241.213: Found UVC 0.00 device syz (0008:3090) [ 433.239205][ T24] uvcvideo 8-1:241.213: No valid video chain found. [ 433.376294][ T24] usb 8-1: USB disconnect, device number 11 [ 433.491764][ T8561] loop8: detected capacity change from 0 to 256 [ 433.624706][ T8559] tipc: Started in network mode [ 433.629838][ T8559] tipc: Node identity fa2dd3e25ec5, cluster identity 4711 [ 433.756455][ T8559] tipc: Enabled bearer , priority 0 [ 433.976192][ T8559] tipc: Resetting bearer [ 434.034953][ T24] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 434.167939][ T788] usb 1-1: USB disconnect, device number 7 [ 434.174694][ T8558] tipc: Disabling bearer [ 434.216477][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.249284][ T24] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 434.286921][ T24] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 434.334915][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.342946][ T24] usb 9-1: Product: syz [ 434.381363][ T24] usb 9-1: Manufacturer: syz [ 434.387958][ T24] usb 9-1: SerialNumber: syz [ 434.432021][ T24] usb 9-1: config 0 descriptor?? [ 434.687684][ T24] usb 9-1: USB disconnect, device number 6 [ 435.177646][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'. [ 435.574952][ T788] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 435.962107][ T788] usb 5-1: config 0 has no interfaces? [ 435.969682][ T788] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 436.043518][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.105830][ T788] usb 5-1: config 0 descriptor?? [ 436.376615][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.395456][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.406280][ T788] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 436.614984][ T788] usb 9-1: Using ep0 maxpacket: 8 [ 436.676579][ T788] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 436.757887][ T788] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 436.974939][ T788] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 437.104675][ T788] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 437.124964][ T788] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.144936][ T788] usb 9-1: Product: syz [ 437.149132][ T788] usb 9-1: Manufacturer: syz [ 437.153712][ T788] usb 9-1: SerialNumber: syz [ 437.277246][ T788] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 437.362530][ T788] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 437.425457][ T788] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 438.545221][ T5967] usb 9-1: USB disconnect, device number 7 [ 438.849860][ T31] audit: type=1326 audit(1768733660.242:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 438.897087][ T31] audit: type=1326 audit(1768733660.302:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.061758][ T8610] geneve2: entered promiscuous mode [ 439.068044][ T8610] geneve2: entered allmulticast mode [ 439.073407][ T31] audit: type=1326 audit(1768733660.302:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.191792][ T31] audit: type=1326 audit(1768733660.302:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.246069][ T31] audit: type=1326 audit(1768733660.302:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.416234][ T5967] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 439.428504][ T31] audit: type=1326 audit(1768733660.302:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.501580][ T31] audit: type=1326 audit(1768733660.302:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.570068][ T5967] usb 1-1: device descriptor read/64, error -71 [ 439.624530][ T31] audit: type=1326 audit(1768733660.302:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.650808][ T788] usb 5-1: USB disconnect, device number 7 [ 439.715135][ T31] audit: type=1326 audit(1768733660.302:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.834196][ T31] audit: type=1326 audit(1768733660.302:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.3.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 439.859812][ T5967] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 440.099532][ T5967] usb 1-1: device descriptor read/64, error -71 [ 440.286454][ T5967] usb usb1-port1: attempt power cycle [ 440.755937][ T5967] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 440.794965][ T5840] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 440.820660][ T5967] usb 1-1: device descriptor read/8, error -71 [ 440.984991][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 441.056375][ T5840] usb 4-1: config 0 has no interfaces? [ 441.083310][ T5840] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.135043][ T5967] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 441.306901][ T5840] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.415338][ T5967] usb 1-1: device descriptor read/8, error -71 [ 441.425201][ T5840] usb 4-1: Manufacturer: syz [ 441.472842][ T5840] usb 4-1: config 0 descriptor?? [ 441.592904][ T5967] usb usb1-port1: unable to enumerate USB device [ 443.404981][ T5840] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 444.356871][ T5840] usb 8-1: config 0 has no interfaces? [ 444.362397][ T5840] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 444.432549][ T5840] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.450118][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.469135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.540393][ T5840] usb 8-1: config 0 descriptor?? [ 445.118125][ T8638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.132677][ T5840] usb 4-1: USB disconnect, device number 15 [ 445.196212][ T8638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.524917][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 446.734571][ T5850] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 447.618133][ T8663] netlink: 'syz.3.485': attribute type 4 has an invalid length. [ 447.673753][ T8663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.973718][ T8665] loop9: detected capacity change from 0 to 512 [ 448.196305][ T8665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.245181][ T8665] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.369135][ T8665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.313184][ T5840] usb 8-1: USB disconnect, device number 12 [ 449.467337][ T8679] netlink: 'syz.9.489': attribute type 4 has an invalid length. [ 449.499741][ T8679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 452.021891][ T8682] loop7: detected capacity change from 0 to 32768 [ 453.139614][ T8682] ERROR: (device loop7): diRead: i_ino != di_number [ 453.139614][ T8682] [ 454.224963][ T788] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 454.558011][ T8699] geneve2: entered promiscuous mode [ 454.563262][ T8699] geneve2: entered allmulticast mode [ 454.734372][ T788] usb 9-1: Using ep0 maxpacket: 16 [ 454.819973][ T788] usb 9-1: config 0 has no interfaces? [ 454.863083][ T788] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 454.994022][ T788] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 455.046353][ T788] usb 9-1: Manufacturer: syz [ 455.085890][ T788] usb 9-1: config 0 descriptor?? [ 457.473329][ T8705] loop9: detected capacity change from 0 to 32768 [ 457.531820][ T8705] ERROR: (device loop9): diRead: i_ino != di_number [ 457.531820][ T8705] [ 460.214969][ T7205] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 460.275412][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 460.275453][ T31] audit: type=1326 audit(1768733680.202:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 460.344163][ T31] audit: type=1326 audit(1768733680.202:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 460.406349][ T31] audit: type=1326 audit(1768733680.212:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 460.464989][ T5840] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 460.507205][ T31] audit: type=1326 audit(1768733680.212:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 460.824969][ T31] audit: type=1326 audit(1768733680.212:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 460.826653][ T5840] usb 5-1: config 0 has no interfaces? [ 460.995187][ T31] audit: type=1326 audit(1768733680.232:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 461.082770][ T5840] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 461.121317][ T31] audit: type=1326 audit(1768733680.232:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 461.234967][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.249976][ T31] audit: type=1326 audit(1768733680.232:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 461.304736][ T5840] usb 5-1: config 0 descriptor?? [ 461.377936][ T31] audit: type=1326 audit(1768733680.242:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 461.382078][ T5915] usb 9-1: USB disconnect, device number 8 [ 461.415067][ T31] audit: type=1326 audit(1768733680.242:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.0.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d88b8f749 code=0x7ffc0000 [ 462.097601][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.115279][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.287603][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 464.618642][ T8743] blktrace: Concurrent blktraces are not allowed on loop5 [ 464.855777][ T5915] usb 5-1: USB disconnect, device number 8 [ 467.099556][ T5839] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 468.936068][ T8766] program syz.3.514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 469.055985][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 469.204966][ T5840] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 469.624936][ T788] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 469.689589][ T5840] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.706315][ T5840] usb 5-1: config 0 has no interfaces? [ 469.711875][ T5840] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 469.722433][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.752660][ T5840] usb 5-1: config 0 descriptor?? [ 469.876416][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.319151][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.578121][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.596336][ T788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 470.641144][ T788] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 470.650716][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.673484][ T788] usb 4-1: Product: syz [ 470.713988][ T788] usb 4-1: Manufacturer: syz [ 470.722583][ T788] usb 4-1: SerialNumber: syz [ 470.832687][ T788] usb 4-1: config 0 descriptor?? [ 471.384989][ T788] usb 4-1: USB disconnect, device number 16 [ 472.518123][ T8787] __vm_enough_memory: pid: 8787, comm: syz.3.520, bytes: 4503599627366400 not enough memory for the allocation [ 474.814977][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 475.026649][ T5915] usb 1-1: config 0 has no interfaces? [ 475.032184][ T5915] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 475.041298][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.054121][ T5915] usb 1-1: config 0 descriptor?? [ 475.223099][ T788] usb 5-1: USB disconnect, device number 9 [ 475.487562][ T8797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.538990][ T8797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.456071][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 476.456093][ T31] audit: type=1800 audit(1768733697.852:718): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.525" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 476.875539][ T8806] netlink: 40 bytes leftover after parsing attributes in process `syz.8.526'. [ 478.417954][ T8817] program syz.3.528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.815723][ T8820] loop7: detected capacity change from 0 to 512 [ 479.008634][ T8820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.096937][ T5815] usb 1-1: USB disconnect, device number 12 [ 479.148341][ T8820] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.169527][ T8827] netdevsim netdevsim3: Direct firmware load for / [ 479.169527][ T8827] failed with error -2 [ 479.191607][ T8827] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 479.191607][ T8827] [ 479.571116][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.529'. [ 480.000989][ T6792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.760217][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.9.523'. [ 481.225041][ T7205] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 481.423121][ T7205] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.447933][ T7205] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 481.502998][ T7205] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 481.679583][ T7205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.687836][ T7205] usb 9-1: Product: syz [ 481.692060][ T7205] usb 9-1: Manufacturer: syz [ 481.823444][ T7205] usb 9-1: SerialNumber: syz [ 481.846031][ T7205] usb 9-1: config 0 descriptor?? [ 482.080021][ T7205] usb 9-1: USB disconnect, device number 9 [ 482.706551][ T8851] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 482.731205][ T8851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 484.809659][ T6025] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 485.080315][ T6025] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.114253][ T6025] usb 4-1: config 0 has no interfaces? [ 487.125057][ T6025] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 487.134274][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.336667][ T6025] usb 4-1: config 0 descriptor?? [ 487.405037][ T6025] usb 4-1: can't set config #0, error -71 [ 487.419322][ T6025] usb 4-1: USB disconnect, device number 17 [ 487.935006][ T5815] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 488.376646][ T5815] usb 10-1: config 0 has no interfaces? [ 488.382238][ T5815] usb 10-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 488.448064][ T5815] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.497148][ T5815] usb 10-1: config 0 descriptor?? [ 488.784444][ T8867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.821974][ T8867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.157963][ T6025] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 489.651793][ T6025] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.020160][ T6025] usb 4-1: config 0 has no interfaces? [ 490.029269][ T6025] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 490.040828][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.235226][ T6025] usb 4-1: config 0 descriptor?? [ 490.809282][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.842629][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.400021][ T5967] usb 4-1: USB disconnect, device number 18 [ 493.243455][ T31] audit: type=1326 audit(1768733714.562:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.301747][ T31] audit: type=1326 audit(1768733714.562:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.437178][ T31] audit: type=1326 audit(1768733714.562:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.463838][ T31] audit: type=1326 audit(1768733714.562:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.504922][ T31] audit: type=1326 audit(1768733714.562:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.606070][ T31] audit: type=1326 audit(1768733714.562:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.645131][ T31] audit: type=1326 audit(1768733714.562:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.671609][ T31] audit: type=1326 audit(1768733714.562:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 493.732702][ T6025] usb 10-1: USB disconnect, device number 2 [ 493.959212][ T31] audit: type=1326 audit(1768733714.562:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 494.254689][ T31] audit: type=1326 audit(1768733714.562:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8900 comm="syz.3.549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 494.942568][ T8927] netlink: 'syz.4.553': attribute type 4 has an invalid length. [ 495.100349][ T8930] loop8: detected capacity change from 0 to 1024 [ 495.165590][ T8931] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.405927][ T8930] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.617460][ T7758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.865297][ T7205] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 499.759810][ T7205] usb 4-1: Using ep0 maxpacket: 16 [ 499.786543][ T7205] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.835035][ T7205] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 500.122789][ T8954] loop7: detected capacity change from 0 to 40427 [ 500.159823][ T8954] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 500.172394][ T8954] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 500.205891][ T8954] F2FS-fs (loop7): invalid crc value [ 500.214963][ T7205] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 500.338806][ T8954] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 500.355658][ T8954] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 500.355709][ T7205] usb 4-1: config 0 interface 0 has no altsetting 0 [ 500.362730][ T8954] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 500.575356][ T7205] usb 4-1: New USB device found, idVendor=1e71, idProduct=2010, bcdDevice= 0.00 [ 500.584731][ T7205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.614725][ T7205] usb 4-1: config 0 descriptor?? [ 501.293575][ T7205] usbhid 4-1:0.0: can't add hid device: -71 [ 501.321178][ T7205] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 501.358295][ T7205] usb 4-1: USB disconnect, device number 19 [ 505.352707][ T8986] loop7: detected capacity change from 0 to 512 [ 505.478417][ T8986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.592444][ T8986] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.698689][ T8986] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.571742][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.578153][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.156467][ T8999] netlink: 'syz.3.572': attribute type 4 has an invalid length. [ 508.769984][ T9004] loop0: detected capacity change from 0 to 512 [ 508.853059][ T9004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.876135][ T9004] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.063401][ T9004] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.031690][ T9020] overlayfs: failed to resolve './file1': -2 [ 510.107932][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 510.109482][ T31] audit: type=1804 audit(1768733731.502:752): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.575" name="/newroot/106/bus/bus" dev="tmpfs" ino=642 res=1 errno=0 [ 511.211812][ T9025] lo speed is unknown, defaulting to 1000 [ 511.474079][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'. [ 514.184166][ T9029] sg_write: data in/out 12582877/14 bytes for SCSI command 0x0-- guessing data in; [ 514.184166][ T9029] program syz.4.571 not setting count and/or reply_len properly [ 514.632124][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.0.583'. [ 514.716387][ T9041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 515.084967][ T5967] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 515.150002][ T31] audit: type=1800 audit(1768733736.562:753): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.585" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 515.314912][ T5967] usb 8-1: Using ep0 maxpacket: 16 [ 515.347836][ T5967] usb 8-1: config 0 has no interfaces? [ 515.365894][ T5967] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 515.416611][ T5967] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 515.424724][ T5967] usb 8-1: Manufacturer: syz [ 515.465902][ T5967] usb 8-1: config 0 descriptor?? [ 517.635724][ T9071] fuse: Unknown parameter 'use00000000000000000000' [ 517.699675][ T9072] loop9: detected capacity change from 0 to 512 [ 517.989468][ T9072] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.042862][ T9072] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.479248][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.9.588'. [ 518.999261][ T7616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.353779][ T9079] loop3: detected capacity change from 0 to 256 [ 519.533716][ T9079] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 519.633537][ T9085] netlink: 'syz.9.589': attribute type 4 has an invalid length. [ 519.725163][ T5966] usb 8-1: USB disconnect, device number 14 [ 523.975174][ T31] audit: type=1804 audit(1768733745.002:754): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.594" name="/newroot/38/bus/bus" dev="overlay" ino=232 res=1 errno=0 [ 524.095970][ T31] audit: type=1804 audit(1768733745.022:755): pid=9101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.594" name="/newroot/38/bus/bus" dev="overlay" ino=232 res=1 errno=0 [ 524.794980][ T7205] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 525.014960][ T7205] usb 10-1: Using ep0 maxpacket: 16 [ 525.032255][ T7205] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 525.154972][ T7205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 525.247098][ T7205] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.258514][ T7205] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.305154][ T7205] usb 10-1: Product: syz [ 525.315252][ T7205] usb 10-1: Manufacturer: syz [ 525.325311][ T7205] usb 10-1: SerialNumber: syz [ 525.574732][ T7205] usb 10-1: config 0 descriptor?? [ 525.610053][ T7205] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 525.623983][ T7205] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 526.384728][ T7205] em28xx 10-1:0.0: chip ID is em2874 [ 527.327714][ T5966] usb 10-1: USB disconnect, device number 3 [ 527.407656][ T5966] em28xx 10-1:0.0: Disconnecting em28xx [ 527.629392][ T5966] em28xx 10-1:0.0: Freeing device [ 528.124178][ T9126] loop0: detected capacity change from 0 to 512 [ 528.755580][ T9126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.768887][ T9126] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 529.680015][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.009737][ T9145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.239107][ T5839] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 532.848177][ T9165] netlink: 'syz.4.607': attribute type 4 has an invalid length. [ 532.866316][ T31] audit: type=1800 audit(1768733754.242:756): pid=9164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.608" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 533.210213][ T9168] loop8: detected capacity change from 0 to 2048 [ 533.270878][ T9168] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.141548][ T31] audit: type=1804 audit(1768733756.532:757): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.612" name="/newroot/39/bus" dev="tmpfs" ino=241 res=1 errno=0 [ 537.213975][ T9192] netdevsim netdevsim0: Direct firmware load for / [ 537.213975][ T9192] failed with error -2 [ 537.225624][ T9192] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 537.225624][ T9192] [ 539.555637][ T9205] overlayfs: failed to resolve './file1': -2 [ 539.678705][ T31] audit: type=1804 audit(1768733761.042:758): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.616" name="/newroot/40/bus/bus" dev="tmpfs" ino=249 res=1 errno=0 [ 540.427111][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 540.705900][ T9211] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 541.296724][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 542.109828][ T9232] loop8: detected capacity change from 0 to 1024 [ 542.185773][ T9232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.959602][ T9237] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 542.960131][ T31] audit: type=1800 audit(1768733764.372:759): pid=9232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.625" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 543.396179][ T7758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.975519][ T5915] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 544.295652][ T5915] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.365089][ T5915] usb 9-1: config 0 has no interfaces? [ 544.370623][ T5915] usb 9-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 544.449400][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.542117][ T9251] netdevsim netdevsim0: Direct firmware load for / [ 544.542117][ T9251] failed with error -2 [ 544.611511][ T9251] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 544.611511][ T9251] [ 544.642506][ T31] audit: type=1804 audit(1768733765.992:760): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.628" name="/newroot/103/bus" dev="tmpfs" ino=622 res=1 errno=0 [ 544.689183][ T5915] usb 9-1: config 0 descriptor?? [ 545.077630][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.111801][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.505615][ T9260] netlink: 'syz.7.629': attribute type 4 has an invalid length. [ 547.365469][ T788] usb 9-1: USB disconnect, device number 10 [ 547.890312][ T9266] tipc: Enabled bearer , priority 0 [ 547.913470][ T9266] syzkaller0: entered promiscuous mode [ 547.925089][ T9266] syzkaller0: entered allmulticast mode [ 548.040060][ T9265] tipc: Resetting bearer [ 548.229984][ T9265] tipc: Disabling bearer [ 548.258518][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 548.688806][ T9276] loop3: detected capacity change from 0 to 256 [ 548.841586][ T9276] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 548.886054][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 549.915044][ T5815] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 549.916405][ T9288] loop3: detected capacity change from 0 to 8192 [ 550.078144][ T5815] usb 5-1: config 0 has no interfaces? [ 550.083987][ T5815] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 550.109603][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.152091][ T5815] usb 5-1: config 0 descriptor?? [ 550.157340][ T788] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 550.354505][ T788] usb 8-1: Using ep0 maxpacket: 16 [ 550.371094][ T788] usb 8-1: config 0 has no interfaces? [ 550.382026][ T788] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.417421][ T9291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.435206][ T788] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.459110][ T9291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.507802][ T788] usb 8-1: Manufacturer: syz [ 550.613347][ T788] usb 8-1: config 0 descriptor?? [ 551.665750][ T9307] loop8: detected capacity change from 0 to 1764 [ 553.686912][ T31] audit: type=1326 audit(1768733774.082:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 553.747670][ T9314] binder_alloc: 9306: binder_alloc_buf, no vma [ 553.859736][ T31] audit: type=1326 audit(1768733774.082:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 554.210048][ T31] audit: type=1326 audit(1768733774.092:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 554.375096][ T31] audit: type=1326 audit(1768733774.092:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 554.718593][ T31] audit: type=1326 audit(1768733774.092:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 554.926694][ T31] audit: type=1326 audit(1768733774.102:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 554.952035][ T5840] usb 5-1: USB disconnect, device number 10 [ 555.242433][ T9318] tipc: Started in network mode [ 555.265182][ T9318] tipc: Node identity 3253778e9ac6, cluster identity 4711 [ 555.305411][ T9318] tipc: Enabled bearer , priority 0 [ 555.333883][ T9321] syzkaller0: entered promiscuous mode [ 555.376068][ T9321] syzkaller0: entered allmulticast mode [ 555.425001][ T31] audit: type=1326 audit(1768733774.102:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 555.455442][ T9318] tipc: Resetting bearer [ 555.507730][ T9317] tipc: Resetting bearer [ 555.544961][ T5815] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 555.554978][ T31] audit: type=1326 audit(1768733774.102:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 555.642760][ T5840] usb 8-1: USB disconnect, device number 15 [ 555.657996][ T31] audit: type=1326 audit(1768733774.112:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 555.734951][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 555.763536][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.800656][ T5815] usb 1-1: config 0 has no interfaces? [ 555.825614][ T31] audit: type=1326 audit(1768733774.112:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.3.643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e2438f749 code=0x7ffc0000 [ 555.854113][ T5815] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 555.889055][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.917013][ T5815] usb 1-1: Product: syz [ 555.932171][ T5815] usb 1-1: Manufacturer: syz [ 555.974995][ T5815] usb 1-1: SerialNumber: syz [ 556.006746][ T9317] tipc: Disabling bearer [ 556.014590][ T5815] usb 1-1: config 0 descriptor?? [ 557.255071][ T5815] tipc: Node number set to 2828367758 [ 557.973655][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 558.315275][ T7205] usb 1-1: USB disconnect, device number 13 [ 560.105189][ T7205] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 560.275030][ T7205] usb 1-1: Using ep0 maxpacket: 16 [ 560.282359][ T7205] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.344750][ T9355] loop8: detected capacity change from 0 to 1024 [ 560.378424][ T7205] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 560.476759][ T7205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.519605][ T9355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.565256][ T7205] usb 1-1: Product: syz [ 560.569445][ T7205] usb 1-1: Manufacturer: syz [ 560.574022][ T7205] usb 1-1: SerialNumber: syz [ 560.671136][ T7205] usb 1-1: config 0 descriptor?? [ 561.606637][ T7205] usb 1-1: USB disconnect, device number 14 [ 561.725208][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 561.725225][ T31] audit: type=1800 audit(1768733783.022:796): pid=9361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.654" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 561.862998][ T7758] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.158923][ T7205] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 562.384976][ T7205] usb 10-1: device descriptor read/64, error -71 [ 562.684070][ T9372] loop7: detected capacity change from 0 to 1024 [ 562.694959][ T7205] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 562.885014][ T7205] usb 10-1: device descriptor read/64, error -71 [ 563.019144][ T7205] usb usb10-port1: attempt power cycle [ 563.067256][ T5815] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 563.103961][ T9372] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.227113][ T5815] usb 5-1: config 0 has no interfaces? [ 563.232759][ T5815] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 563.242556][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.257723][ T5815] usb 5-1: config 0 descriptor?? [ 563.454993][ T7205] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 563.496703][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.510200][ T7205] usb 10-1: device descriptor read/8, error -71 [ 563.522295][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.765324][ T7205] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 563.835058][ T7205] usb 10-1: device descriptor read/8, error -71 [ 563.880293][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 564.065357][ T7205] usb usb10-port1: unable to enumerate USB device [ 564.082260][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 564.142821][ T9381] ceph: No mds server is up or the cluster is laggy [ 564.406902][ T5815] libceph: connect (1)[c::]:6789 error -101 [ 564.413379][ T5815] libceph: mon0 (1)[c::]:6789 connect error [ 565.034981][ T7205] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 565.245390][ T7205] usb 4-1: Using ep0 maxpacket: 16 [ 565.310727][ T7205] usb 4-1: config 0 has no interfaces? [ 565.401323][ T7205] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 565.439835][ T7205] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 565.469543][ T7205] usb 4-1: Manufacturer: syz [ 565.745195][ T7205] usb 4-1: config 0 descriptor?? [ 565.912590][ T31] audit: type=1800 audit(1768733787.312:797): pid=9379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.659" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 566.323803][ T5815] usb 5-1: USB disconnect, device number 11 [ 566.727026][ T9405] __vm_enough_memory: pid: 9405, comm: syz.4.663, bytes: 4503599627366400 not enough memory for the allocation [ 567.415429][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.440630][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.551679][ T6792] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.046198][ T9415] loop7: detected capacity change from 0 to 32768 [ 569.164969][ T9415] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 569.248716][ T9415] XFS (loop7): Ending clean mount [ 569.950517][ T6792] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 570.375351][ T9433] __vm_enough_memory: pid: 9433, comm: syz.0.670, bytes: 4503599627366400 not enough memory for the allocation [ 570.631787][ T9435] loop9: detected capacity change from 0 to 1764 [ 570.746944][ T9437] binder_alloc: 9434: binder_alloc_buf, no vma [ 571.157563][ T5840] usb 4-1: USB disconnect, device number 20 [ 572.946386][ T9447] kAFS: unable to lookup cell 'ÿ' [ 573.165869][ T9451] kAFS: unable to lookup cell '(,c¾Ì' [ 574.335021][ T5840] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 574.335229][ T5915] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 574.464332][ T9460] __vm_enough_memory: pid: 9460, comm: syz.9.676, bytes: 4503599627366400 not enough memory for the allocation [ 574.485308][ T5840] usb 1-1: device descriptor read/64, error -71 [ 574.505099][ T5915] usb 4-1: device descriptor read/64, error -71 [ 574.745845][ T5840] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 574.808196][ T5915] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 574.925477][ T5840] usb 1-1: device descriptor read/64, error -71 [ 574.945019][ T5915] usb 4-1: device descriptor read/64, error -71 [ 575.035356][ T5840] usb usb1-port1: attempt power cycle [ 575.055019][ T7205] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 575.068089][ T5915] usb usb4-port1: attempt power cycle [ 576.289807][ T7205] usb 9-1: Using ep0 maxpacket: 32 [ 576.305647][ T7205] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 576.345019][ T5915] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 576.943699][ T5840] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 576.989796][ T5840] usb 1-1: device descriptor read/8, error -71 [ 577.015278][ T7205] usb 9-1: config 0 has no interface number 0 [ 577.024985][ T7205] usb 9-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 577.047961][ T5915] usb 4-1: device descriptor read/8, error -71 [ 577.059031][ T7205] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 577.068442][ T7205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.076537][ T7205] usb 9-1: Product: syz [ 577.081662][ T7205] usb 9-1: Manufacturer: syz [ 577.086284][ T7205] usb 9-1: SerialNumber: syz [ 577.103260][ T7205] usb 9-1: config 0 descriptor?? [ 577.120577][ T7205] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 577.340195][ T7205] usb 9-1: qt2_setup_urbs - submit read urb failed -8 [ 577.397953][ T31] audit: type=1800 audit(1768733798.812:798): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.683" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 577.626700][ T7205] quatech2 9-1:0.51: probe with driver quatech2 failed with error -8 [ 577.663380][ T7205] usb 9-1: USB disconnect, device number 11 [ 578.385815][ T5815] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 578.619150][ T5815] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 578.629987][ T5815] usb 5-1: config 0 has no interface number 0 [ 578.777809][ T9491] netlink: 24 bytes leftover after parsing attributes in process `syz.9.685'. [ 578.804970][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 578.829465][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 578.990821][ T9491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.998140][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 579.005424][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 579.012739][ T9491] IPv6: NLM_F_CREATE should be set when creating new route [ 579.026836][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.052457][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 579.478533][ T5815] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 579.907192][ T9500] netlink: 64 bytes leftover after parsing attributes in process `syz.8.686'. [ 579.919345][ T5815] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.942940][ T5815] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 580.042252][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.107854][ T5815] usb 5-1: config 0 descriptor?? [ 580.271870][ T9503] tipc: Started in network mode [ 580.278753][ T9503] tipc: Node identity 96f4c258eeb, cluster identity 4711 [ 580.315377][ T9503] tipc: Enabled bearer , priority 0 [ 580.362945][ T9505] syzkaller0: entered promiscuous mode [ 580.404990][ T9505] syzkaller0: entered allmulticast mode [ 580.575753][ T9502] tipc: Resetting bearer [ 581.016653][ T9502] tipc: Disabling bearer [ 581.325117][ T31] audit: type=1326 audit(1768733802.732:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 581.402847][ T31] audit: type=1326 audit(1768733802.742:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 581.574164][ T31] audit: type=1326 audit(1768733802.742:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 581.751226][ T31] audit: type=1326 audit(1768733802.742:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 581.971746][ T31] audit: type=1326 audit(1768733802.742:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 582.326347][ T31] audit: type=1326 audit(1768733802.742:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 582.529988][ T31] audit: type=1326 audit(1768733802.742:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 584.673696][ T31] audit: type=1326 audit(1768733802.742:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 584.696442][ T31] audit: type=1326 audit(1768733802.742:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 584.962533][ T31] audit: type=1326 audit(1768733802.742:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.019443][ T5815] usb 5-1: can't set config #0, error -71 [ 585.041595][ T5815] usb 5-1: USB disconnect, device number 12 [ 585.115448][ T31] audit: type=1326 audit(1768733802.742:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.235021][ T31] audit: type=1326 audit(1768733802.752:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.300104][ T31] audit: type=1326 audit(1768733802.752:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.400308][ T31] audit: type=1326 audit(1768733802.752:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.483550][ T31] audit: type=1326 audit(1768733802.752:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.629973][ T5815] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 585.662877][ T31] audit: type=1326 audit(1768733802.752:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9506 comm="syz.8.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3350d8f749 code=0x7ffc0000 [ 585.788462][ T9534] __vm_enough_memory: pid: 9534, comm: syz.3.694, bytes: 4503599627366400 not enough memory for the allocation [ 585.820456][ T5815] usb 5-1: device descriptor read/64, error -71 [ 586.125226][ T5815] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 586.278377][ T5815] usb 5-1: device descriptor read/64, error -71 [ 586.394987][ T6848] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 586.395518][ T5815] usb usb5-port1: attempt power cycle [ 586.525269][ T6848] usb 10-1: device descriptor read/64, error -71 [ 586.771054][ T6848] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 586.804963][ T5815] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 587.058123][ T5815] usb 5-1: device descriptor read/8, error -71 [ 587.095005][ T6848] usb 10-1: device descriptor read/64, error -71 [ 587.164532][ T9544] trusted_key: encrypted_key: insufficient parameters specified [ 587.218736][ T6848] usb usb10-port1: attempt power cycle [ 587.985019][ T5815] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 588.025741][ T5815] usb 5-1: device descriptor read/8, error -71 [ 588.139261][ T5815] usb usb5-port1: unable to enumerate USB device [ 588.235106][ T5840] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 588.305392][ T6848] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 588.345720][ T6848] usb 10-1: device descriptor read/8, error -71 [ 588.415084][ T5840] usb 9-1: Using ep0 maxpacket: 16 [ 588.437697][ T5840] usb 9-1: config 0 has no interfaces? [ 588.457462][ T5840] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 588.467444][ T5840] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 588.497064][ T5840] usb 9-1: Manufacturer: syz [ 588.520638][ T5840] usb 9-1: config 0 descriptor?? [ 588.596062][ T6848] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 588.690193][ T6848] usb 10-1: device descriptor read/8, error -71 [ 588.916105][ T6848] usb usb10-port1: unable to enumerate USB device [ 589.117045][ T9569] Driver unsupported XDP return value 0 on prog (id 74) dev N/A, expect packet loss! [ 589.788777][ T9585] lo speed is unknown, defaulting to 1000 [ 590.057135][ T9594] wg2: entered promiscuous mode [ 590.098649][ T9594] wg2: entered allmulticast mode [ 590.210768][ T9604] pim6reg1: entered promiscuous mode [ 590.236144][ T9604] pim6reg1: entered allmulticast mode [ 591.160181][ T6848] usb 9-1: USB disconnect, device number 12 [ 591.855123][ T9643] pim6reg1: entered promiscuous mode [ 591.875027][ T9643] pim6reg1: entered allmulticast mode [ 592.342461][ T9664] sit0: entered allmulticast mode [ 592.403589][ T9664] sit0: entered promiscuous mode [ 593.234191][ T9679] lo speed is unknown, defaulting to 1000 [ 594.898470][ T9720] pim6reg1: entered promiscuous mode [ 594.903810][ T9720] pim6reg1: entered allmulticast mode [ 596.203895][ T9778] pim6reg1: entered promiscuous mode [ 596.217047][ T9778] pim6reg1: entered allmulticast mode [ 596.522080][ T9783] pim6reg1: entered promiscuous mode [ 596.550212][ T9783] pim6reg1: entered allmulticast mode [ 598.309810][ T9859] [ 598.312261][ T9859] ============================= [ 598.317243][ T9859] WARNING: suspicious RCU usage [ 598.322088][ T9859] syzkaller #0 Not tainted [ 598.326582][ T9859] ----------------------------- [ 598.331439][ T9859] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 598.339990][ T9859] [ 598.339990][ T9859] other info that might help us debug this: [ 598.339990][ T9859] [ 598.350362][ T9859] [ 598.350362][ T9859] rcu_scheduler_active = 2, debug_locks = 1 [ 598.358863][ T9859] 1 lock held by syz.4.823/9859: [ 598.364171][ T9859] #0: ffffffff8df41c80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 598.374557][ T9859] [ 598.374557][ T9859] stack backtrace: [ 598.381055][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.4.823 Not tainted syzkaller #0 PREEMPT(full) [ 598.381085][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.381102][ T9859] Call Trace: [ 598.381111][ T9859] [ 598.381121][ T9859] dump_stack_lvl+0xe8/0x150 [ 598.381159][ T9859] lockdep_rcu_suspicious+0x140/0x1d0 [ 598.381195][ T9859] get_callchain_entry+0x2b6/0x3c0 [ 598.381237][ T9859] get_perf_callchain+0xb3/0x820 [ 598.381281][ T9859] ? __pfx_get_perf_callchain+0x10/0x10 [ 598.381319][ T9859] ? futex_unqueue+0x22/0x240 [ 598.381355][ T9859] ? futex_unqueue+0x22/0x240 [ 598.381376][ T9859] ? futex_unqueue+0x22/0x240 [ 598.381400][ T9859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 598.381434][ T9859] __bpf_get_stack+0x45b/0xaa0 [ 598.381476][ T9859] ? __entry_text_end+0x1020b6/0x1020b9 [ 598.381508][ T9859] ? __pfx___bpf_get_stack+0x10/0x10 [ 598.381547][ T9859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 598.381581][ T9859] ? __lock_acquire+0x6b6/0x2cf0 [ 598.381608][ T9859] bpf_get_stack+0x33/0x50 [ 598.381637][ T9859] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 598.381659][ T9859] bpf_get_stack_raw_tp+0x1a9/0x220 [ 598.381699][ T9859] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 598.381721][ T9859] bpf_prog_run_pin_on_cpu+0x143/0x480 [ 598.381762][ T9859] bpf_prog_test_run_syscall+0x312/0x4b0 [ 598.381798][ T9859] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 598.381831][ T9859] ? __fget_files+0x2a/0x420 [ 598.381867][ T9859] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 598.381902][ T9859] bpf_prog_test_run+0x2c7/0x340 [ 598.381940][ T9859] __sys_bpf+0x562/0x860 [ 598.381974][ T9859] ? __pfx___sys_bpf+0x10/0x10 [ 598.382024][ T9859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 598.382053][ T9859] ? srso_alias_return_thunk+0x5/0xfbef5 [ 598.382080][ T9859] ? rcu_is_watching+0x15/0xb0 [ 598.382117][ T9859] __x64_sys_bpf+0x7c/0x90 [ 598.382146][ T9859] do_syscall_64+0xec/0xf80 [ 598.382173][ T9859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.382194][ T9859] ? trace_irq_disable+0x37/0x100 [ 598.382229][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.382251][ T9859] RIP: 0033:0x7fa3e3b8f749 [ 598.382272][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.382291][ T9859] RSP: 002b:00007fa3e1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.382313][ T9859] RAX: ffffffffffffffda RBX: 00007fa3e3de5fa0 RCX: 00007fa3e3b8f749 [ 598.382330][ T9859] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 598.382344][ T9859] RBP: 00007fa3e3c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 598.382358][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.382372][ T9859] R13: 00007fa3e3de6038 R14: 00007fa3e3de5fa0 R15: 00007ffcbbff9248 [ 598.382406][ T9859]