last executing test programs: 20m33.890683878s ago: executing program 32 (id=4): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)={0x1d}, 0x8) 18m15.293264901s ago: executing program 33 (id=322): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000240)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m11.678420706s ago: executing program 34 (id=490): getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) 15m53.357259803s ago: executing program 1 (id=732): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x2}}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 15m52.29631488s ago: executing program 1 (id=734): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x12) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 15m50.677415727s ago: executing program 1 (id=739): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 15m49.560986423s ago: executing program 1 (id=742): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fd}, 0x94) r6 = fsopen(&(0x7f00000001c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 15m48.395633083s ago: executing program 1 (id=747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) 15m47.351743749s ago: executing program 1 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 15m31.907644061s ago: executing program 35 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 9m5.384245844s ago: executing program 5 (id=1827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r2, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 9m4.81183063s ago: executing program 5 (id=1831): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 9m3.001709605s ago: executing program 5 (id=1834): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x15, 0xfffffb09, @vifc_lcl_ifindex, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_read_part_table(0x5a6, &(0x7f00000007c0)="$eJzs0rtLY2kUAPDvhplNs0OGYcBithiYYBUVYqFFUojEkMaIuGKxtWChhWBhIZFo7eMfUHyB2Ih9SlFBFGIlKSX1giIsqbKod0G32l02+4Dfr8jHd87JPfdyTuB/LRF+brfbUQihnfzz//7xqDBS+jo2ND4RQhR+CiEUfvj+ORPFFb899SS+l+N7KZmt71wOPxx9vPp2c57eS8T5WiKE5RDC7N1+6m2vX968NTw5zp+lVlbni2uL+Znb4lKzf7qn8GW9MLc5sJurTHblpuJVqXVoZV71fxdCaKbrgwfX7fL91ofe9+f1VvYirstEnenPv+v3+7f9udqotka7Dxf6Mp8ap5WNeO6P5g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTYcf4stbI6X1xbzM/cFpea/dM9hS/rhbnNgd1cZbIrN5V4qavF53cd7p+uDx5ct8v3Wx963ydCK3sR12Wiv7kx/wmv5t/1rrjU3P5cbVRbo92HC32ZT43TykY890fzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+oMJI6evY0PhECFEUoufQ/tNPO/mSj+K6k/gsx/FSMlvfuRx+OPp49e3mPL03FsdriRCWQwizd/upf/hT+At+DQAA//87ioLe") 9m1.729589729s ago: executing program 5 (id=1838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 9m1.41895579s ago: executing program 5 (id=1842): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x2, 0xff, 0x904, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYBLOB=',wfdno=']) 9m0.147605362s ago: executing program 5 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) listen(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 8m59.569022309s ago: executing program 36 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0, @ANYBLOB], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18) listen(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 8m33.126789842s ago: executing program 8 (id=1911): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) mkdir(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x0) 8m32.436506597s ago: executing program 8 (id=1913): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x1, 0x9, 0xa, 0x6, 0x5, 0x6, 0x101, 0x5bfb48bf2c6e0c14, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 8m31.944724417s ago: executing program 8 (id=1915): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x105, 0x8a, &(0x7f00000007c0)="177ab0b14ffe9f576a30aefc000000000000003caf1335200dbc763e5f69ab54fca02c6c4fbf082aadc132f28b02e83185865a0a9bcfecdda34e4f8f65e007c0765f83d7e9e76d086881e43ebe8777a24697893127434938f716c4c622f4f8000000000000000000000000cfdc2fa644cd5c9e1b56279858e315ce1ab08be49aac9f319f4d66dfb38841153f3dfdec0d49c3f88f1df597f64f4ca618e77aa19babbeee9b95198d5bae24a28d1342c42e07b75a670d6cac67d16fa72a82cda8de0ca64211a2bafe871ae3b0afec35563b06d644c1b626d28fc8cff3e3aa4f11aed4b0f3da0f9e4e3409ab581a7b00dc804a9716e60b2cd97da62c813f0c770ebdbd44faed4b", &(0x7f00000002c0)=""/138, 0x8, 0x0, 0x0, 0x12e, 0x0, &(0x7f0000000680)="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", 0x3, 0x0, 0x7}, 0x50) 8m31.383240796s ago: executing program 8 (id=1921): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5], 0x18}}], 0x1, 0x0) 8m29.561815734s ago: executing program 8 (id=1926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m27.372268135s ago: executing program 8 (id=1931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) 8m12.308890536s ago: executing program 37 (id=1931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) 2m13.019243853s ago: executing program 9 (id=3577): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) 2m12.624430382s ago: executing program 9 (id=3580): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0xff, 0x0, 0x0, 0x3}}) 2m11.648724655s ago: executing program 9 (id=3582): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m11.533571795s ago: executing program 9 (id=3584): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x36}, 0x18) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf2501000000180001801400020076657468305f746f5f7465616d000001d2342e0db3de70b4f4330b34ecace39471c45f725cfa1de8338bb0535ee396fd06e932bbaba46202c8af84eb8412f6529f162cac02b14556967465b2964555bc2a3234de303188de1e483815b9a208f4a5d07d0c8447a402798a37d714ef8e636ef099a21980d4b6d0fd4532b1623f4746f8f2a11b6b02438addfa011123d87e"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x7, 0xfffc, 0x1, 0x0, 0x5, 0x5}) syz_open_dev$vcsu(&(0x7f0000000180), 0x7, 0x200200) 2m11.189997909s ago: executing program 9 (id=3588): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2000000, 0x3}}, 0x10, 0x0}, 0x4044091) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f00000001c0)='./file0/file0\x00', 0xd931d3864d39ddd8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000000000000000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac0", 0x67, 0x850, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x87}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2m9.358613165s ago: executing program 9 (id=3591): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1m54.211376491s ago: executing program 38 (id=3591): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 10.07098362s ago: executing program 0 (id=4272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000580)={0x2, 0x4, 0x2da4ea94, 0x8, r4}) 8.664759867s ago: executing program 0 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0x9}, 0x18) getuid() 7.259669819s ago: executing program 0 (id=4277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="211a0000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="080002", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) socket(0x2, 0x80805, 0x0) 7.071034782s ago: executing program 4 (id=4279): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 7.031774015s ago: executing program 0 (id=4281): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR='D\n', @TCF_META_TYPE_VAR="10ef6b021511", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="18079cebdf6f78", @TCF_META_TYPE_VAR="a184", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ca169e5833", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0xac}}, 0x0) 6.981847213s ago: executing program 4 (id=4283): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e00)=@newqdisc={0x6c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x4, 0x1000, 0xc51f, 0x2}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x15, 0xb1c, 0x80, 0x1, 0xc, 0x8001}}, {0x4}}]}]}, 0x6c}}, 0x0) 6.817159403s ago: executing program 3 (id=4285): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000010000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 6.784012047s ago: executing program 0 (id=4286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.762118711s ago: executing program 4 (id=4287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000580)={0x2, 0x4, 0x2da4ea94, 0x8, r4}) 6.625987452s ago: executing program 3 (id=4289): write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001b80)="1854", 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff4, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 5.295906087s ago: executing program 7 (id=4291): r0 = socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb51, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f0000000c00)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c2867f490000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a00330700000012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1b9dcdd55cd69b37edeb8fe43f4bb102b2b8f55667ffff000000000000b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548def6bb0319bc", 0xfc) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 5.244036286s ago: executing program 0 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0xfffffffffffffc7f) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x80, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_EMATCHES={0x4c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}, @TCF_EM_CONTAINER={0x24, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x1}, "bbdddbae592b1185a399edb4fff6ae22e78fa582f5100124"}}]}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20041090}, 0x4044000) 5.243437819s ago: executing program 3 (id=4293): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x7fe, &(0x7f0000002040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x7c8, 0x2b, 0x0, @private2, @local, {[@hopopts={0x3c, 0xf6, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x4, 0x6}}, @generic={0x14, 0x7a8, "d6104212567aa3978a2c3cd1a4d868b66b717801cff409c49009239d568b596d332b33ef4d3b9484b97b74f478fc6605ffb98a2f78c3b8e195e6a7c9d9f730b14b0afcfcf8c7cf46a521815b770cda83c34236b2901a5b02d6eec7932d2c75fd6ed644a987fe46a7262e4f49488394453cee05a8a173cc9219476fe4f21a5a1006c852e6d2549c18714b8b15dbec6bb4629b29a479e1272326ab7fcda0e8c49e3e37c398a115ff759804323de8a4176e7f18592b5afcf15e08d907f9195b48f0e503dddf228826d21265401c7774616d10c9b4377ae5d180aee75ccd0e811e8f145f3ee93d0c9803561565efddc9b5bf8b736c2a4da4f539ddc53237edb1a442c65a2fc67e726a28a9c4736209f24882d72245a2f92e1ee6e618cdf9137f92101c468beef0f5f3d8e43e4729ac127967b64e79ac00d0563d78333a74d5e266b2c2460dfe3b6ca60a206d7428f79b7ce1f5bbfc1c93fbf544afdb2f480edf3bf866b9a8502e7b4a465c8f15459c04ac9c7c8cd576835652460740a7cfe1143637c9eef4330fd6b247321ae9e3b75319a5f5bd6371682f89bb8eea2e112526475ac9741ea1c312927f80aee53eb19b548e65f07b717fd375bedb7bc0d6971cd4b2baf52fb22c0cffed68ab78333b4b67183f3ebcab6d2f76195d92d2eb10a9c311ba370e600c2859b436cac9ad9a97cd10761b85e5ab7d34c4df0626e07f6538a3d6a41a766b31e4e56eba04fa8a8f439da9358e75aced905a372834010803dbe691ed620eeb47b7b45d5ef58210a06580607c91a04352afe8f1c96eaf974860b7c3baaf08e3464db09574d11793d73e174014ee224c6e5d3f8c8581d868f6ee52f137ce539737937f71ecacd3217796a769dfba7745383fda4f7f2d6bd1f671e0c7b07b23b217db0bc17b341fcc481a35f0531e6cf7c7b7472ddae3c2dbe70464aff2b95c3937762edc1046a51e00a90b9d0027afbb1e15696e4842136a2798c265aa9a0270c57b9ced2bc509592b6211a1c09ed026f99e1835d78f6a4e955c6de192248f000a47e865e9a7aed77c5e26ace3dc8842344b7f5fb5986a955e350b473ab326fbaaf3cdc812430f8597d4b7bc30cf75735c90ecbf75b31d56d37f28a18715b1fed3c0a3c07744ab766971ebb04525dcf4bcc7659cba2c04032f2f7adf9e65ceaddb5505fe57b94c784d07eb2a2fe4fcacd9802a75c8acbec9381a04726fda6c95b6960703ffe78bcbb079c67437dac882b51d79983ee6c052b487b2edf4ceaa6c3811241897a8da7e4a5d282f415d7bf30855533ffbef090233fbdc7cfd5259d99dd1d8b4a203da5d57c9fa20ac0f4d572e7c260a0c5955855af810c44550552a066572f9838dde1717c3144f3b211d58c20c82dc94fba71d8f622bff96f3ada6d840d1321ebb47bd683a512a44048dbe8ac6d6d293facdd51fd6279aca849f9bd4b3cc2e45f44905eaed9bfcc3ab33f97069cf4889e8da2b594a8eadebe3fc81724af89737a9ef69bdecbf675d3282e074ed1d3593635555397a2c23bfa531054d71fe306667c69bd03fa6956483104ce1a0350b243739b2b1f0de8f44a6502e91beeee579c3374d0cd5c43900e587592610ce303801f08fa6970ab3d745c50f396a7bd88ec1f761b834e72f7f9511fd1c2102ed87473f23de0121e2df4941c241b8ebc8101383e1404a3bf06a209ec836dd5d5e367a6bd14caabb31efffa684eaaded13b7df7bcc1c0162f07ebd968d6ae0b4f127ef5ed589f88ac5ca5ed33534cdcefd10b4c7ef37c5537e1d02ea745e206dac16e0962fc2ccea44e4a03dc535b9a2e7183919cd7e2a7327c17940beb13e221470585f709dac534696c51bf8740d56fa0e9241068d6aec4e4cbc09f51f8b7fd027a1f884c52acd518cec328d275c5207dd413ad1b35f2710ff47e76551ccd0b4c9d0fd25d1dc87e0498b7ebb40af68474e33bdd08668ad0f5fb919acbf7d7d649997190acd35774b4eb1e35a1ac9d14675e377590192474fd9b43a82d79f06350492c42691321485944e42ec53221f59a7d3bf8c2bc92b50c7dcf61a426c2eb474cfdcbbfb44bdaacbd7b5555f3de05c45c1461c4a121ff20bb7815ca164462cf977312f53ceef57be2929cf9e8ef94c9a016ea933b127cb224652db8a870dcaec19b6faeb144150d177db884637d50faff03deef8bced965332f86b415bc3af406dbe73c68fefb97816a446232337a6a24f707633b2fb8e67b31ede05f6e9ebf6b5afd168b86a8242f963e235f1be9d8b6f5f60bf1755115519abbd53fe2ee602aa165aa8dbfaf1949fe2bc191dfa16a812d5e7136dd94a8c7c84ef240ff8f130295f161b151699f25c3b8bf7b715b40e8800d7f68c9cd57ed192584738ff64a9ca39b1d42db506f50aba87f4d6d06c9ccb2d956637c87909a59a248c892d4491e086707d095970f7170a87d83051a777ab1ce991bf7ebe905231db662d6d185e3651edb455c6f738d1c7bbc71c3cd4edf0d9ea643afe6eecd02746f0a07c8193da254cab549306156308949476501ddd70fbf7452604ac716f401265a3950c8a1bc28a99b3eedc96fab7e2192f6e7a8ebc39da7529806d760fa40f27d8155e950124f96ebe77c6ed3ae952acd3f4fa9fbda4e796bc3788852c6ec203a39dd47d229f222daa5b3ab293dee076f6e5471f1b7895841c03bb6bd55e94fb3b326a6f0783739466b36f10a875f9fc7b0a0684712fec8108646255fb515b1776873d56060dc601c3de28c2b15ebab49a3f"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) unshare(0x62040200) 5.09603614s ago: executing program 2 (id=4295): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 5.046206771s ago: executing program 4 (id=4296): socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4020, 0x0) 4.961644034s ago: executing program 2 (id=4297): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 4.099781221s ago: executing program 7 (id=4299): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x18) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 3.94405285s ago: executing program 2 (id=4300): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 3.930073691s ago: executing program 6 (id=4301): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r1) 3.928747071s ago: executing program 7 (id=4302): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) ioctl$TIOCGSID(r1, 0x5429, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.63940684s ago: executing program 2 (id=4303): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 3.587322834s ago: executing program 3 (id=4304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 3.503973965s ago: executing program 6 (id=4305): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.931549309s ago: executing program 7 (id=4306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00'}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, 0x0, 0x0) 1.413928428s ago: executing program 2 (id=4307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e22, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x4000}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x200000, 0x2, 0x0, 0x0, 0x0, 0x5}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 1.351542301s ago: executing program 3 (id=4308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000580)={0x2, 0x4, 0x2da4ea94, 0x8, r4}) 1.268016634s ago: executing program 6 (id=4309): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1.259819596s ago: executing program 7 (id=4310): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x7, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) 1.200568225s ago: executing program 2 (id=4311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.191295098s ago: executing program 6 (id=4312): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) 1.043780319s ago: executing program 4 (id=4313): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x7c, 0x2, [@TCA_BASIC_EMATCHES={0x78, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_VAR='D\n', @TCF_META_TYPE_VAR="10ef6b021511", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="18079cebdf6f78", @TCF_META_TYPE_VAR="a184", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="ca169e5833", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x2}, {0x4, 0x9, 0x1}}}]}}]}]}]}}]}, 0xac}}, 0x0) 928.382306ms ago: executing program 6 (id=4314): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 901.392294ms ago: executing program 4 (id=4315): socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 146.155956ms ago: executing program 7 (id=4316): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="20000000f10002000600000000000000000002"], 0x0) 145.793583ms ago: executing program 3 (id=4317): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001cc0)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0x4, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2008c014) 0s ago: executing program 6 (id=4318): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad41"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) ioctl$TIOCGSID(r1, 0x5429, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) kernel console output (not intermixed with test programs): phy0 wpan0: encryption failed: -22 [ 1299.000647][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.157095][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3132'. [ 1302.673853][T17522] bond0: entered promiscuous mode [ 1302.678927][T17522] bond_slave_0: entered promiscuous mode [ 1302.725511][T17522] bond_slave_1: entered promiscuous mode [ 1302.755230][T17522] batadv0: entered promiscuous mode [ 1302.775096][T17522] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1302.836104][T17522] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1302.868892][T17522] hsr1: entered allmulticast mode [ 1302.875453][T17522] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1302.886253][T17522] bond0: left promiscuous mode [ 1302.902510][T17522] bond_slave_0: left promiscuous mode [ 1302.908104][T17522] bond_slave_1: left promiscuous mode [ 1302.931307][T17522] batadv0: left promiscuous mode [ 1304.987477][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1305.007218][T17591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1305.195277][T17599] 9pnet_fd: Insufficient options for proto=fd [ 1305.579405][T17607] fuse: Bad value for 'fd' [ 1306.232270][T16362] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1306.425010][T16362] usb 4-1: Using ep0 maxpacket: 32 [ 1306.452195][T16362] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.496753][T16362] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1306.511654][T16362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.528580][T16362] usb 4-1: Product: syz [ 1306.538289][T16362] usb 4-1: Manufacturer: syz [ 1306.547015][T16362] usb 4-1: SerialNumber: syz [ 1306.572639][T16362] usb 4-1: config 0 descriptor?? [ 1306.597508][T16362] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1306.915580][ T6050] Bluetooth: hci3: Frame reassembly failed (-84) [ 1306.953183][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 1307.451167][T16362] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1307.458148][T16362] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1307.474473][T17617] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3176'. [ 1307.582675][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3183'. [ 1307.599765][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3183'. [ 1308.396220][T16362] usb 4-1: USB disconnect, device number 3 [ 1308.987737][ T5873] Bluetooth: hci3: command 0x1003 tx timeout [ 1308.994157][T13866] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1310.194943][T17672] binfmt_misc: register: failed to install interpreter file ./file0 [ 1310.272381][T17673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1310.401689][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 1312.041123][T17704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1312.096605][T16334] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1312.226681][T17707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3207'. [ 1312.257122][T16334] usb 3-1: Using ep0 maxpacket: 32 [ 1312.268105][T16334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.303099][T16334] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1312.322401][T16334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.337257][T16334] usb 3-1: Product: syz [ 1312.345210][T16334] usb 3-1: Manufacturer: syz [ 1312.359472][T16334] usb 3-1: SerialNumber: syz [ 1312.374919][T16334] usb 3-1: config 0 descriptor?? [ 1312.390540][T16334] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1312.913882][T17723] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3204'. [ 1313.098205][T16334] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1313.105084][T16334] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1313.158850][T16334] usb 3-1: USB disconnect, device number 23 [ 1313.466487][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3218'. [ 1313.492622][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3218'. [ 1313.607376][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1313.607396][ T30] audit: type=1326 audit(1760483028.541:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1313.736671][ T30] audit: type=1326 audit(1760483028.601:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1313.756371][T17751] program syz.9.3225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1313.815897][ T30] audit: type=1326 audit(1760483028.601:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1313.876400][ T30] audit: type=1326 audit(1760483028.601:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1313.929703][ T30] audit: type=1326 audit(1760483028.601:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1313.983990][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3227'. [ 1313.995369][ T30] audit: type=1326 audit(1760483028.601:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17743 comm="syz.7.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1314.038558][T17755] veth0_macvtap: left promiscuous mode [ 1314.698765][T17777] 8021q: VLANs not supported on ip6tnl0 [ 1315.056126][T17790] program syz.2.3242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1315.297131][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3246'. [ 1316.521467][T17808] loop9: detected capacity change from 0 to 256 [ 1316.549117][T17808] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1316.585150][T17808] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 1316.649926][T17808] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x61d8dcd9, utbl_chksum : 0xe619d30d) [ 1316.695279][T17808] exFAT-fs (loop9): failed to load alloc-bitmap [ 1316.711743][T17808] exFAT-fs (loop9): failed to recognize exfat type [ 1316.759600][T17808] loop9: detected capacity change from 0 to 128 [ 1316.792460][T17808] ext4: Unknown parameter 'seclabel' [ 1316.807075][T17815] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3245'. [ 1317.103431][T17818] binfmt_misc: register: failed to install interpreter file ./file0 [ 1317.284705][T17820] 8021q: VLANs not supported on ip6tnl0 [ 1318.003977][T17835] fuse: Unknown parameter '0x0000000000000004' [ 1318.108413][T17836] vlan3: entered promiscuous mode [ 1322.094271][T17892] fuse: Unknown parameter '0x0000000000000004' [ 1323.900234][T17932] fuse: Unknown parameter 'fd0x0000000000000004' [ 1324.974610][T17942] fuse: Unknown parameter 'fd0x0000000000000004' [ 1325.060249][T17940] vlan3: entered promiscuous mode [ 1326.402053][T17965] fuse: Unknown parameter 'fd0x0000000000000004' [ 1327.507534][T17974] fuse: Unknown parameter 'fd0x0000000000000004' [ 1327.792689][T17978] loop9: detected capacity change from 0 to 1024 [ 1327.845423][T17978] EXT4-fs: Ignoring removed nobh option [ 1327.877251][T17978] EXT4-fs: Ignoring removed bh option [ 1328.520225][T17978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1328.599001][ T30] audit: type=1326 audit(1760483043.528:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.736939][T17995] EXT4-fs (loop9): shut down requested (0) [ 1328.749090][ T30] audit: type=1326 audit(1760483043.528:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.838490][ T30] audit: type=1326 audit(1760483043.578:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.861268][ T30] audit: type=1326 audit(1760483043.578:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.883799][ T30] audit: type=1326 audit(1760483043.578:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.913107][ T30] audit: type=1326 audit(1760483043.578:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1328.960587][ T30] audit: type=1326 audit(1760483043.578:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1329.029782][ T30] audit: type=1326 audit(1760483043.578:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1329.075521][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1329.094810][ T30] audit: type=1326 audit(1760483043.578:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1329.163303][ T30] audit: type=1326 audit(1760483043.578:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.2.3314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1329.322260][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1331.722144][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3335'. [ 1331.800750][T18049] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3334'. [ 1334.118570][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1334.118593][ T30] audit: type=1326 audit(1760483049.051:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.334892][ T30] audit: type=1326 audit(1760483049.051:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.443807][T18073] netlink: 'syz.9.3339': attribute type 12 has an invalid length. [ 1334.457331][ T30] audit: type=1326 audit(1760483049.051:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.506076][T16362] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1334.594948][ T30] audit: type=1326 audit(1760483049.051:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.689726][ T30] audit: type=1326 audit(1760483049.051:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.715895][ T30] audit: type=1326 audit(1760483049.051:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.718022][T16362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1334.740708][ T30] audit: type=1326 audit(1760483049.051:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.794137][T16362] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1334.806924][ T30] audit: type=1326 audit(1760483049.051:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.830019][ T30] audit: type=1326 audit(1760483049.051:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.839015][T16362] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1334.867920][T16362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1334.875986][T16362] usb 5-1: SerialNumber: syz [ 1334.883700][ T30] audit: type=1326 audit(1760483049.051:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fedf2b8eec9 code=0x7ffc0000 [ 1334.913878][T16362] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1334.924775][T16362] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1334.939399][T16362] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1334.958433][T16362] scsi host1: usb-storage 5-1:1.0 [ 1335.050522][T18092] loop3: detected capacity change from 0 to 1024 [ 1335.058207][T18092] EXT4-fs: Ignoring removed nobh option [ 1335.064232][T18092] EXT4-fs: Ignoring removed bh option [ 1335.086828][T18092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.166954][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.404111][T18105] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3355'. [ 1335.508279][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3355'. [ 1336.329611][T18119] loop9: detected capacity change from 0 to 512 [ 1336.337111][T18119] EXT4-fs: Ignoring removed i_version option [ 1336.343118][T18119] EXT4-fs: Ignoring removed bh option [ 1336.375855][T18119] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.411491][T18119] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.534996][T16362] usb 5-1: USB disconnect, device number 9 [ 1337.071403][T18147] loop3: detected capacity change from 0 to 2048 [ 1337.218358][T18147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.348261][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.660640][T18165] bridge0: port 3(syz_tun) entered blocking state [ 1337.668046][T18165] bridge0: port 3(syz_tun) entered disabled state [ 1337.677792][T18165] syz_tun: entered allmulticast mode [ 1337.697143][T18165] syz_tun: entered promiscuous mode [ 1337.705983][T18165] bridge0: port 3(syz_tun) entered blocking state [ 1337.712513][T18165] bridge0: port 3(syz_tun) entered forwarding state [ 1338.228318][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.842984][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1340.308045][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1340.323183][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'. [ 1340.633403][T18199] loop3: detected capacity change from 0 to 512 [ 1340.701803][T18199] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.3383: bad orphan inode 11862016 [ 1340.755178][T18199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1340.849351][T18199] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1340.952109][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1340.952129][ T30] audit: type=1800 audit(1760483055.895:710): pid=18199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3383" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1340.982512][T18204] tipc: Enabled bearer , priority 0 [ 1340.999672][T18204] syzkaller0: entered promiscuous mode [ 1341.025147][T18204] syzkaller0: entered allmulticast mode [ 1341.063365][T18204] tipc: Resetting bearer [ 1341.090436][T18203] tipc: Resetting bearer [ 1341.159598][T18203] tipc: Disabling bearer [ 1341.185403][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 1341.602567][ T9784] page_pool_release_retry() stalled pool shutdown: id 87, 1 inflight 60 sec [ 1341.680496][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1342.048401][T18228] loop3: detected capacity change from 0 to 256 [ 1342.061146][T18228] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1342.351446][T18228] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1342.378849][T18228] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x61d8dcd9, utbl_chksum : 0xe619d30d) [ 1342.413663][T18228] exFAT-fs (loop3): failed to load alloc-bitmap [ 1342.421947][T18228] exFAT-fs (loop3): failed to recognize exfat type [ 1342.471209][T18228] loop3: detected capacity change from 0 to 128 [ 1342.490280][T18228] ext4: Unknown parameter 'seclabel' [ 1343.851279][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1346.348278][ T30] audit: type=1326 audit(1760483061.287:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1346.474426][ T30] audit: type=1326 audit(1760483061.287:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1346.559610][ T30] audit: type=1326 audit(1760483061.287:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1346.587260][T13399] syz_tun (unregistering): left allmulticast mode [ 1346.603273][T18287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1346.630498][T18287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1346.639113][ T30] audit: type=1326 audit(1760483061.297:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1346.649934][T13399] bridge0: port 3(syz_tun) entered disabled state [ 1346.669645][T18287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1346.699519][T18287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1346.713568][T18287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1346.716158][T18288] netlink: 'syz.2.3411': attribute type 12 has an invalid length. [ 1346.811754][ T30] audit: type=1326 audit(1760483061.297:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1346.861613][ T30] audit: type=1326 audit(1760483061.297:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1347.024222][ T30] audit: type=1326 audit(1760483061.297:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1347.129699][ T30] audit: type=1326 audit(1760483061.297:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1347.268029][ T30] audit: type=1326 audit(1760483061.297:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1347.359534][ T30] audit: type=1326 audit(1760483061.297:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18281 comm="syz.2.3411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fac6858eec9 code=0x7ffc0000 [ 1348.219378][ T50] bridge_slave_1: left allmulticast mode [ 1348.245942][ T50] bridge_slave_1: left promiscuous mode [ 1348.261462][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.272237][ T50] bridge_slave_0: left allmulticast mode [ 1348.282685][ T50] bridge_slave_0: left promiscuous mode [ 1348.289002][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.144134][T13866] Bluetooth: hci2: command tx timeout [ 1350.080172][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1350.116986][ T50] bond_slave_0: left allmulticast mode [ 1350.124753][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1350.141149][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1350.184939][ T50] bond_slave_1: left allmulticast mode [ 1350.218530][ T50] bond0 (unregistering): Released all slaves [ 1350.302747][T18349] netlink: 'syz.2.3425': attribute type 12 has an invalid length. [ 1350.362085][T18284] chnl_net:caif_netlink_parms(): no params data found [ 1350.453630][ T50] tipc: Left network mode [ 1350.894105][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3428'. [ 1350.931596][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3428'. [ 1351.060787][T18284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.081195][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.107485][T18284] bridge_slave_0: entered allmulticast mode [ 1351.127399][T18284] bridge_slave_0: entered promiscuous mode [ 1351.184175][T18284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.197488][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.197857][T18287] Bluetooth: hci2: command tx timeout [ 1351.225142][T18284] bridge_slave_1: entered allmulticast mode [ 1351.245887][T18284] bridge_slave_1: entered promiscuous mode [ 1351.309763][ T50] hsr_slave_0: left promiscuous mode [ 1351.326707][ T50] hsr_slave_1: left promiscuous mode [ 1351.344644][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.364244][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1352.157999][T13866] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1353.333015][T18287] Bluetooth: hci2: command tx timeout [ 1354.285585][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1355.397069][T18287] Bluetooth: hci2: command tx timeout [ 1356.768222][T18284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.839982][T18284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.937822][T18284] team0: Port device team_slave_0 added [ 1356.961257][T18284] team0: Port device team_slave_1 added [ 1357.097791][T18284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1357.317394][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.344153][T18284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1357.357373][T18284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1357.364319][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1357.400737][T18284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.576394][ T13] Bluetooth: hci3: Frame reassembly failed (-84) [ 1357.585344][T18284] hsr_slave_0: entered promiscuous mode [ 1357.592370][T18284] hsr_slave_1: entered promiscuous mode [ 1358.000469][T18466] netlink: 'syz.3.3463': attribute type 12 has an invalid length. [ 1358.578653][T18460] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1359.434649][T18284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1359.523720][T18284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1359.706183][T13866] Bluetooth: hci3: command 0x1003 tx timeout [ 1359.723512][T18287] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1359.787264][T18284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1360.513811][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1360.520158][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1360.533993][T18284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1361.786898][T18284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1361.858486][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1361.931760][T18512] loop3: detected capacity change from 0 to 512 [ 1362.008072][T18284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1362.028946][T18512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1362.043385][T18512] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.059377][T18520] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3480'. [ 1362.072752][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.079914][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1362.135184][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.142367][ T6341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1362.160028][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3481'. [ 1362.172857][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1364.508475][T18555] loop3: detected capacity change from 0 to 1024 [ 1364.529066][T18555] EXT4-fs: Ignoring removed nobh option [ 1364.548504][T18284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.561588][T18555] EXT4-fs: Ignoring removed bh option [ 1364.600887][T18560] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3485'. [ 1364.620001][T18284] veth0_vlan: entered promiscuous mode [ 1364.722394][T18284] veth1_vlan: entered promiscuous mode [ 1364.780069][T18555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1364.883572][T18284] veth0_macvtap: entered promiscuous mode [ 1364.893829][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 1364.893849][ T30] audit: type=1804 audit(1760483079.857:766): pid=18555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3491" name="/newroot/274/file2/bus" dev="loop3" ino=18 res=1 errno=0 [ 1364.933076][T18555] EXT4-fs (loop3): shut down requested (0) [ 1364.968311][T18284] veth1_macvtap: entered promiscuous mode [ 1365.004419][T18568] 9pnet_fd: Insufficient options for proto=fd [ 1365.031692][ T30] audit: type=1804 audit(1760483079.857:767): pid=18555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3491" name="/newroot/274/file2/bus" dev="loop3" ino=18 res=1 errno=0 [ 1365.057280][T18284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.087957][T18284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1365.121792][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1365.146006][ T6341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.158125][T18571] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3495'. [ 1365.180808][ T6341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.236020][ T6341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.260470][ T6341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.526702][T18575] vlan3: entered promiscuous mode [ 1365.569166][T18573] pim6reg: entered allmulticast mode [ 1365.577643][T18573] pim6reg: left allmulticast mode [ 1365.930077][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.940714][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1365.948543][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.976105][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1366.015423][T18589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3504'. [ 1367.809649][T18626] syz_tun: entered promiscuous mode [ 1367.814964][T18626] vlan2: entered promiscuous mode [ 1368.317356][T18628] pim6reg: entered allmulticast mode [ 1368.324719][T18628] pim6reg: left allmulticast mode [ 1368.404896][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1368.526798][T18634] 9p: Unknown access argument ¿: -22 [ 1368.877448][T12347] bridge0: port 3(syz_tun) entered disabled state [ 1368.947926][T18642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3521'. [ 1368.990395][T13866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1369.001002][T13866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1369.011062][T13866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1369.019809][T13866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1369.027542][T13866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1369.184825][T18652] xt_hashlimit: max too large, truncated to 1048576 [ 1369.509822][T18652] Cannot find add_set index 0 as target [ 1369.605825][T18644] chnl_net:caif_netlink_parms(): no params data found [ 1370.113656][T18677] 9pnet_fd: Insufficient options for proto=fd [ 1370.219095][T18644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.230605][T18644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.238698][T18644] bridge_slave_0: entered allmulticast mode [ 1370.248117][T18644] bridge_slave_0: entered promiscuous mode [ 1370.293649][T18644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.323195][T18644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.339857][T18644] bridge_slave_1: entered allmulticast mode [ 1370.361727][T18644] bridge_slave_1: entered promiscuous mode [ 1370.942615][T18644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1371.012938][T18644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1371.110607][T18287] Bluetooth: hci3: command tx timeout [ 1371.427263][T18644] team0: Port device team_slave_0 added [ 1371.448227][ T12] bridge_slave_1: left promiscuous mode [ 1371.454031][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1372.259621][ T12] bridge_slave_0: left promiscuous mode [ 1372.279376][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.186728][T18287] Bluetooth: hci3: command tx timeout [ 1373.776900][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1373.789025][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1373.812984][ T12] bond0 (unregistering): Released all slaves [ 1373.869920][T18644] team0: Port device team_slave_1 added [ 1374.025652][ T30] audit: type=1326 audit(1760483088.981:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.085403][ T30] audit: type=1326 audit(1760483089.021:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.137892][T18644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.155268][ T30] audit: type=1326 audit(1760483089.021:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.175403][T18644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.236523][ T30] audit: type=1326 audit(1760483089.021:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.241099][T18644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.306289][ T30] audit: type=1326 audit(1760483089.021:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.351079][ T12] tipc: Left network mode [ 1374.479905][T18644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.524106][T18644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.555487][ T30] audit: type=1326 audit(1760483089.021:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.578676][ T30] audit: type=1326 audit(1760483089.021:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.601209][ T30] audit: type=1326 audit(1760483089.021:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.624005][T18644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.636267][ T30] audit: type=1326 audit(1760483089.021:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.659652][ T30] audit: type=1326 audit(1760483089.021:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18717 comm="syz.7.3547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1374.707445][T18719] netlink: 'syz.7.3547': attribute type 12 has an invalid length. [ 1374.948501][T18644] hsr_slave_0: entered promiscuous mode [ 1374.967273][T18644] hsr_slave_1: entered promiscuous mode [ 1374.984512][T18644] debugfs: 'hsr0' already exists in 'hsr' [ 1374.999256][T18644] Cannot create hsr debugfs directory [ 1375.275571][T18287] Bluetooth: hci3: command tx timeout [ 1375.488656][ T12] hsr_slave_0: left promiscuous mode [ 1375.495484][ T12] hsr_slave_1: left promiscuous mode [ 1375.501536][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.539271][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.567333][T18737] loop9: detected capacity change from 0 to 1024 [ 1375.582946][T18737] EXT4-fs: Ignoring removed orlov option [ 1375.600009][T18737] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1376.679160][T13291] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1376.723199][T18752] loop9: detected capacity change from 0 to 2048 [ 1376.794156][T18752] loop9: p1 p3 p4 [ 1376.808667][T18752] loop9: p4 size 589824 extends beyond EOD, truncated [ 1376.864802][T13291] usb 4-1: Using ep0 maxpacket: 32 [ 1376.876414][T13291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.910157][T13291] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1376.929464][T13291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1376.974917][T13291] usb 4-1: Product: syz [ 1376.984877][T13291] usb 4-1: Manufacturer: syz [ 1376.989480][T13291] usb 4-1: SerialNumber: syz [ 1377.009935][T13291] usb 4-1: config 0 descriptor?? [ 1377.050003][T13291] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1377.119553][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3559'. [ 1377.344842][T18287] Bluetooth: hci3: command tx timeout [ 1377.619674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1377.739742][T13291] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1377.750461][T13291] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1377.762987][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1378.337225][T13291] usb 4-1: USB disconnect, device number 4 [ 1378.512973][T18766] loop9: detected capacity change from 0 to 512 [ 1378.545723][T18766] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1378.631896][T18766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.692079][T18766] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.707785][T18768] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 (while UP) [ 1378.735920][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3562'. [ 1378.881481][T18771] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1379.842841][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1379.852395][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1380.310108][ T9413] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.665884][T18644] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1380.689826][T18796] loop9: detected capacity change from 0 to 1024 [ 1380.714793][T18796] EXT4-fs: Ignoring removed orlov option [ 1380.724966][T18644] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1380.738122][T18644] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1380.748688][T18796] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1380.809894][T18644] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1380.840063][T18800] binfmt_misc: register: failed to install interpreter file ./file0 [ 1382.197622][T18644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1382.261587][T18644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1382.277859][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1382.285044][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1382.319039][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.326203][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.395330][T18814] veth0_to_team: entered promiscuous mode [ 1383.806328][T18644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1383.857267][ T9784] hid_parser_main: 8 callbacks suppressed [ 1383.857289][ T9784] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1383.860223][ T9784] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1383.960625][T18644] veth0_vlan: entered promiscuous mode [ 1384.008914][T18644] veth1_vlan: entered promiscuous mode [ 1384.248319][T18847] loop9: detected capacity change from 0 to 1024 [ 1384.279902][T18847] EXT4-fs: Ignoring removed orlov option [ 1384.310156][T18847] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1384.317360][T18644] veth0_macvtap: entered promiscuous mode [ 1384.354138][T18644] veth1_macvtap: entered promiscuous mode [ 1384.430428][T18644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.482956][T18644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.503317][T18789] syz.4.3567: vmalloc error: size 1075838976, failed to allocated page array size 2101248, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1384.556439][T18789] CPU: 1 UID: 0 PID: 18789 Comm: syz.4.3567 Not tainted syzkaller #0 PREEMPT(full) [ 1384.556472][T18789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1384.556487][T18789] Call Trace: [ 1384.556496][T18789] [ 1384.556506][T18789] dump_stack_lvl+0x189/0x250 [ 1384.556537][T18789] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1384.556570][T18789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.556596][T18789] ? __pfx__printk+0x10/0x10 [ 1384.556623][T18789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1384.556649][T18789] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1384.556682][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.556717][T18789] warn_alloc+0x214/0x310 [ 1384.556756][T18789] ? __pfx_warn_alloc+0x10/0x10 [ 1384.556794][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.556823][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.556851][T18789] ? __get_vm_area_node+0x28f/0x300 [ 1384.556878][T18789] ? hash_netiface_create+0x358/0xfe0 [ 1384.556914][T18789] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1384.556945][T18789] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 1384.557010][T18789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1384.557039][T18789] ? hash_netiface_create+0x358/0xfe0 [ 1384.557073][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.557101][T18789] ? rcu_is_watching+0x15/0xb0 [ 1384.557139][T18789] ? hash_netiface_create+0x358/0xfe0 [ 1384.557170][T18789] __kvmalloc_node_noprof+0x674/0x910 [ 1384.557201][T18789] ? hash_netiface_create+0x358/0xfe0 [ 1384.557228][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.557257][T18789] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1384.557285][T18789] ? hash_netiface_create+0x2fe/0xfe0 [ 1384.557322][T18789] hash_netiface_create+0x358/0xfe0 [ 1384.557362][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.557393][T18789] ? __nla_parse+0x40/0x60 [ 1384.557423][T18789] ? __pfx_hash_netiface_create+0x10/0x10 [ 1384.557455][T18789] ip_set_create+0xa97/0x1940 [ 1384.557487][T18789] ? ip_set_create+0x4a2/0x1940 [ 1384.557533][T18789] ? __pfx_ip_set_create+0x10/0x10 [ 1384.557599][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.557636][T18789] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1384.557669][T18789] ? bpf_trace_run4+0x19c/0x4a0 [ 1384.557702][T18789] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1384.557758][T18789] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1384.557826][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.557878][T18789] netlink_rcv_skb+0x208/0x470 [ 1384.557915][T18789] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1384.557950][T18789] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1384.558000][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558028][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558055][T18789] ? security_capable+0x7e/0x2e0 [ 1384.558082][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558116][T18789] nfnetlink_rcv+0x282/0x2590 [ 1384.558149][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558178][T18789] ? is_bpf_text_address+0x26/0x2b0 [ 1384.558217][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558248][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558275][T18789] ? __kernel_text_address+0xd/0x40 [ 1384.558302][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558330][T18789] ? unwind_get_return_address+0x4d/0x90 [ 1384.558366][T18789] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1384.558390][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558417][T18789] ? arch_stack_walk+0xfc/0x150 [ 1384.558469][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558496][T18789] ? stack_trace_save+0x9c/0xe0 [ 1384.558520][T18789] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1384.558549][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558576][T18789] ? stack_depot_save_flags+0x40/0x860 [ 1384.558606][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558633][T18789] ? __lock_acquire+0xab9/0xd20 [ 1384.558669][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558726][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558752][T18789] ? __lock_acquire+0xab9/0xd20 [ 1384.558797][T18789] ? netlink_deliver_tap+0x2e/0x1b0 [ 1384.558835][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.558866][T18789] ? netlink_deliver_tap+0x2e/0x1b0 [ 1384.558911][T18789] netlink_unicast+0x82f/0x9e0 [ 1384.558954][T18789] ? __pfx_netlink_unicast+0x10/0x10 [ 1384.558987][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559014][T18789] ? skb_put+0x11b/0x210 [ 1384.559048][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559082][T18789] netlink_sendmsg+0x805/0xb30 [ 1384.559129][T18789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.559169][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559196][T18789] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1384.559225][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559252][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559280][T18789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1384.559322][T18789] __sock_sendmsg+0x21c/0x270 [ 1384.559356][T18789] ____sys_sendmsg+0x505/0x830 [ 1384.559403][T18789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1384.559453][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559480][T18789] ? import_iovec+0x74/0xa0 [ 1384.559518][T18789] ___sys_sendmsg+0x21f/0x2a0 [ 1384.559544][T18789] ? __pfx____sys_sendmsg+0x10/0x10 [ 1384.559576][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559638][T18789] ? __fget_files+0x2a/0x420 [ 1384.559667][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559697][T18789] ? __fget_files+0x3a0/0x420 [ 1384.559741][T18789] __x64_sys_sendmsg+0x19b/0x260 [ 1384.559767][T18789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1384.559812][T18789] ? do_syscall_64+0xbe/0xfa0 [ 1384.559841][T18789] do_syscall_64+0xfa/0xfa0 [ 1384.559863][T18789] ? lockdep_hardirqs_on+0x9c/0x150 [ 1384.559887][T18789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.559909][T18789] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1384.559936][T18789] ? exc_page_fault+0xab/0x100 [ 1384.559962][T18789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.559985][T18789] RIP: 0033:0x7fc091b8eec9 [ 1384.560006][T18789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.560027][T18789] RSP: 002b:00007fc092ac1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1384.560052][T18789] RAX: ffffffffffffffda RBX: 00007fc091de5fa0 RCX: 00007fc091b8eec9 [ 1384.560070][T18789] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 1384.560086][T18789] RBP: 00007fc091c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1384.560101][T18789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.560116][T18789] R13: 00007fc091de6038 R14: 00007fc091de5fa0 R15: 00007fff96455b68 [ 1384.560156][T18789] [ 1384.560230][T18789] Mem-Info: [ 1384.598495][T18848] vlan2: entered promiscuous mode [ 1384.603518][T18789] active_anon:11765 inactive_anon:0 isolated_anon:0 [ 1384.603518][T18789] active_file:6425 inactive_file:40886 isolated_file:0 [ 1384.603518][T18789] unevictable:768 dirty:159 writeback:0 [ 1384.603518][T18789] slab_reclaimable:11910 slab_unreclaimable:109608 [ 1384.603518][T18789] mapped:40252 shmem:7221 pagetables:1489 [ 1384.603518][T18789] sec_pagetables:0 bounce:0 [ 1384.603518][T18789] kernel_misc_reclaimable:0 [ 1384.603518][T18789] free:1116631 free_pcp:21384 free_cma:0 [ 1385.554416][T18789] Node 0 active_anon:47184kB inactive_anon:0kB active_file:25700kB inactive_file:163344kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161036kB dirty:680kB writeback:0kB shmem:27408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12376kB pagetables:5840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1385.670489][T18789] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1385.732395][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.770322][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1385.835612][T18789] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.890018][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.030243][T18789] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1386.046391][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.056172][T18789] Node 0 DMA32 free:546552kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23868kB inactive_anon:0kB active_file:25700kB inactive_file:163348kB unevictable:1536kB writepending:616kB zspages:0kB present:3129332kB managed:2561624kB mlocked:0kB bounce:0kB free_pcp:99868kB local_pcp:50148kB free_cma:0kB [ 1386.089508][ C0] vkms_vblank_simulate: vblank timer overrun [ 1386.113868][T18789] lowmem_reserve[]: [ 1386.176167][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1386.176190][ T30] audit: type=1326 audit(1760483101.127:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.275159][T18789] 0 0 1 1 1 [ 1386.282684][T18789] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.372575][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.381416][ T30] audit: type=1326 audit(1760483101.127:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.397261][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.404784][T18789] lowmem_reserve[]: 0 0 0 0 0 [ 1386.423605][T18789] Node 1 Normal free:3903892kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8236kB local_pcp:708kB free_cma:0kB [ 1386.476582][ T30] audit: type=1326 audit(1760483101.127:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.500485][T18789] lowmem_reserve[]: 0 0 0 0 0 [ 1386.514010][T18789] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1386.547750][ T30] audit: type=1326 audit(1760483101.127:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.554674][ T6050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1386.592059][T18789] Node 0 DMA32: 20*4kB (UE) 3*8kB (UME) 583*16kB (ME) 264*32kB (UM) 11*64kB (ME) 7*128kB (M) 34*256kB (UM) 17*512kB (UME) 6*1024kB (UM) 1*2048kB (U) 122*4096kB (M) = 544792kB [ 1386.600090][ T30] audit: type=1326 audit(1760483101.127:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.631898][ T6050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1386.646264][ T30] audit: type=1326 audit(1760483101.127:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.669000][ T30] audit: type=1326 audit(1760483101.147:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.691786][ T30] audit: type=1326 audit(1760483101.147:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.716226][ T30] audit: type=1326 audit(1760483101.147:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.739474][ T30] audit: type=1326 audit(1760483101.147:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18860 comm="syz.3.3593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1386.782830][T18789] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.820030][T18789] Node 1 Normal: 66*4kB (UME) 4*8kB (ME) 22*16kB (UME) 234*32kB (UME) 88*64kB (UME) 20*128kB (UME) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3903944kB [ 1386.860593][T18789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.881274][T18789] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1386.892780][T18789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.902716][T18789] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1386.912535][T18789] 51653 total pagecache pages [ 1386.933692][T18873] pim6reg: entered allmulticast mode [ 1386.939125][T18789] 0 pages in swap cache [ 1387.060539][T18789] Free swap = 124996kB [ 1387.065121][T18789] Total swap = 124996kB [ 1387.069441][T18789] 2097051 pages RAM [ 1387.073426][T18789] 0 pages HighMem/MovableOnly [ 1387.078107][T18789] 424555 pages reserved [ 1387.082365][T18789] 0 pages cma reserved [ 1387.264725][T18880] 9p: Unknown access argument ¿: -22 [ 1387.677976][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1387.739780][T18890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3604'. [ 1387.946106][T18896] netlink: 'syz.2.3607': attribute type 10 has an invalid length. [ 1387.980649][T18896] team0: Port device dummy0 added [ 1387.999573][T18898] netlink: 'syz.2.3607': attribute type 10 has an invalid length. [ 1388.030385][T18898] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1388.101466][T18898] team0: Failed to send options change via netlink (err -105) [ 1388.115562][T18898] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1388.178801][T18898] team0: Port device dummy0 removed [ 1388.201608][T18898] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1388.405365][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3612'. [ 1389.564065][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1389.606633][T18927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3620'. [ 1391.301923][T18945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3626'. [ 1393.269376][ T9784] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1393.437113][ T9784] usb 4-1: Using ep0 maxpacket: 32 [ 1393.454642][ T9784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1393.506129][ T9784] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1393.523774][ T9784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.546989][ T9784] usb 4-1: Product: syz [ 1393.551164][ T9784] usb 4-1: Manufacturer: syz [ 1393.575791][ T9784] usb 4-1: SerialNumber: syz [ 1393.598081][ T9784] usb 4-1: config 0 descriptor?? [ 1393.620289][ T9784] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1393.649669][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3633'. [ 1394.282374][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1394.297237][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3648'. [ 1395.000379][ T9784] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1395.041458][ T9784] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1395.693718][T16344] usb 4-1: USB disconnect, device number 5 [ 1396.274005][T19017] bridge0: entered promiscuous mode [ 1398.009295][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1398.023660][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1399.143142][T16344] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1399.343659][T16344] usb 5-1: Using ep0 maxpacket: 32 [ 1399.364219][T16344] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.404034][T16344] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1399.445255][T16344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.484735][T16344] usb 5-1: Product: syz [ 1399.509987][T16344] usb 5-1: Manufacturer: syz [ 1399.547223][T16344] usb 5-1: SerialNumber: syz [ 1399.563779][T16343] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1399.783094][T16344] usb 5-1: config 0 descriptor?? [ 1399.816195][T16344] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1400.615198][T16343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1400.628168][T16343] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1400.640984][T16343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1400.650302][T16343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1400.662925][T16343] usb 3-1: SerialNumber: syz [ 1400.693121][T16343] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1400.701938][T16343] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1400.764790][T16343] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1400.800542][T16343] scsi host1: usb-storage 3-1:1.0 [ 1400.965233][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1401.031962][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1401.071952][T18857] warn_alloc: 3 callbacks suppressed [ 1401.071975][T18857] syz.9.3591: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1401.102681][T16344] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1401.125679][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1401.171914][T18857] CPU: 0 UID: 0 PID: 18857 Comm: syz.9.3591 Not tainted syzkaller #0 PREEMPT(full) [ 1401.171950][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1401.171965][T18857] Call Trace: [ 1401.171975][T18857] [ 1401.171985][T18857] dump_stack_lvl+0x189/0x250 [ 1401.172021][T18857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1401.172050][T18857] ? __pfx__printk+0x10/0x10 [ 1401.172077][T18857] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1401.172106][T18857] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1401.172135][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172165][T18857] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1401.172197][T18857] warn_alloc+0x214/0x310 [ 1401.172237][T18857] ? __pfx_warn_alloc+0x10/0x10 [ 1401.172276][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172306][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172335][T18857] ? __get_vm_area_node+0x28f/0x300 [ 1401.172363][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.172400][T18857] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1401.172431][T18857] ? alloc_vmap_area+0xda0/0x14c0 [ 1401.172481][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172519][T18857] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1401.172549][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.172579][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172609][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172639][T18857] ? __get_vm_area_node+0x28f/0x300 [ 1401.172666][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.172704][T18857] __vmalloc_node_range_noprof+0x578/0x12d0 [ 1401.172734][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.172765][T18857] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 1401.172832][T18857] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1401.172861][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.172895][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.172931][T18857] ? rcu_is_watching+0x15/0xb0 [ 1401.172973][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.173005][T18857] __kvmalloc_node_noprof+0x674/0x910 [ 1401.173037][T18857] ? hash_netiface_create+0x358/0xfe0 [ 1401.173066][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173095][T18857] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 1401.173123][T18857] ? hash_netiface_create+0x2fe/0xfe0 [ 1401.173162][T18857] hash_netiface_create+0x358/0xfe0 [ 1401.173202][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173231][T18857] ? __nla_parse+0x40/0x60 [ 1401.173260][T18857] ? __pfx_hash_netiface_create+0x10/0x10 [ 1401.173294][T18857] ip_set_create+0xa97/0x1940 [ 1401.173328][T18857] ? ip_set_create+0x4a2/0x1940 [ 1401.173375][T18857] ? __pfx_ip_set_create+0x10/0x10 [ 1401.173441][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173478][T18857] nfnetlink_rcv_msg+0xb4d/0x1130 [ 1401.173514][T18857] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 1401.173571][T18857] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1401.173602][T18857] ? kasan_save_track+0x4f/0x80 [ 1401.173694][T18857] netlink_rcv_skb+0x208/0x470 [ 1401.173731][T18857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1401.173758][T18857] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1401.173793][T18857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1401.173843][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173871][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173895][T18857] ? security_capable+0x7e/0x2e0 [ 1401.173919][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.173949][T18857] nfnetlink_rcv+0x282/0x2590 [ 1401.173980][T18857] ? __dev_queue_xmit+0x27b/0x3b50 [ 1401.174006][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174030][T18857] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1401.174052][T18857] ? kasan_save_track+0x3e/0x80 [ 1401.174074][T18857] ? __kasan_slab_alloc+0x6c/0x80 [ 1401.174109][T18857] ? __dev_queue_xmit+0x27b/0x3b50 [ 1401.174146][T18857] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1401.174175][T18857] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1401.174212][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174240][T18857] ? ref_tracker_free+0x63a/0x7d0 [ 1401.174266][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174295][T18857] ? __asan_memcpy+0x40/0x70 [ 1401.174320][T18857] ? __pfx_ref_tracker_free+0x10/0x10 [ 1401.174344][T18857] ? __skb_clone+0x63/0x7a0 [ 1401.174373][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174403][T18857] ? __skb_clone+0x483/0x7a0 [ 1401.174434][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174463][T18857] ? skb_clone+0x246/0x3a0 [ 1401.174491][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174520][T18857] ? __netlink_deliver_tap+0x807/0x850 [ 1401.174557][T18857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1401.174598][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174631][T18857] ? netlink_deliver_tap+0x2e/0x1b0 [ 1401.174679][T18857] netlink_unicast+0x82f/0x9e0 [ 1401.174728][T18857] ? __pfx_netlink_unicast+0x10/0x10 [ 1401.174764][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174796][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1401.174793][T18857] ? skb_put+0x11b/0x210 [ 1401.174829][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174860][T18857] netlink_sendmsg+0x805/0xb30 [ 1401.174909][T18857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.174950][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.174978][T18857] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1401.175012][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175039][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175069][T18857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.175108][T18857] __sock_sendmsg+0x21c/0x270 [ 1401.175143][T18857] ____sys_sendmsg+0x505/0x830 [ 1401.175191][T18857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1401.175242][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175270][T18857] ? import_iovec+0x74/0xa0 [ 1401.175309][T18857] ___sys_sendmsg+0x21f/0x2a0 [ 1401.175337][T18857] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.175370][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175432][T18857] ? __fget_files+0x2a/0x420 [ 1401.175463][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175491][T18857] ? __fget_files+0x3a0/0x420 [ 1401.175535][T18857] __x64_sys_sendmsg+0x19b/0x260 [ 1401.175563][T18857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1401.175609][T18857] ? do_syscall_64+0xbe/0xfa0 [ 1401.175639][T18857] do_syscall_64+0xfa/0xfa0 [ 1401.175663][T18857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1401.175693][T18857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.175716][T18857] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1401.175744][T18857] ? exc_page_fault+0xab/0x100 [ 1401.175771][T18857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.175796][T18857] RIP: 0033:0x7fedf2b8eec9 [ 1401.175817][T18857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.175838][T18857] RSP: 002b:00007fedf397c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.175863][T18857] RAX: ffffffffffffffda RBX: 00007fedf2de5fa0 RCX: 00007fedf2b8eec9 [ 1401.175883][T18857] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 1401.175899][T18857] RBP: 00007fedf2c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1401.175915][T18857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.175930][T18857] R13: 00007fedf2de6038 R14: 00007fedf2de5fa0 R15: 00007ffd65dc52c8 [ 1401.175971][T18857] [ 1401.709986][T18857] Mem-Info: [ 1401.842403][T16344] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1401.981884][T18857] active_anon:6282 inactive_anon:0 isolated_anon:0 [ 1401.981884][T18857] active_file:6425 inactive_file:40893 isolated_file:0 [ 1401.981884][T18857] unevictable:768 dirty:109 writeback:0 [ 1401.981884][T18857] slab_reclaimable:11874 slab_unreclaimable:111788 [ 1401.981884][T18857] mapped:36549 shmem:1496 pagetables:1707 [ 1401.981884][T18857] sec_pagetables:0 bounce:0 [ 1401.981884][T18857] kernel_misc_reclaimable:0 [ 1401.981884][T18857] free:1185131 free_pcp:24899 free_cma:0 [ 1402.041915][T16344] usb 5-1: USB disconnect, device number 10 [ 1402.142389][T18857] Node 0 active_anon:25228kB inactive_anon:0kB active_file:25700kB inactive_file:163372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150296kB dirty:432kB writeback:0kB shmem:4448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12596kB pagetables:6348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1402.202716][T19089] pim6reg: entered allmulticast mode [ 1402.212390][T18857] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1402.322239][T18857] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.420313][T18857] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1402.452592][T18857] Node 0 DMA32 free:854504kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25228kB inactive_anon:0kB active_file:25700kB inactive_file:163372kB unevictable:1536kB writepending:432kB zspages:0kB present:3129332kB managed:2561624kB mlocked:0kB bounce:0kB free_pcp:92920kB local_pcp:62028kB free_cma:0kB [ 1402.536612][T18857] lowmem_reserve[]: 0 0 1 1 1 [ 1402.541403][T18857] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.661878][T18857] lowmem_reserve[]: 0 0 0 0 0 [ 1402.666695][T18857] Node 1 Normal free:3905076kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6976kB local_pcp:0kB free_cma:0kB [ 1402.755550][T18857] lowmem_reserve[]: 0 0 0 0 0 [ 1402.765204][T13866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1402.769293][T18857] Node 0 [ 1402.780584][T13866] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1402.781328][T18857] DMA: [ 1402.791103][T19104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1402.804017][T18857] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1402.816049][T13866] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1402.823496][T18857] Node 0 DMA32: 575*4kB (UME) 682*8kB (UME) 318*16kB (UME) 349*32kB (UME) 407*64kB (UME) 437*128kB (UM) 296*256kB (UME) 169*512kB (UME) 97*1024kB (UM) 5*2048kB (U) 124*4096kB (UM) = 885772kB [ 1402.843633][T18857] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1402.855816][T16343] usb 3-1: USB disconnect, device number 24 [ 1402.862744][T13866] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1402.873892][T18857] Node 1 Normal: 105*4kB (UME) 38*8kB (UME) 42*16kB (UME) 234*32kB (UME) 92*64kB (UME) 21*128kB (UME) 6*256kB (UM) 4*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3905076kB [ 1402.892881][T13866] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1402.907102][T18857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.916709][T18857] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1402.926127][T18857] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1402.939543][T18857] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1402.949362][T18857] 48804 total pagecache pages [ 1402.954079][T18857] 0 pages in swap cache [ 1402.958224][T18857] Free swap = 124996kB [ 1402.962488][T18857] Total swap = 124996kB [ 1402.966641][T18857] 2097051 pages RAM [ 1402.970445][T18857] 0 pages HighMem/MovableOnly [ 1402.986715][T18857] 424555 pages reserved [ 1403.021859][T18857] 0 pages cma reserved [ 1404.710877][T16362] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1404.781592][T19099] chnl_net:caif_netlink_parms(): no params data found [ 1404.900766][T16362] usb 1-1: Using ep0 maxpacket: 32 [ 1404.912245][T16362] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.947634][T16362] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1404.952731][T13866] Bluetooth: hci5: command tx timeout [ 1405.019463][T16362] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.087703][T16362] usb 1-1: Product: syz [ 1405.107882][T16362] usb 1-1: Manufacturer: syz [ 1405.130634][T16362] usb 1-1: SerialNumber: syz [ 1405.165824][T16362] usb 1-1: config 0 descriptor?? [ 1405.189403][T16362] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1405.620651][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.638184][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.658485][T19099] bridge_slave_0: entered allmulticast mode [ 1405.679562][T19099] bridge_slave_0: entered promiscuous mode [ 1405.710542][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.729529][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.748527][T19099] bridge_slave_1: entered allmulticast mode [ 1405.792639][T19099] bridge_slave_1: entered promiscuous mode [ 1405.892701][T16362] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1405.916313][T16362] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1405.982387][T18857] bridge0: port 3(syz_tun) entered disabled state [ 1406.053048][T18857] syz_tun (unregistering): left allmulticast mode [ 1406.083688][T18857] bridge0: port 3(syz_tun) entered disabled state [ 1406.121960][T16344] usb 1-1: USB disconnect, device number 28 [ 1406.833823][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.858823][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.029747][T13866] Bluetooth: hci5: command tx timeout [ 1407.164235][T19099] team0: Port device team_slave_0 added [ 1407.209152][T19099] team0: Port device team_slave_1 added [ 1409.210767][T13866] Bluetooth: hci5: command tx timeout [ 1410.045922][T19211] tipc: Started in network mode [ 1410.081187][T19211] tipc: Node identity 463bde205993, cluster identity 4711 [ 1410.086383][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3716'. [ 1410.099574][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3716'. [ 1410.117052][T19211] tipc: Enabled bearer , priority 0 [ 1410.151951][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.163637][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.194021][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.205876][T19212] syzkaller0: entered promiscuous mode [ 1410.211809][T19212] syzkaller0: entered allmulticast mode [ 1410.231963][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.239250][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.277178][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.318700][T19209] tipc: Resetting bearer [ 1410.415490][T19208] tipc: Resetting bearer [ 1410.498968][T19208] tipc: Disabling bearer [ 1410.568838][T19099] hsr_slave_0: entered promiscuous mode [ 1410.576010][T19099] hsr_slave_1: entered promiscuous mode [ 1410.582638][T19099] debugfs: 'hsr0' already exists in 'hsr' [ 1410.588648][T19099] Cannot create hsr debugfs directory [ 1411.467519][T13866] Bluetooth: hci5: command tx timeout [ 1412.720455][T19249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1412.777490][T19247] 8021q: VLANs not supported on ip_vti0 [ 1412.925677][T19255] loop3: detected capacity change from 0 to 512 [ 1412.964358][T19255] ext4: Unknown parameter 'oldalloc"data' [ 1413.045049][T19260] netlink: 'syz.4.3731': attribute type 3 has an invalid length. [ 1413.332234][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1413.332255][ T30] audit: type=1326 audit(1760483128.321:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.395990][T19268] netlink: 'syz.7.3734': attribute type 12 has an invalid length. [ 1413.412810][T19270] loop3: detected capacity change from 0 to 512 [ 1413.431513][ T30] audit: type=1326 audit(1760483128.351:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.500180][T19270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.528966][T19270] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.535876][ T30] audit: type=1326 audit(1760483128.351:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.691263][ T30] audit: type=1326 audit(1760483128.351:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.759805][T13290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.786357][ T30] audit: type=1326 audit(1760483128.361:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.823630][T19099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1413.850591][T19099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1413.876462][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 1413.887723][ T30] audit: type=1326 audit(1760483128.361:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.913377][T19099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1413.930323][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3737'. [ 1413.941284][ T30] audit: type=1326 audit(1760483128.361:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1413.978836][T19099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1414.019247][ T30] audit: type=1326 audit(1760483128.361:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1414.083908][ T30] audit: type=1326 audit(1760483128.361:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1414.190497][ T30] audit: type=1326 audit(1760483128.361:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19267 comm="syz.7.3734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66f638eec9 code=0x7ffc0000 [ 1414.283131][T19292] syz_tun (unregistering): left allmulticast mode [ 1414.318930][T19292] bridge0: port 3(syz_tun) entered disabled state [ 1414.465289][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3746'. [ 1414.523086][T19310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3746'. [ 1414.872696][T19099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1414.939797][T19099] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.001600][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.008830][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.929714][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.937318][T11761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.615153][T19099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.789337][T19099] veth0_vlan: entered promiscuous mode [ 1419.894316][T19099] veth1_vlan: entered promiscuous mode [ 1420.032465][T19410] netlink: 'syz.3.3784': attribute type 3 has an invalid length. [ 1420.124674][T19099] veth0_macvtap: entered promiscuous mode [ 1420.163613][T19099] veth1_macvtap: entered promiscuous mode [ 1420.251101][T19099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.318101][T19099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.145769][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.222569][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.280606][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.319003][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3779'. [ 1421.329630][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.581756][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.630683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.806769][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.822590][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1421.838687][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3790'. [ 1421.852159][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.859215][T19446] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1423.261580][T10809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.269709][T10809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1423.346770][T19450] netlink: 'syz.0.3798': attribute type 3 has an invalid length. [ 1423.631656][T19455] loop6: detected capacity change from 0 to 512 [ 1423.667336][T19455] EXT4-fs: Ignoring removed i_version option [ 1423.689173][T19455] EXT4-fs: Ignoring removed bh option [ 1423.728985][T19455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.765721][T19455] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.787676][T19474] 9pnet_fd: Insufficient options for proto=fd [ 1424.295997][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1424.313522][T19480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'. [ 1424.803031][T19099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.099932][T19492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1425.820605][T19494] ALSA: seq fatal error: cannot create timer (-19) [ 1425.840769][T19499] netlink: 'syz.6.3811': attribute type 3 has an invalid length. [ 1426.371471][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1426.371492][ T30] audit: type=1326 audit(1760483141.367:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1426.438175][ T30] audit: type=1326 audit(1760483141.397:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1426.498814][ T30] audit: type=1326 audit(1760483141.487:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1426.549634][ T30] audit: type=1326 audit(1760483141.517:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f510abc1785 code=0x7ffc0000 [ 1426.577348][ T30] audit: type=1326 audit(1760483141.487:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19520 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1426.675144][ T30] audit: type=1326 audit(1760483141.668:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19524 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1427.619179][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3830'. [ 1427.665776][T19542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.770827][T19542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.356746][T19557] bridge0: entered promiscuous mode [ 1430.293706][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.301537][T19582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.416528][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1431.473270][T19582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1431.974136][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3860'. [ 1432.762929][T19588] netlink: 'syz.2.3846': attribute type 12 has an invalid length. [ 1432.940934][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1433.022894][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.033084][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.756543][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.822306][ T30] audit: type=1326 audit(1760483148.801:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1433.916264][ T30] audit: type=1326 audit(1760483148.801:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1433.919849][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.977243][ T30] audit: type=1326 audit(1760483148.801:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.034742][ T30] audit: type=1326 audit(1760483148.811:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.078796][ T30] audit: type=1326 audit(1760483148.811:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.116251][ T30] audit: type=1326 audit(1760483148.811:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.154113][ T30] audit: type=1326 audit(1760483148.811:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.176897][ T30] audit: type=1326 audit(1760483148.811:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.247595][ T30] audit: type=1326 audit(1760483148.811:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.293583][ T30] audit: type=1326 audit(1760483148.811:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19642 comm="syz.6.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1434.403736][T19668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3874'. [ 1434.484261][T19668] IPVS: Error connecting to the multicast addr [ 1434.674906][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3879'. [ 1434.780823][T19680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3875'. [ 1434.796853][T19674] tipc: Started in network mode [ 1434.807482][T19674] tipc: Node identity 92ed021f1e14, cluster identity 4711 [ 1434.850643][T19674] tipc: Enabled bearer , priority 0 [ 1434.921910][T19679] syzkaller0: entered promiscuous mode [ 1434.958492][T19679] syzkaller0: entered allmulticast mode [ 1435.140228][T19674] tipc: Resetting bearer [ 1435.275420][T19673] tipc: Resetting bearer [ 1435.407907][T19696] loop6: detected capacity change from 0 to 512 [ 1435.463239][T19673] tipc: Disabling bearer [ 1435.483570][T19694] netlink: 'syz.0.3885': attribute type 12 has an invalid length. [ 1435.514172][T19696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.556864][T19696] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.848030][T19099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.445459][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3894'. [ 1438.447758][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3899'. [ 1439.531069][T19754] netlink: 'syz.6.3899': attribute type 1 has an invalid length. [ 1439.539463][T19754] netlink: 'syz.6.3899': attribute type 2 has an invalid length. [ 1440.209310][T19744] tipc: Enabled bearer , priority 0 [ 1440.513373][T19747] syzkaller0: entered promiscuous mode [ 1440.527328][T19747] syzkaller0: entered allmulticast mode [ 1440.595129][T19736] tipc: Resetting bearer [ 1440.887243][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1440.896724][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3908'. [ 1441.705192][ T5939] tipc: Node number set to 2365129247 [ 1441.763971][T19736] tipc: Disabling bearer [ 1442.727404][T19803] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1442.742455][T19803] ksmbd: Unknown IPC event: 4, ignore. [ 1443.771203][T19824] vlan2: entered promiscuous mode [ 1444.512781][T19170] bridge0: port 3(syz_tun) entered disabled state [ 1444.643352][T19170] syz_tun (unregistering): left allmulticast mode [ 1444.673199][T18287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1444.681639][T18287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1444.683255][T19170] bridge0: port 3(syz_tun) entered disabled state [ 1444.704790][T18287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1444.713019][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 1444.713035][ T30] audit: type=1326 audit(1760483159.717:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.753318][T18287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1444.775195][T18287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1444.790903][ T30] audit: type=1326 audit(1760483159.787:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.843404][ T30] audit: type=1326 audit(1760483159.787:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.868490][ T30] audit: type=1326 audit(1760483159.787:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.899814][ T30] audit: type=1326 audit(1760483159.787:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.922540][ T30] audit: type=1326 audit(1760483159.787:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1444.947003][ T30] audit: type=1326 audit(1760483159.787:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1445.095085][ T30] audit: type=1326 audit(1760483159.787:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1445.119751][ T30] audit: type=1326 audit(1760483159.787:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1445.146498][ T30] audit: type=1326 audit(1760483159.787:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19830 comm="syz.3.3924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1445.827075][T19834] chnl_net:caif_netlink_parms(): no params data found [ 1446.911246][T13866] Bluetooth: hci4: command tx timeout [ 1447.220299][T19834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.227533][T19834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.236992][T19834] bridge_slave_0: entered allmulticast mode [ 1447.251408][T19834] bridge_slave_0: entered promiscuous mode [ 1447.268079][T19834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.276741][T19834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.284172][T19834] bridge_slave_1: entered allmulticast mode [ 1447.302032][T19834] bridge_slave_1: entered promiscuous mode [ 1447.518437][T19898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3943'. [ 1448.290594][T19834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.353201][T19834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.774238][T19834] team0: Port device team_slave_0 added [ 1448.796080][T19834] team0: Port device team_slave_1 added [ 1448.952108][T19834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.965102][T19834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.995483][T19834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.006685][T13866] Bluetooth: hci4: command tx timeout [ 1449.015124][T19834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.026159][T19834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.061110][T19834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.153074][T19834] hsr_slave_0: entered promiscuous mode [ 1449.172911][T19834] hsr_slave_1: entered promiscuous mode [ 1449.196157][T19834] debugfs: 'hsr0' already exists in 'hsr' [ 1449.437995][T19834] Cannot create hsr debugfs directory [ 1450.014401][T19834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.173432][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1450.199563][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1450.276349][T19939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.392306][T19834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.446438][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1450.446470][ T30] audit: type=1326 audit(1760483165.449:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.6.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1450.475238][ T30] audit: type=1326 audit(1760483165.459:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.6.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1450.500140][ T30] audit: type=1326 audit(1760483165.459:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.6.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1450.523758][ T30] audit: type=1326 audit(1760483165.459:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.6.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1450.534070][T19939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.556751][ T30] audit: type=1326 audit(1760483165.479:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19946 comm="syz.6.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1450.611558][T19834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.647863][T16343] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1450.705707][T19939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.817864][T16343] usb 5-1: Using ep0 maxpacket: 32 [ 1450.838267][T16343] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1451.033941][T16343] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1451.053162][T19834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.096902][T16343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.117911][T13866] Bluetooth: hci4: command tx timeout [ 1451.160356][T16343] usb 5-1: Product: syz [ 1451.207682][T16343] usb 5-1: Manufacturer: syz [ 1451.281898][T16343] usb 5-1: SerialNumber: syz [ 1451.437881][T16343] usb 5-1: config 0 descriptor?? [ 1451.453584][T16343] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1451.486873][T19939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.801292][T11761] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.831073][T11761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.847747][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.856124][T19834] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1451.868292][T19834] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1451.893886][T19834] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1451.904598][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.923480][T19834] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1452.139497][T16343] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1452.160583][T16343] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 1452.174219][T16343] usb 5-1: USB disconnect, device number 11 [ 1452.316784][T19834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.353555][T19834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.369337][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.376529][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.536353][T11761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.543554][T11761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.683354][T19834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1452.694733][T19834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.794367][T19994] bond0: entered promiscuous mode [ 1452.799991][T19994] bond_slave_0: entered promiscuous mode [ 1452.805946][T19994] bond_slave_1: entered promiscuous mode [ 1452.826265][T19994] batadv0: entered promiscuous mode [ 1452.853323][T19994] hsr1: entered allmulticast mode [ 1452.858883][T19994] bond0: entered allmulticast mode [ 1452.866386][T19994] bond_slave_0: entered allmulticast mode [ 1452.872659][T19994] bond_slave_1: entered allmulticast mode [ 1452.879058][T19994] batadv0: entered allmulticast mode [ 1452.887783][T19994] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1452.992871][T20000] 8021q: VLANs not supported on ip6gre0 [ 1453.147566][T18287] Bluetooth: hci4: command tx timeout [ 1453.420020][T19834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.785335][T19834] veth0_vlan: entered promiscuous mode [ 1454.821523][T19834] veth1_vlan: entered promiscuous mode [ 1454.917374][T19834] veth0_macvtap: entered promiscuous mode [ 1454.944015][T19834] veth1_macvtap: entered promiscuous mode [ 1455.030705][T19834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.082640][T19834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.127090][T20052] 8021q: VLANs not supported on ip6gre0 [ 1455.148467][ T6050] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.179135][ T6050] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.223017][ T6050] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.252829][ T6050] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.631573][T20056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3991'. [ 1456.565642][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.573506][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1456.708999][T11761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1456.755672][T11761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1457.188640][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1457.209309][T20081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4001'. [ 1457.287525][T20086] 8021q: VLANs not supported on ip6gre0 [ 1457.966336][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'. [ 1457.986285][ T30] audit: type=1326 audit(1760483172.973:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20115 comm="syz.6.4018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa48938eec9 code=0x0 [ 1457.987088][T20119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4019'. [ 1458.045471][T20123] xt_policy: output policy not valid in PREROUTING and INPUT [ 1458.074761][T20122] 8021q: VLANs not supported on ip6gre0 [ 1458.877381][T20150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4027'. [ 1458.917216][T20150] netlink: 'syz.4.4027': attribute type 1 has an invalid length. [ 1458.925094][T20150] netlink: 'syz.4.4027': attribute type 2 has an invalid length. [ 1460.097090][T20156] loop6: detected capacity change from 0 to 1024 [ 1460.120369][T20156] EXT4-fs: Ignoring removed oldalloc option [ 1460.183965][T20156] EXT4-fs: Ignoring removed bh option [ 1460.217913][T20156] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1460.471905][T19099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.639508][T20174] loop6: detected capacity change from 0 to 512 [ 1460.689763][T20174] journal_path: Non-blockdev passed as './bus' [ 1460.708905][T20174] EXT4-fs: error: could not find journal device path [ 1461.680752][T20199] veth0_to_team: entered promiscuous mode [ 1462.722271][T20205] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1463.674841][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1463.691363][T20235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1466.661453][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4083'. [ 1466.677050][T20286] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4083'. [ 1468.654933][T20302] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1470.028734][T13866] Bluetooth: hci2: command 0x0406 tx timeout [ 1472.829774][T20356] netlink: 'syz.0.4110': attribute type 12 has an invalid length. [ 1473.573979][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 1473.588588][T20375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4117'. [ 1474.331857][T20372] tipc: Enabled bearer , priority 0 [ 1474.455750][T20366] tipc: Resetting bearer [ 1477.731271][T20419] netlink: 'syz.0.4129': attribute type 27 has an invalid length. [ 1478.854626][T20366] tipc: Disabling bearer [ 1478.869904][T20401] bridge0: entered promiscuous mode [ 1479.019743][T20409] bridge_slave_0: left allmulticast mode [ 1479.041135][T20409] bridge_slave_0: left promiscuous mode [ 1479.052252][T20409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.067749][T20409] bridge_slave_1: left allmulticast mode [ 1479.076981][T20409] bridge_slave_1: left promiscuous mode [ 1479.085370][T20409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.105915][T20409] bond0: (slave bond_slave_0): Releasing backup interface [ 1479.129165][T20409] bond0: (slave bond_slave_1): Releasing backup interface [ 1479.170721][T20409] team0: Port device team_slave_0 removed [ 1479.187340][T20409] team0: Port device team_slave_1 removed [ 1479.204160][T20409] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1479.466366][T20419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.474202][T20419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.642567][T20453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1481.247480][T20419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1481.277267][T20419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1481.488632][T20463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4141'. [ 1481.513662][T20419] hsr1: left allmulticast mode [ 1481.518577][T20419] bond0: left allmulticast mode [ 1481.523585][T20419] bond_slave_0: left allmulticast mode [ 1481.529172][T20419] bond_slave_1: left allmulticast mode [ 1481.540550][T20419] batadv0: left allmulticast mode [ 1481.590270][T20420] bridge0: left promiscuous mode [ 1481.604065][T20420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.613915][T20420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.625740][T20420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1481.698604][ T6007] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.723202][ T6007] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.731598][ T6007] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.764264][ T6007] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.813999][T20468] netlink: 'syz.0.4142': attribute type 12 has an invalid length. [ 1482.293113][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4145'. [ 1482.887209][T20481] sd 0:0:1:0: device reset [ 1483.083169][T20486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1483.134104][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4150'. [ 1483.157558][T20488] tipc: Enabled bearer , priority 0 [ 1483.199531][T20488] syzkaller0: entered promiscuous mode [ 1483.216125][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.222468][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1483.238996][T20488] syzkaller0: entered allmulticast mode [ 1484.192514][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4154'. [ 1484.221806][T20488] tipc: Resetting bearer [ 1484.228170][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4154'. [ 1484.269605][T20487] tipc: Resetting bearer [ 1484.318799][T20487] tipc: Disabling bearer [ 1484.412599][T20509] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4157'. [ 1484.600547][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.641455][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.666931][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.706275][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.719581][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.756458][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.800882][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.833149][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1484.864751][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1485.144994][T20531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4163'. [ 1485.863260][T16356] hid-generic 0003:0003:0000.0011: unknown main item tag 0x0 [ 1485.901507][T16356] hid-generic 0003:0003:0000.0011: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1486.380869][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1486.405575][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4167'. [ 1486.770275][ T5946] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1486.898989][T20550] unsupported nla_type 52263 [ 1486.939720][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 1486.971383][ T5946] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.997316][ T5946] usb 7-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1487.021073][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.029883][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4174'. [ 1487.043301][ T5946] usb 7-1: Product: syz [ 1487.062832][ T5946] usb 7-1: Manufacturer: syz [ 1487.087629][ T5946] usb 7-1: SerialNumber: syz [ 1487.103286][ T5946] usb 7-1: config 0 descriptor?? [ 1487.123585][ T5946] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1487.353964][ T30] audit: type=1326 audit(1760483203.381:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1487.402442][ T30] audit: type=1326 audit(1760483203.381:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1487.481096][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1487.493654][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4175'. [ 1487.548730][ T30] audit: type=1326 audit(1760483203.381:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1488.045165][ T30] audit: type=1326 audit(1760483203.381:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1488.237840][ T5946] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1488.247248][ T5946] gspca_pac7302 7-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1488.259918][ T30] audit: type=1326 audit(1760483203.381:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1488.289091][ T30] audit: type=1326 audit(1760483203.381:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1488.492062][ T30] audit: type=1326 audit(1760483203.381:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1488.514598][ T30] audit: type=1326 audit(1760483203.381:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1489.253561][ T30] audit: type=1326 audit(1760483203.381:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1489.319104][T16343] usb 7-1: USB disconnect, device number 3 [ 1489.327692][ T30] audit: type=1326 audit(1760483203.381:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20564 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f510ab8eec9 code=0x7ffc0000 [ 1489.396893][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1489.496052][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1489.599538][T20594] loop6: detected capacity change from 0 to 512 [ 1489.655487][T20594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1489.786058][T20594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1489.814515][T20594] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1489.920263][T20603] bridge0: entered promiscuous mode [ 1490.203473][T19099] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.311011][T20602] netlink: 'syz.3.4187': attribute type 6 has an invalid length. [ 1490.352408][T20602] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4187'. [ 1490.541831][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4191'. [ 1491.024050][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 1491.817307][T16362] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1492.717407][T16362] usb 5-1: Using ep0 maxpacket: 32 [ 1492.724859][T16362] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.750500][T16362] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1492.768058][T16362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.870470][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1492.870492][ T30] audit: type=1326 audit(1760483208.893:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.005471][T16362] usb 5-1: Product: syz [ 1493.010255][ T30] audit: type=1326 audit(1760483208.923:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.067111][T16362] usb 5-1: Manufacturer: syz [ 1493.071787][T16362] usb 5-1: SerialNumber: syz [ 1493.079606][T16362] usb 5-1: config 0 descriptor?? [ 1493.086957][ T30] audit: type=1326 audit(1760483208.923:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.112681][T16362] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1493.193193][ T30] audit: type=1326 audit(1760483208.923:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.328117][T20647] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.365817][ T30] audit: type=1326 audit(1760483208.923:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.411295][ T30] audit: type=1326 audit(1760483208.933:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.434016][ T30] audit: type=1326 audit(1760483208.933:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.462814][ T30] audit: type=1326 audit(1760483208.933:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.486538][ T30] audit: type=1326 audit(1760483208.933:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.529413][ T30] audit: type=1326 audit(1760483208.933:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20641 comm="syz.7.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a79d8eec9 code=0x7ffc0000 [ 1493.705071][T20647] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.782944][T20662] netlink: 'syz.2.4209': attribute type 12 has an invalid length. [ 1493.796543][T16362] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1493.807655][T16362] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1493.901690][T20647] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.952041][T20459] usb 5-1: USB disconnect, device number 12 [ 1494.060579][T20667] __nla_validate_parse: 1 callbacks suppressed [ 1494.060632][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 1494.217449][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4210'. [ 1494.219463][T20647] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.200185][ T6007] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.227756][ T6007] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.503622][ T130] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.527726][T18287] Bluetooth: hci3: command 0x0406 tx timeout [ 1495.537171][ T130] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.794195][T20719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1499.971078][T20728] geneve0: entered allmulticast mode [ 1501.805302][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 1501.805346][ T30] audit: type=1326 audit(1760483217.828:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20771 comm="syz.6.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1502.205010][ T30] audit: type=1326 audit(1760483217.888:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20771 comm="syz.6.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1502.228090][ T30] audit: type=1326 audit(1760483217.918:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20771 comm="syz.6.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1502.258110][ T30] audit: type=1326 audit(1760483218.198:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20771 comm="syz.6.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1502.282215][ T30] audit: type=1326 audit(1760483218.198:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20771 comm="syz.6.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa48938eec9 code=0x7ffc0000 [ 1502.689993][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4258'. [ 1503.651594][T16362] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1503.781386][T16362] usb 7-1: device descriptor read/64, error -71 [ 1504.021215][T16362] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1504.041257][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1504.117012][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1504.326080][T20819] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4267'. [ 1504.942647][T16362] usb 7-1: device descriptor read/64, error -71 [ 1505.025683][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 1505.038831][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.051282][T16362] usb usb7-port1: attempt power cycle [ 1505.082851][ T5946] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1505.101597][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.119716][ T5946] usb 3-1: Product: syz [ 1505.124939][ T5946] usb 3-1: Manufacturer: syz [ 1505.135012][ T5946] usb 3-1: SerialNumber: syz [ 1505.148217][ T5946] usb 3-1: config 0 descriptor?? [ 1505.161728][ T5946] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1505.410598][T16362] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1505.444905][T16362] usb 7-1: device descriptor read/8, error -71 [ 1506.496454][ T5946] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 1506.520120][ T5946] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1507.953417][T16362] usb 3-1: USB disconnect, device number 25 [ 1507.994229][T20852] loop6: detected capacity change from 0 to 512 [ 1508.039578][T20852] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1508.126163][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1508.316960][T20860] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4280' sets config #1 [ 1508.331445][T20864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1508.530315][ T6007] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1510.168494][T20900] netlink: 'syz.7.4291': attribute type 12 has an invalid length. [ 1511.111490][T20909] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1514.303270][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4313'. [ 1515.600834][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1515.615374][T20967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4315'. [ 1516.321778][T20966] ------------[ cut here ]------------ [ 1516.327421][T20966] WARNING: CPU: 1 PID: 20966 at fs/nsfs.c:493 nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.336160][T20966] Modules linked in: [ 1516.340065][T20966] CPU: 1 UID: 0 PID: 20966 Comm: syz.7.4316 Not tainted syzkaller #0 PREEMPT(full) [ 1516.349535][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1516.359706][T20966] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.365500][T20966] Code: 64 24 40 e9 41 f8 ff ff e8 d7 e3 78 ff 90 0f 0b 90 e9 64 f6 ff ff e8 c9 e3 78 ff 90 0f 0b 90 e9 ab f6 ff ff e8 bb e3 78 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 ad e3 78 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 1516.385415][T20966] RSP: 0018:ffffc90004ebfa40 EFLAGS: 00010283 [ 1516.392305][T20966] RAX: ffffffff82476035 RBX: 00000000f0000014 RCX: 0000000000080000 [ 1516.400983][T20966] RDX: ffffc90015233000 RSI: 0000000000000044 RDI: 0000000000000045 [ 1516.409039][T20966] RBP: ffffc90004ebfb10 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 1516.417224][T20966] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8247551c [ 1516.425320][T20966] R13: dffffc0000000000 R14: ffff88807d67a694 R15: 0000000000000000 [ 1516.433305][T20966] FS: 00007f8a7acb76c0(0000) GS:ffff888125e0c000(0000) knlGS:0000000000000000 [ 1516.442357][T20966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1516.449034][T20966] CR2: 0000001b33721ff8 CR3: 000000005f08a000 CR4: 0000000000350ef0 [ 1516.457044][T20966] Call Trace: [ 1516.460360][T20966] [ 1516.463302][T20966] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 1516.468840][T20966] exportfs_decode_fh_raw+0x178/0x6e0 [ 1516.474239][T20966] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1516.480421][T20966] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1516.486440][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.492097][T20966] do_handle_to_path+0xa4/0x1a0 [ 1516.497729][T20966] do_handle_open+0x6b4/0x8f0 [ 1516.502427][T20966] ? _raw_spin_unlock_irq+0x23/0x50 [ 1516.508335][T20966] ? __pfx_do_handle_open+0x10/0x10 [ 1516.513566][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.519259][T20966] ? rcu_is_watching+0x15/0xb0 [ 1516.524051][T20966] ? do_syscall_64+0xbe/0xfa0 [ 1516.528784][T20966] do_syscall_64+0xfa/0xfa0 [ 1516.533298][T20966] ? lockdep_hardirqs_on+0x9c/0x150 [ 1516.538534][T20966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.544608][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.550296][T20966] ? exc_page_fault+0xab/0x100 [ 1516.555170][T20966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.561070][T20966] RIP: 0033:0x7f8a79d8eec9 [ 1516.565540][T20966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.585188][T20966] RSP: 002b:00007f8a7acb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1516.593617][T20966] RAX: ffffffffffffffda RBX: 00007f8a79fe5fa0 RCX: 00007f8a79d8eec9 [ 1516.602385][T20966] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1516.611029][T20966] RBP: 00007f8a79e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1516.619037][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.627062][T20966] R13: 00007f8a79fe6038 R14: 00007f8a79fe5fa0 R15: 00007ffd55849de8 [ 1516.635150][T20966] [ 1516.638172][T20966] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1516.645453][T20966] CPU: 1 UID: 0 PID: 20966 Comm: syz.7.4316 Not tainted syzkaller #0 PREEMPT(full) [ 1516.654828][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1516.664885][T20966] Call Trace: [ 1516.668163][T20966] [ 1516.671094][T20966] dump_stack_lvl+0x99/0x250 [ 1516.675694][T20966] ? __asan_memcpy+0x40/0x70 [ 1516.680297][T20966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1516.685504][T20966] ? __pfx__printk+0x10/0x10 [ 1516.690110][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.695758][T20966] vpanic+0x237/0x6d0 [ 1516.699758][T20966] ? __pfx_vpanic+0x10/0x10 [ 1516.704281][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.709924][T20966] panic+0xb9/0xc0 [ 1516.713653][T20966] ? __pfx_panic+0x10/0x10 [ 1516.718088][T20966] __warn+0x31b/0x4b0 [ 1516.722075][T20966] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.727191][T20966] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.732302][T20966] report_bug+0x2be/0x4f0 [ 1516.736621][T20966] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.741737][T20966] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.746848][T20966] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 1516.751958][T20966] handle_bug+0x84/0x160 [ 1516.756200][T20966] exc_invalid_op+0x1a/0x50 [ 1516.760701][T20966] asm_exc_invalid_op+0x1a/0x20 [ 1516.765548][T20966] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 1516.771266][T20966] Code: 64 24 40 e9 41 f8 ff ff e8 d7 e3 78 ff 90 0f 0b 90 e9 64 f6 ff ff e8 c9 e3 78 ff 90 0f 0b 90 e9 ab f6 ff ff e8 bb e3 78 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 ad e3 78 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 1516.790863][T20966] RSP: 0018:ffffc90004ebfa40 EFLAGS: 00010283 [ 1516.796925][T20966] RAX: ffffffff82476035 RBX: 00000000f0000014 RCX: 0000000000080000 [ 1516.804891][T20966] RDX: ffffc90015233000 RSI: 0000000000000044 RDI: 0000000000000045 [ 1516.812858][T20966] RBP: ffffc90004ebfb10 R08: ffffffff8f9e1177 R09: 1ffffffff1f3c22e [ 1516.820824][T20966] R10: dffffc0000000000 R11: fffffbfff1f3c22f R12: ffffffff8247551c [ 1516.828790][T20966] R13: dffffc0000000000 R14: ffff88807d67a694 R15: 0000000000000000 [ 1516.836758][T20966] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 1516.841875][T20966] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 1516.846995][T20966] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 1516.852467][T20966] exportfs_decode_fh_raw+0x178/0x6e0 [ 1516.857841][T20966] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 1516.863659][T20966] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 1516.869599][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.875237][T20966] do_handle_to_path+0xa4/0x1a0 [ 1516.880099][T20966] do_handle_open+0x6b4/0x8f0 [ 1516.884778][T20966] ? _raw_spin_unlock_irq+0x23/0x50 [ 1516.889988][T20966] ? __pfx_do_handle_open+0x10/0x10 [ 1516.895193][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.900825][T20966] ? rcu_is_watching+0x15/0xb0 [ 1516.905614][T20966] ? do_syscall_64+0xbe/0xfa0 [ 1516.910293][T20966] do_syscall_64+0xfa/0xfa0 [ 1516.914791][T20966] ? lockdep_hardirqs_on+0x9c/0x150 [ 1516.919979][T20966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.926037][T20966] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1516.931684][T20966] ? exc_page_fault+0xab/0x100 [ 1516.936447][T20966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.942334][T20966] RIP: 0033:0x7f8a79d8eec9 [ 1516.946739][T20966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.966338][T20966] RSP: 002b:00007f8a7acb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1516.974750][T20966] RAX: ffffffffffffffda RBX: 00007f8a79fe5fa0 RCX: 00007f8a79d8eec9 [ 1516.982726][T20966] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1516.990687][T20966] RBP: 00007f8a79e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1516.998662][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1517.006628][T20966] R13: 00007f8a79fe6038 R14: 00007f8a79fe5fa0 R15: 00007ffd55849de8 [ 1517.014618][T20966] [ 1517.017838][T20966] Kernel Offset: disabled [ 1517.022152][T20966] Rebooting in 86400 seconds..