last executing test programs: 4m32.220412251s ago: executing program 4 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fstatfs(0xffffffffffffffff, 0x0) 4m30.939919318s ago: executing program 4 (id=116): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m29.038726855s ago: executing program 4 (id=121): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) eventfd(0x800a6) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x800404, &(0x7f00000003c0)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}, {@data_writeback}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 4m23.298621529s ago: executing program 4 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b7000000000000f84d0a0000000000001d00feff00000000950000000000000060d5bc92d6972de659a61c5cbf963630974eb2ad35725d4301e2d17ee4a50494cab61467197352df267a43501784bd57bcedf7f5829a0fea5ba3102671eab68a75df5185be857a8ff0dbed3396be47a4eaa45e5bb9ff748d68f28c0a20dbd6228c22e48fa4da0bd9c73371ce31e555c1d0a76a833b009cbb66c42474497845db4b"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m18.644269389s ago: executing program 4 (id=135): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 4m17.186281919s ago: executing program 4 (id=139): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='u', 0x1) 4m1.5287685s ago: executing program 32 (id=139): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000380)='u', 0x1) 3m45.47538911s ago: executing program 0 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000380)={0x2, 0x0, [{0x4, 0x8bc8, 0x0, 0x3, 0xf, 0x310, 0x99}, {0x80000019, 0x1, 0x4, 0x3, 0x7, 0x3, 0x2}]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000, 0x4, 0x4, 0xf89f, 0x7, 0xf, 0x120000, 0x845, 0x1, 0x8, 0x8000000000000000, 0x2, 0x0, 0xfd, 0x6, 0x1], 0x8000000, 0x1200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0x1, 0x8, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.570791908s ago: executing program 0 (id=193): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x3014850, &(0x7f00000001c0), 0x3, 0x4d5, &(0x7f0000000680)="$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") socketpair$tipc(0x1e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open(0x0, 0x14973e, 0x31) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0000", @ANYRES32=r7, @ANYBLOB="08000100e000000208000200ffffffff08000400ac1414aa080004009d1414aa08000a000100200008000200"], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @local}}) 3m42.490906969s ago: executing program 0 (id=198): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$eJzs3QuYjtX6MPB1r7UexjTxNslhWPe6H940WCZJckiSQ5IkSZJTQtIkSUJiyCkJSchxkhyGkBwmJo3z+ZBz0mRLkiSnnML6rqndtve//b/s/e39//y/Pffvutb1rvtaz72etd6beZ/nuebwQ9fhtZrUrt6IiMS/BH57SRFCxAghBgkh8gkhAiFE+fjy8dnjeRSk/GsnYf9ej6Zd6xWwa4nrn7Nx/XM2rn/OxvXP2bj+ORvXP2fj+udsXH/GcrKtMwvfwC3ntn/9+X/Mby/8/P//Q/z5n7Nx/f/TnM7zzxzN9f9Pctl7/89lcP1zNq5/zsb1z9m4/jkb1z9n4/ozlpNd6+fP3K5tu9b//hhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Qzn/BVaCPF7/1qvizHGGGOMMcYYY/8+Pve1XgFjjDHGGGOMMcb+54GQQgktApFL5BYxIo+IFdeJOHG9yCvyiYi4QcSLG0V+cZMoIAqKQqKwSBBFRFFhBAorSISimCguouJmUULcIhJFSVFKlBZOlBFJ4lZRVtwmyonbRXlxh6gg7hQVRSVRWVQRd4mq4m5RTdwjqot7RQ1RU9QStcV9oo64X9QVD4h64kFRXzwkGoiHRUPxiGgkHhWNxWOiiXhcNBVPiGaiuWghWopW/1f5r4ie4lXRS/QWKaKP6CteE/1EfzFADBSDxOtisHhDDBFviqFimBgu3hIjxNtipHhHjBKjxRjxrhgrxonxYoKYKCaJVPGemCzeF1PEB2KqmCamixkiTcwUs8SHYraYI+aKj8Q88bGYLxaIhWKRSBefiMViicgQn4ql4jORKZaJ5WKFWClWidVijVgr1on1YoPYKDaJzWKL2Co+F9vEdrFD7BS7xG6xR3wh9oovxT7xlcgSX/+T+Wf/S343ECBAggQNGnJBLoiBGIiFWIiDOMgLeSECEYiHeMgP+aEAFIBCUAgSIAGKQlFAQCAgKAbFIApRKAElIBESoRSUAgcOkiAJysJtUA7KQXkoDxWgAlSESlAJqkAVqApVoRpUg+pQHWpADagFteA+uA/uh7pQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIRk6QkfoBJ2gM3SGLtAFukJX6AbdoTu8Aq/Aq/Aq9IYasg/0hb7QD/rBABgIA+F1GAxvwBvwJgyFYTAc3oK34G0YCWdgFIyGMTAGqspxMB4mAMlJkAqpMBkmwxSYAlNhGkyDGZAGM2EWzILZMAfmwEcwDz6Gj2EBLIBFkA7psBiWQAZkwFI4C5mwDJbDClgJq2AlrIG1sAbWwwZYD5tgE2yBLfA5fA7bYTvshJ2wG3bDF/AFfAlfwlDIgizYD/vhAByAg3AQDsEhOAyH4QgcgaNwFI7BMTgOJ+AknIDTcBrOwFk4B+fgAlyAi3ARLsPl7P/8MpuWWuaSuWSMjJGxMlbGyTiZV+aVERmR8TJe5pf5ZQFZQBaShWSCTJBFZVGJEiXJUBaTxWRURmUJWUImykRZSpaSTjqZJJNkWVlWlpPlZHl5h6wg75QVZSXZ1lWRVWRV2c5Vk/fI6rK6rCFrylqytqwt68g6sq6sK+vJerK+rC8byIdlQ9kHBsCjMrsyTeQwaCqHQzPZXLaQLeXb8KRsLUdCG9lWtpNPy9EwCjrI1i5ZPic7yvHQSb4gJ8CLsoucBF3ly7Kb7C57yFdkT9nG9ZK95VToI/vKGdBP9pcD5EA5G2rK7IrVkm/KoXKYHC7fkovgbTlSviNHydFyjHxXjpXj5Hg5QU6Uk2SqfE9Olu/LKfIDOVVOk9PlDJkmZ8pZ8kM5W86Rc+VHcp78WM6XC+RCuUimy0/kYrlEZshP5VL5mcyUy+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVulZ/LbXK73CF3yl1yt9wjv5B75Zdyn/xKZsmv5X75J3lAfiMPym/lIfmdPCy/l0fkD/Ko/FEekz/J4/KEPClPydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaByqdwqRuVRseo6FaeuV3lVPhVRN6h4daPKr25SBVRBVUgVVgmqiCqqjEJlFalQFVPFVVTdrEqoW1SiKqlKqdLKqTIqSd2qyqrbVDl1uyqv7lAV1J2qoqqkKqsq6i5VVd2tqql7VHV1r6qhaqpaqra6T9VR96u66gFVTz2o6quHVAP1sGqoHlGN1KOqsXpMNVGPq6bqCdVMNVctVEvVSj2pWqunVBvVVrVTT6v26hnVQT2rktVzqqN6XnVSL6jO6kXVRb2kuqqXVTfVXfVQl9Rl5VUv1VulqD6qr3pN9VP91QA1UA1Sr6vB6g01RL2phqpharh6S41Qb6uR6h01So1WY9S7aqwap8arCWqimqRS1XtqsnpfTVEfqKlqmpquZqg0NVMN+PNMc/+B/Pf/Tv6QX8++RW1Vn6ttarvaoXaqXWq32qP2qL1qr9qn9qkslaX2q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqsT6rw6pU6rn9UZdVadVefVBXVBXfzzeyA0aKmV1jrQuXRuHaPz6Fh9nY7T1+u8Op+O6Bt0vL5R59c36QK6oC6kC+sEXUQX1Uajtpp0qIvp4jqqb9Yl9C06UZfUpXRp7XQZnaRv/Zfzr7a+VrqVbq1b6za6jW6n2+n2ur3uoDvoZJ2sO+qOupPupDvrzrqL7qK76q66m+6me+geuqfuqb0QIkWn6L76Nd1P99cD9EA9SL+uB+vBeogeoofqoXq4Hq5H6BF6pB6pR+lReoweo8fqsXq8Hq8n6ok6VafqyXqynqKn6Kl6qp6up+s0naZn6Vl6tp6t5+q5ep6ep+fr+XqhXqjTdbperBfrDJ2hl+qlOlMv08v0Cr1Cr9Kr9Bq9Rq/T6/QGvUFv0pt0pv79GzR36B16l96l9+g9eq/eq/fpfTpLZ+n9er8+oA/og/qgPqQP6cP6sD6ij+ij+qg+po/p4/q4PqlP6tP6tD6jz+hz+py+oC/oi/qivqwvZ1/2BTKQgQ50kCvIFcQEMUFsEBvEBXFB3iBvEAkiQXwQH+QPbgoKBAWDQkHhICEoEhQNTICBDSgIg2JB8SAa3ByUCG4JEoOSQamgdOCCMkFScGtQNrgtKBfcHpQP7ggqBHcGFYNKQeWgSnBXUDW4O6gW3BNUD+4NagQ1g1pB7eC+oE5wf1A3eCCoFzwY1A8eChoEDwcNg0eCRsGjQePgsaBJ8HjQNHgiaBY0D1oELYNW/9b5vT9T8CnXy/Q2KaaP6WteM/1MfzPADDSDzOtmsHnDDDFvmqFmmBlu3jIjzNtmpHnHjDKjzRjzrhlrxpnxZoKZaCaZVPOemWzeN1PMB2aqmWammxkmzcw0s8yHZraZY+aaj8w887GZbxaYhWaRSTefmMVmickwn5ql5jOTaZaZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wo+N9vMdrPD7DS7zG6zx3xh9povzT7zlckyX5v95k/mgPnGHDTfmkPmO3PYfG+OmB/MUfOjOWZ+MsfNCXPSnDKnzc/mjDlrzpnz5oL5xVw0l8xl47Mv7rM/3lGjxlyYC2MwBmMxFuMwDvNiXoxgBOMxHvNjfiyABbAQFsIETMCiWBSzERIWw2IYxSiWwBKYiIlYCkuhQ4dJmIRlsSyWw3JYHstjBayAFbEiVsbs+5G78G68G+/Be/BevBdrYk2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsgS2wFbbC1tga22AbbIftsD22xw7YAZMxGTtiR+yEnbAzdsYu2AW7Ylfsht2wB/bAntgTe2EvTMEU7It9sR/2wwE4AAfhIByMg3EIDsGhOBSH43AcgSNwJI7EUTgax+C7OBbH4XicgBNxEqZiKk7GyTgFp+BUnIrTcTqmYRrOwlk4G2fjXJyL83Aezsf5uBAXYjqm42JcjBmYgUtxKWZiJi7H5bgSV+JqXI1rcS2ux/W4ETfiZtyMW3ErbsNtuAN34C7chXtwD+7FvbgP92EWZuF+3I8H8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8DifxJJ7G03gGz+A5PIcX8Be8iJfwMnqMsXlsrL3OxtnrbV6bz8bYPL2FEH+JC9nCNsEWsUWtsQVswb+J0VqbaEvaUra0dbaMTbK3/iGuaCvZyraKvctWtXfban+I69j7bV37gK1nH7S17X1/E9e3D9kG9nHb0D5hG9nmtrFtaZvYx21T+4RtZpvbFralbW+fsR3sszbZPmc72uf/EC+2S+xau86utxvsXvulPWfP2yP2B3vB/mJ72d52kH3dDrZv2CH2TTvUDvtDPMa+a8facXa8nWAn2kl/iKfbGTbNzrSz7Id2tp3zhzjdfmLn2Qw73y6wC+2iX+PsNWXYT+1S+5nNtMvscrvCrrSr7Gq75i9rXWE32c12i91jv7Db7Ha7w+60u+zuX+PsfeyzX9ks+7U9bL+3B+w39qA9ag/Z736Ns/d31P5oj9mf7HF7wp60p+xp+7M9Y8/+uv/svZ+yl+xl660gIEmKNAWUi3JTDOWhWLqO4uh6ykv5KEI3UDzdSPnpJipABakQFaYEKkJFyRCSJaKQilFxitLNVIJuoUQqSaWoNDkqQ0l0K5Wl26gc3U7l6Q6qQHdSRapElakK3UVV6W6qRvdQdbqXalBNqkW16T6qQ/dTXXqA6tGDVJ8eogb0MDWkR6gRPUqN6TFqQo9TU3qCmlFzakEtqRU9Sa3pKWpDbakdPU3t6RnqQM9SMj1HHel56kQvUGd6kbrQS9SVXqZu1J160CvUk16lXtSbUqgP9aXXqB/1pwE0kAbR6zSY3qAh9CYNpWE0nN6iEfQ2jaR3aBSNpjH0Lo2lcTSeJtBEmkSp9B5NpvdpCn1AU2kaTacZlEYzaRZ9SLNpDs2lj2gefUzzaQEtpEWUTp/QYlpCGfQpLaXPKJOW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6nbbSddtBO2kW7aQ99QXvpS9pHX1EWfU376U90gL6hg/QtHaLv6DB9T0foBzpKP9Ix+omO0wk6SafoNP1MZ+gsnaPzdIF+oYt0iS6TJxFCKEMV6jAIc4W5w5gwTxgbXhfGhdeHecN8YSS8IYwPbwzzhzeFBcKCYaGwcJgQFgmLhibE0IYUhmGxsHgYDW8OS4S3hIlhybBUWDp0YZkwKbw1LBveFpYLbw/Lh3eEFcI7w4phpbByWCW8K6wa3h1WC+8Jq4f3hjXCmmGtsHZ4X1gnvD+sGz4Q1gsfDMuFD4UNwofDhuEjYaPw0bBx+FjYJHw8bBo+ETYLm4ctwpZhq/DJsHX4VNgmbBu2C58O24fPhB3CZ8Pk8LmwY/j8VcdTwj5h3/C18LXQ+wfUwuiiaHr0k+ji6JJoRvTT6NLoZ9HM6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kbo5uiWqPe1cwsHTjrltAtcLpfbxbg8LtZd5+Lc9S6vy+ci7gYX7250+d1NroAr6Aq5wi7BFXFFnXHorCMXumKuuIu6m10Jd4tLdCVdKVfaOVfGJbmWrpVr5Vq7p1wb19a1c0+7p90z7hn3rHvWPec6uuddJ/eC6+xedF3cS+4l97Lr5rq7Hu4V19O96nq53i7Fpbi+rq/r5/q5AW6AG+QGucFusBvihrihbqgb7oa7EW6EG+lGulFulBvjxrixbqwb78a7iW6iS3WpbrKb7Ka4KW6qm+qmu+kuzaW5WW6Wm+1mu7lurpvn5rn5br5b6Ba6dJfuFrvFLsNluKVuqct0mW65W+5WupVutVvt1rq1br1b7za6jW6z2+y2uq1um9vmdrgdbpfb5fa4PW6v2+v2uX0uy2W5/W6/O+AOuIPuW3fIfecOu+/dEfeDO+p+dMfcT+64O+FOulPutPvZnXFn3Tl33l1wv7iL7pK77LxLjbwXmRx5PzIl8kFkamRaZHpkRiQtMjMyK/JhZHZkTmRu5KPIvMjHkfmRBZGFkUWR9MgnkcWRJZGMyKeRpZHPIpmRZZHlkRWRlZFVEe+LbAt9MV/cR/3NvoS/xSf6kr6UL+2dL+OT/K2+rL/Nl/O3+/L+Dl/B3+kr+kq+sn/CN/PNfQvf0rfyT/rW/infxrf17fzTvr1/xnfwz/pk/5zv6J/3nfwLvrN/0XfxL/mu/mXfzXf3Pfwrvqd/1ffyvX2K7+P7+td8P9/fD/AD/SD/uh/s3/BD/Jt+qB/mh/u3/Aj/th/p3/Gj/Gg/xr/rx/pxfryf4Cf6ST7Vv+cn+/f9FP+Bn+qn+el+hk/zM/0s/6Gf7ef4uf4jP89/7Of7BX6hX+TT/Sd+sV/iM/ynfqn/zGf6ZX65X+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+s/9Nr/d7/A7/S6/2+/xX/i9/ku/z3/ls/zXfr//kz/gv/EH/bf+kP/OH/bf+yP+B3/U/+iP+Z/8cX/Cn/Sn/Gn/sz/jz/pz/ry/4H/xF/0lf5l/Zo0xxhhj7B+irjLe57/JkX/u9xVCXL+98KH/Or6xwG/9/rkT2keEEM/17vro761GjZSUlD8fm6lEUHyBECJyJT+XuBIvE+3EMyJZtBVl/zIe81fn6i+7X6CrzB+9Q4jYv8rJzv89vjL/bX93//3luHlXnX+BEInFr+TkEVfiK/OX+2/mL9j6KvPn+SZViDZ/lRMnrsRX5k8ST4nnRfLfHMkYY4wxxhhjjP2mv6zc+Wr3t9n35wn6Sk5ucSX+e/fnjDHGGGOMMcYY+9/lxe49nn0yObltZ+78T3V8vt/e6v8t6+EOd/6BzrX+ysQYY4wxxhj7d7ty0X+tV8IYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOVc/y9+ndjv57ra3xpkjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG/lP9nwAAAP//sjE7Eg==") mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x54, 0xcd, 0xee, 0x40, 0x7fd, 0x4, 0xb9bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x7e, 0xb3}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x46) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setrlimit(0x8, &(0x7f0000000180)={0x2, 0x100000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) 3m37.849855803s ago: executing program 0 (id=205): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, r0, 0x0, 0xfffe82) 3m35.865326572s ago: executing program 0 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0}}, 0x404c080) openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x8, 0x1ff, 0x1, 0xffffff80, 0x2, 0x0, [{0xdf, 0x9, 0x0, '\x00', 0x2100}, {0xe34, 0x1, 0x0, '\x00', 0x2}]}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) 3m30.18940543s ago: executing program 0 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f0000000340)}, 0x20) mkdir(0x0, 0x101) pipe2$9p(0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a000100000000000000000002000000000000000000000006001d00ff"], 0x24}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x101442, 0x189) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400) 3m9.144288941s ago: executing program 33 (id=215): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f0000000340)}, 0x20) mkdir(0x0, 0x101) pipe2$9p(0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYBLOB, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a000100000000000000000002000000000000000000000006001d00ff"], 0x24}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x101442, 0x189) write$binfmt_format(r6, &(0x7f0000000000)='1\x00', 0x2400) 2m28.076004641s ago: executing program 2 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, 0x0, &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m27.068158295s ago: executing program 2 (id=274): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000005ac0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "856cedad"}]}}, 0x0}, 0x0) 2m22.653847517s ago: executing program 2 (id=279): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000340)=""/165, 0xa5}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r3, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9c95d92fb38675804c202fc0eff33e80ef86752be9b58ab9f96a77d875fd1fec3cbd729b93ed0", 0x7b}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 2m15.202092823s ago: executing program 2 (id=282): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x3, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m11.342523915s ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000be0000000000000000000061186800000000009500000000800000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r7}, 0x10) fcntl$lock(r7, 0x26, &(0x7f0000000000)) close_range(r6, 0xffffffffffffffff, 0x0) 2m10.184687802s ago: executing program 2 (id=288): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x1ba, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x180) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 1m54.490029889s ago: executing program 34 (id=288): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x1ba, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x180) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xfff2, 0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000000}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 40.504059313s ago: executing program 1 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) time(0x0) 39.756604493s ago: executing program 1 (id=390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 38.594474839s ago: executing program 1 (id=391): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 38.102123673s ago: executing program 1 (id=392): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x18) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 37.677006422s ago: executing program 1 (id=393): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(r3) 35.299469259s ago: executing program 1 (id=396): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='stat\x00') lseek(r3, 0x9, 0x0) 19.123589728s ago: executing program 35 (id=396): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000500)='stat\x00') lseek(r3, 0x9, 0x0) 11.769670691s ago: executing program 6 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000000000007000000080000000000004805000000090000000000000001000000060000001100016de9271ecd"]) 10.485896524s ago: executing program 6 (id=415): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff017f000e080039503230"], 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.184290548s ago: executing program 6 (id=416): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001bc0)=@newtaction={0x14, 0x30, 0xffff, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8.006996641s ago: executing program 7 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x2931890e, r0}, 0x33) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) times(0x0) 7.881755588s ago: executing program 6 (id=417): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4d800, 0xa089}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000010801"], 0x4c}}, 0x0) 7.878391165s ago: executing program 5 (id=169): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) 7.361940094s ago: executing program 3 (id=418): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000001, 0x13, r0, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xc397e) 7.009906529s ago: executing program 5 (id=419): openat(0xffffffffffffffff, 0x0, 0xe00c2, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x4) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x20, 0x0, 0xc21, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x800) bind$netlink(r7, &(0x7f0000000240), 0xc) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 6.529113577s ago: executing program 6 (id=420): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000740)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@noquota}, {@disable_roll_forward}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fastboot}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x0, 0x5505, &(0x7f0000002480)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r0, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 6.406010828s ago: executing program 3 (id=421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 4.730350286s ago: executing program 3 (id=422): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2804458, &(0x7f0000003b80), 0x1, 0x502, &(0x7f0000000240)="$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") 3.181830165s ago: executing program 5 (id=423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0x200000000006, 0x0, 0xcf, 0x7ffc1ff8}]}) timer_gettime(0x0, &(0x7f0000000840)) 3.032216243s ago: executing program 3 (id=424): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480), &(0x7f0000000500)=0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) 2.986204049s ago: executing program 7 (id=425): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) recvmmsg(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}}], 0x2, 0x140, 0x0) 2.169412863s ago: executing program 6 (id=426): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.943574597s ago: executing program 5 (id=427): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 1.09340063s ago: executing program 3 (id=428): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0xc) 461.796839ms ago: executing program 5 (id=429): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=430): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x40000000004) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 746317673.517:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.717702][ T30] audit: type=1326 audit(1746317673.617:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.741580][ T30] audit: type=1326 audit(1746317673.627:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.765469][ T30] audit: type=1326 audit(1746317673.627:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.789273][ T30] audit: type=1326 audit(1746317673.627:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.817067][ T30] audit: type=1326 audit(1746317673.657:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.844409][ T30] audit: type=1326 audit(1746317673.657:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.869442][ T30] audit: type=1326 audit(1746317673.677:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 303.894431][ T30] audit: type=1326 audit(1746317673.677:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 304.410918][ T6185] loop0: detected capacity change from 0 to 2048 [ 304.558937][ T6188] loop3: detected capacity change from 0 to 1024 [ 304.586845][ T6185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.601328][ T6185] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.618432][ T6188] EXT4-fs: Ignoring removed nobh option [ 304.624995][ T6188] EXT4-fs: Ignoring removed bh option [ 304.683966][ T6188] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 305.151057][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.572683][ T6210] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 307.875735][ T6212] loop1: detected capacity change from 0 to 1024 [ 307.966608][ T6212] EXT4-fs: Ignoring removed orlov option [ 308.079630][ T6212] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 308.356076][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.443419][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.376450][ T6232] loop0: detected capacity change from 0 to 2048 [ 313.885382][ T6144] loop0: p1 < > p3 [ 313.971381][ T6144] loop0: p3 size 134217728 extends beyond EOD, truncated [ 315.457886][ T6232] loop0: p1 < > p3 [ 315.520460][ T6232] loop0: p3 size 134217728 extends beyond EOD, truncated [ 316.421145][ T6258] loop4: detected capacity change from 0 to 512 [ 316.432825][ T6258] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.478582][ T6258] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 316.497135][ T6258] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 316.542397][ T6256] input: syz0 as /devices/virtual/input/input6 [ 317.504976][ T6257] loop0: detected capacity change from 0 to 128 [ 317.888195][ T6257] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.916432][ T6257] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.977057][ T6268] loop3: detected capacity change from 0 to 128 [ 318.062367][ T6268] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 318.091084][ T6268] EXT4-fs: error: could not find journal device path [ 318.131962][ T6257] EXT4-fs warning (device loop0): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 318.635741][ T5798] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.241987][ T6007] udevd[6007]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 319.321677][ T6144] udevd[6144]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 322.674082][ T6293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 325.771018][ T6298] netlink: 76 bytes leftover after parsing attributes in process `syz.1.110'. [ 327.556201][ T6303] loop2: detected capacity change from 0 to 1024 [ 327.629763][ T6303] EXT4-fs: Ignoring removed orlov option [ 327.713939][ T6303] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 327.871537][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.705929][ T5791] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 328.815244][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 328.815331][ T30] audit: type=1326 audit(1746317698.877:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 328.960873][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.063846][ T30] audit: type=1326 audit(1746317698.917:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 329.087929][ T30] audit: type=1326 audit(1746317698.917:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 329.868071][ T6326] tmpfs: Unknown parameter '01777777777777777777777' [ 330.657345][ T6328] capability: warning: `syz.3.119' uses 32-bit capabilities (legacy support in use) [ 330.674764][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 331.300174][ T6330] loop4: detected capacity change from 0 to 512 [ 331.446933][ T30] audit: type=1107 audit(1746317701.487:19): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 331.514492][ T6330] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 332.814225][ T6335] Zero length message leads to an empty skb [ 333.316193][ T6336] loop1: detected capacity change from 0 to 512 [ 333.365770][ T6336] EXT4-fs: quotafile must be on filesystem root [ 334.184836][ T6342] sch_fq: defrate 0 ignored. [ 342.198226][ T30] audit: type=1326 audit(1746317712.257:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 342.228023][ T30] audit: type=1326 audit(1746317712.257:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 342.774661][ T1558] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 343.026363][ T30] audit: type=1326 audit(1746317712.417:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.054805][ T30] audit: type=1326 audit(1746317712.417:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.078606][ T30] audit: type=1326 audit(1746317712.417:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.101478][ T30] audit: type=1326 audit(1746317712.417:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.124365][ T30] audit: type=1326 audit(1746317712.467:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.153491][ T30] audit: type=1326 audit(1746317712.537:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.178462][ T30] audit: type=1326 audit(1746317712.547:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.202529][ T30] audit: type=1326 audit(1746317712.647:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6373 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 343.811451][ T1558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.822969][ T1558] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.834263][ T1558] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 343.843776][ T1558] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.180845][ T6381] loop2: detected capacity change from 0 to 2048 [ 344.286465][ T1558] usb 4-1: config 0 descriptor?? [ 344.429458][ T6381] loop2: p1 < > p3 [ 344.472164][ T6381] loop2: p3 size 134217728 extends beyond EOD, truncated [ 344.768229][ T1558] usbhid 4-1:0.0: can't add hid device: -71 [ 344.781536][ T1558] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 344.881279][ T1558] usb 4-1: USB disconnect, device number 2 [ 345.014410][ T6389] loop0: detected capacity change from 0 to 1024 [ 345.076152][ T6389] ext4: Unknown parameter 'audit' [ 346.643593][ T6408] syz.3.144 (6408) used greatest stack depth: 5288 bytes left [ 346.762712][ T6414] loop0: detected capacity change from 0 to 512 [ 346.917409][ T6414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.936572][ T6414] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.398916][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.233518][ T1558] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 348.487163][ T1558] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 348.498804][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.510527][ T1558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.520861][ T1558] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 348.711699][ T1558] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 348.721828][ T1558] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 348.730515][ T1558] usb 3-1: Manufacturer: syz [ 348.819595][ T1558] usb 3-1: config 0 descriptor?? [ 349.160010][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.155'. [ 349.171941][ T6436] vlan0: entered promiscuous mode [ 349.274563][ T1558] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 349.336405][ T1558] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 349.396669][ T1558] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 350.456603][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 350.456687][ T30] audit: type=1326 audit(1746317720.477:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.486854][ T30] audit: type=1326 audit(1746317720.477:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.514511][ T30] audit: type=1326 audit(1746317720.477:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.538985][ T30] audit: type=1326 audit(1746317720.487:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.562128][ T30] audit: type=1326 audit(1746317720.487:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.585380][ T30] audit: type=1326 audit(1746317720.487:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.612427][ T30] audit: type=1326 audit(1746317720.487:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.636560][ T30] audit: type=1326 audit(1746317720.487:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.659440][ T30] audit: type=1326 audit(1746317720.487:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 350.682959][ T30] audit: type=1326 audit(1746317720.487:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.2.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 351.333577][ T1558] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 352.383599][ T11] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 352.497559][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.504843][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.578525][ T1558] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.587427][ T1558] usb 2-1: config 0 has no interface number 0 [ 352.594231][ T1558] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.605692][ T1558] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.616299][ T1558] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 352.625998][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.352058][ T1558] usb 2-1: config 0 descriptor?? [ 353.674540][ T1558] usb 2-1: can't set config #0, error -71 [ 353.749324][ T1558] usb 2-1: USB disconnect, device number 3 [ 354.119233][ T5847] usb 3-1: USB disconnect, device number 2 [ 354.313757][ T5848] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 354.504495][ T5848] usb 2-1: Using ep0 maxpacket: 8 [ 354.531887][ T5848] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 354.540854][ T5848] usb 2-1: config 179 has no interface number 0 [ 354.547879][ T5848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 354.559764][ T5848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 354.571723][ T5848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.584129][ T5848] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 354.596256][ T5848] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 354.615095][ T5848] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 354.626723][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.670537][ T6457] loop0: detected capacity change from 0 to 1024 [ 354.716479][ T6457] ext4: Unknown parameter 'nouser_xattr' [ 354.843809][ T6453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 355.082133][ T5848] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 355.336727][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.351520][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.704989][ T1558] usb 2-1: USB disconnect, device number 4 [ 355.705133][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 355.723226][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 356.121854][ T6461] veth0_vlan: entered allmulticast mode [ 356.387577][ T6461] ÿÿÿÿÿÿ: renamed from vlan1 [ 357.567909][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 357.567994][ T30] audit: type=1326 audit(1746317727.577:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb430f8e969 code=0x7ffc0000 [ 357.604177][ T30] audit: type=1326 audit(1746317727.637:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb430f8e969 code=0x7ffc0000 [ 358.570499][ T30] audit: type=1326 audit(1746317727.697:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fb430f8e969 code=0x7ffc0000 [ 358.598536][ T30] audit: type=1326 audit(1746317727.697:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb430f8e969 code=0x7ffc0000 [ 358.621511][ T30] audit: type=1326 audit(1746317727.697:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6464 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb430f8e969 code=0x7ffc0000 [ 359.283672][ T5848] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 359.480252][ T5848] usb 1-1: Using ep0 maxpacket: 16 [ 359.488294][ T6474] serio: Serial port ptm0 [ 359.587532][ T5848] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.596697][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.607715][ T5848] usb 1-1: config 0 has no interface number 0 [ 360.043777][ T30] audit: type=1326 audit(1746317729.997:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 360.068529][ T30] audit: type=1326 audit(1746317730.067:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 360.094634][ T30] audit: type=1326 audit(1746317730.067:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 360.117611][ T30] audit: type=1326 audit(1746317730.067:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 360.370188][ T30] audit: type=1326 audit(1746317730.227:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6476 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 360.407430][ T5848] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 360.417435][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.426972][ T5848] usb 1-1: Product: syz [ 360.431417][ T5848] usb 1-1: Manufacturer: syz [ 360.436457][ T5848] usb 1-1: SerialNumber: syz [ 361.120432][ T5848] usb 1-1: config 0 descriptor?? [ 361.481135][ T5848] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 361.599734][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.641571][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.694965][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.734965][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.757622][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.511291][ T5848] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 362.764749][ T5848] usb 1-1: USB disconnect, device number 4 [ 363.481274][ T6144] udevd[6144]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.844906][ T5790] Bluetooth: hci5: command tx timeout [ 364.268438][ T1558] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 364.672635][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.684375][ T1558] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.694897][ T1558] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 364.704542][ T1558] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.896547][ T1558] usb 2-1: config 0 descriptor?? [ 365.155632][ T6512] loop2: detected capacity change from 0 to 128 [ 365.715719][ T1558] hid-led 0003:1D34:000A.0003: probe with driver hid-led failed with error -71 [ 365.848222][ T1558] usb 2-1: USB disconnect, device number 5 [ 365.937412][ T5790] Bluetooth: hci5: command tx timeout [ 366.639083][ T6489] chnl_net:caif_netlink_parms(): no params data found [ 367.999007][ T5790] Bluetooth: hci5: command tx timeout [ 368.768373][ T6531] loop2: detected capacity change from 0 to 16 [ 368.875317][ T6531] erofs (device loop2): mounted with root inode @ nid 36. [ 369.019334][ T3724] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.417467][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.425487][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.434190][ T6489] bridge_slave_0: entered allmulticast mode [ 369.444208][ T6489] bridge_slave_0: entered promiscuous mode [ 369.550180][ T3724] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.090123][ T5790] Bluetooth: hci5: command tx timeout [ 370.891880][ T3724] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.884171][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.891913][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.900221][ T6489] bridge_slave_1: entered allmulticast mode [ 371.917529][ T6489] bridge_slave_1: entered promiscuous mode [ 372.097052][ T3724] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.839449][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.971554][ T6540] kvm: MWAIT instruction emulated as NOP! [ 373.030107][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.488721][ T3724] bridge_slave_1: left allmulticast mode [ 373.495110][ T3724] bridge_slave_1: left promiscuous mode [ 373.502405][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.657198][ T3724] bridge_slave_0: left allmulticast mode [ 373.663364][ T3724] bridge_slave_0: left promiscuous mode [ 373.670209][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.555515][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.614640][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.650075][ T3724] bond0 (unregistering): Released all slaves [ 374.772199][ T6489] team0: Port device team_slave_0 added [ 374.859573][ T6489] team0: Port device team_slave_1 added [ 375.037167][ T5090] Bluetooth: hci2: command 0x0406 tx timeout [ 375.045085][ T5090] Bluetooth: hci3: command 0x0406 tx timeout [ 375.051547][ T5090] Bluetooth: hci1: command 0x0406 tx timeout [ 375.058292][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 375.114535][ T6559] loop0: detected capacity change from 0 to 512 [ 375.246942][ T6559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.261128][ T6559] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.223956][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.231224][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.258841][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.317161][ T6564] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 376.677143][ T3724] hsr_slave_0: left promiscuous mode [ 376.773797][ T3724] hsr_slave_1: left promiscuous mode [ 376.782203][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.792044][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.908150][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.916330][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.957600][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.035736][ T3724] veth1_macvtap: left promiscuous mode [ 377.041696][ T3724] veth0_macvtap: left promiscuous mode [ 377.049313][ T3724] veth1_vlan: left promiscuous mode [ 377.055172][ T3724] veth0_vlan: left promiscuous mode [ 377.728408][ T6580] loop0: detected capacity change from 0 to 256 [ 377.916578][ T6580] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 378.942494][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 378.942574][ T30] audit: type=1326 audit(1746317748.997:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.092699][ T30] audit: type=1326 audit(1746317749.057:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.116636][ T30] audit: type=1326 audit(1746317749.077:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.140548][ T30] audit: type=1326 audit(1746317749.077:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.163923][ T30] audit: type=1326 audit(1746317749.087:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.191274][ T30] audit: type=1326 audit(1746317749.087:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.216007][ T30] audit: type=1326 audit(1746317749.097:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.239071][ T30] audit: type=1326 audit(1746317749.097:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.262467][ T30] audit: type=1326 audit(1746317749.097:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 379.289455][ T30] audit: type=1326 audit(1746317749.097:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.2.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa72bf8e969 code=0x7ffc0000 [ 380.244103][ T1558] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 380.336716][ T6589] loop2: detected capacity change from 0 to 8192 [ 381.314023][ T1558] usb 1-1: device descriptor read/all, error -71 [ 381.448018][ T3724] team0 (unregistering): Port device team_slave_1 removed [ 381.545345][ T3724] team0 (unregistering): Port device team_slave_0 removed [ 382.082589][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.090217][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.117212][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.298209][ T6600] loop0: detected capacity change from 0 to 1024 [ 382.467411][ T6600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.480864][ T6600] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.671033][ T6606] loop3: detected capacity change from 0 to 1024 [ 382.704718][ T6606] EXT4-fs: Ignoring removed nobh option [ 382.710946][ T6606] EXT4-fs: Ignoring removed bh option [ 382.752689][ T6600] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 382.951216][ T6489] hsr_slave_0: entered promiscuous mode [ 382.961863][ T6489] hsr_slave_1: entered promiscuous mode [ 382.978433][ T6489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.986531][ T6489] Cannot create hsr debugfs directory [ 383.025028][ T6606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.776647][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.536275][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.683944][ T6630] netlink: 100 bytes leftover after parsing attributes in process `syz.0.209'. [ 390.622562][ T6642] loop0: detected capacity change from 0 to 1024 [ 390.801247][ T6642] EXT4-fs: Ignoring removed nobh option [ 390.808676][ T6642] EXT4-fs: Ignoring removed bh option [ 391.199765][ T6642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.410263][ T6489] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 392.207920][ T6489] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 392.240073][ T6489] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 392.324864][ T6489] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 392.720744][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 392.776082][ T6655] loop1: detected capacity change from 0 to 256 [ 392.854338][ T6655] exfat: Deprecated parameter 'utf8' [ 392.860237][ T6655] exfat: Deprecated parameter 'utf8' [ 393.174791][ T6655] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 395.202804][ T6665] kvm: emulating exchange as write [ 395.931592][ T6669] loop1: detected capacity change from 0 to 128 [ 397.170469][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.745724][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.928838][ T3857] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.936784][ T3857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.152253][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.160185][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.271909][ T6682] loop3: detected capacity change from 0 to 512 [ 401.557518][ T6682] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 401.572679][ T6682] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 402.829096][ T6687] loop2: detected capacity change from 0 to 512 [ 403.034266][ T6687] EXT4-fs: inline encryption not supported [ 403.045781][ T6687] ext4: Bad value for 'debug_want_extra_isize' [ 405.607848][ T6692] loop2: detected capacity change from 0 to 512 [ 406.253733][ T6692] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 407.215218][ T6692] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 407.215540][ T6692] EXT4-fs: failed to create workqueue [ 407.231035][ T6692] EXT4-fs (loop2): mount failed [ 410.987833][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.166233][ T6700] loop3: detected capacity change from 0 to 1024 [ 411.567871][ T6700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.581588][ T6700] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.430333][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 413.440346][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 413.477553][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 413.600119][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 413.612456][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 413.976368][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.983602][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.652988][ T6706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 415.228778][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 415.228861][ T30] audit: type=1326 audit(1746317785.117:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.259010][ T30] audit: type=1326 audit(1746317785.117:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.282687][ T30] audit: type=1326 audit(1746317785.187:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.306130][ T30] audit: type=1326 audit(1746317785.227:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.331349][ T30] audit: type=1326 audit(1746317785.227:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.355924][ T30] audit: type=1326 audit(1746317785.227:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.379245][ T30] audit: type=1326 audit(1746317785.257:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.616759][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.849230][ T30] audit: type=1326 audit(1746317785.477:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.872750][ T30] audit: type=1326 audit(1746317785.497:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 415.873821][ T5790] Bluetooth: hci4: command tx timeout [ 415.896464][ T30] audit: type=1326 audit(1746317785.507:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 417.920395][ T5790] Bluetooth: hci4: command tx timeout [ 418.276706][ T6489] veth0_vlan: entered promiscuous mode [ 418.567945][ T6489] veth1_vlan: entered promiscuous mode [ 419.684604][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 419.994768][ T5790] Bluetooth: hci4: command tx timeout [ 421.174246][ T5794] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 421.205263][ T5794] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 421.224515][ T5794] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 421.300835][ T5794] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 421.315832][ T5794] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 421.470583][ T6757] loop1: detected capacity change from 0 to 256 [ 421.987180][ T6652] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.091536][ T5794] Bluetooth: hci4: command tx timeout [ 422.122331][ T6757] FAT-fs (loop1): Directory bread(block 64) failed [ 422.130755][ T6757] FAT-fs (loop1): Directory bread(block 65) failed [ 422.138632][ T6757] FAT-fs (loop1): Directory bread(block 66) failed [ 422.145687][ T6757] FAT-fs (loop1): Directory bread(block 67) failed [ 422.153747][ T6757] FAT-fs (loop1): Directory bread(block 68) failed [ 422.161297][ T6757] FAT-fs (loop1): Directory bread(block 69) failed [ 422.168524][ T6757] FAT-fs (loop1): Directory bread(block 70) failed [ 422.175776][ T6757] FAT-fs (loop1): Directory bread(block 71) failed [ 422.183305][ T6757] FAT-fs (loop1): Directory bread(block 72) failed [ 422.193484][ T6757] FAT-fs (loop1): Directory bread(block 73) failed [ 422.239721][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.247769][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.255968][ T6713] bridge_slave_0: entered allmulticast mode [ 422.266089][ T6713] bridge_slave_0: entered promiscuous mode [ 422.296507][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.305269][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.313441][ T6713] bridge_slave_1: entered allmulticast mode [ 422.323546][ T6713] bridge_slave_1: entered promiscuous mode [ 422.849350][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.084160][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.393672][ T5794] Bluetooth: hci6: command tx timeout [ 424.420981][ T6713] team0: Port device team_slave_0 added [ 424.571502][ T6771] loop2: detected capacity change from 0 to 256 [ 424.597656][ T6713] team0: Port device team_slave_1 added [ 425.043739][ T6771] FAT-fs (loop2): Directory bread(block 64) failed [ 425.050830][ T6771] FAT-fs (loop2): Directory bread(block 65) failed [ 425.065616][ T6771] FAT-fs (loop2): Directory bread(block 66) failed [ 425.072621][ T6771] FAT-fs (loop2): Directory bread(block 67) failed [ 425.079888][ T6771] FAT-fs (loop2): Directory bread(block 68) failed [ 425.087282][ T6771] FAT-fs (loop2): Directory bread(block 69) failed [ 425.094568][ T6771] FAT-fs (loop2): Directory bread(block 70) failed [ 425.101389][ T6771] FAT-fs (loop2): Directory bread(block 71) failed [ 425.108743][ T6771] FAT-fs (loop2): Directory bread(block 72) failed [ 425.115727][ T6771] FAT-fs (loop2): Directory bread(block 73) failed [ 425.283462][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.290947][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.318715][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.331298][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 425.516197][ T5794] Bluetooth: hci6: command tx timeout [ 425.760695][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.771993][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.800020][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.059586][ T1558] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 426.314355][ T1558] usb 4-1: Using ep0 maxpacket: 32 [ 426.396239][ T1558] usb 4-1: unable to get BOS descriptor or descriptor too short [ 426.474509][ T1558] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 426.491677][ T1558] usb 4-1: config 1 interface 0 has no altsetting 0 [ 426.625020][ T1558] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.40 [ 426.635581][ T1558] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.644210][ T1558] usb 4-1: Product: syz [ 426.648786][ T1558] usb 4-1: Manufacturer: syz [ 426.653846][ T1558] usb 4-1: SerialNumber: syz [ 426.729787][ T3857] bridge_slave_1: left allmulticast mode [ 426.736543][ T3857] bridge_slave_1: left promiscuous mode [ 426.743366][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.594316][ T5794] Bluetooth: hci6: command tx timeout [ 427.737653][ T1558] usbhid 4-1:1.0: can't add hid device: -71 [ 427.744492][ T1558] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 427.794556][ T3857] bridge_slave_0: left allmulticast mode [ 427.800483][ T3857] bridge_slave_0: left promiscuous mode [ 427.807472][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.977624][ T1558] usb 4-1: USB disconnect, device number 3 [ 429.703911][ T5794] Bluetooth: hci6: command tx timeout [ 429.852605][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.990086][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.081104][ T3857] bond0 (unregistering): Released all slaves [ 430.184558][ T6797] input: syz0 as /devices/virtual/input/input9 [ 430.435331][ T6798] loop3: detected capacity change from 0 to 512 [ 430.457853][ T6798] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 430.544173][ T6798] EXT4-fs (loop3): 1 truncate cleaned up [ 430.552323][ T6798] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.707428][ T6713] hsr_slave_0: entered promiscuous mode [ 430.718675][ T6713] hsr_slave_1: entered promiscuous mode [ 430.728437][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.736519][ T6713] Cannot create hsr debugfs directory [ 430.930395][ T6788] pim6reg1: entered promiscuous mode [ 430.936403][ T6788] pim6reg1: entered allmulticast mode [ 431.173804][ T3857] hsr_slave_0: left promiscuous mode [ 431.243496][ T3857] hsr_slave_1: left promiscuous mode [ 431.251769][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.302148][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.355504][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.455064][ T3857] veth1_vlan: left promiscuous mode [ 431.460757][ T3857] veth0_vlan: left promiscuous mode [ 434.106326][ T3857] team0 (unregistering): Port device team_slave_1 removed [ 434.215458][ T3857] team0 (unregistering): Port device team_slave_0 removed [ 436.037456][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.047942][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.056216][ T6753] bridge_slave_0: entered allmulticast mode [ 436.066293][ T6753] bridge_slave_0: entered promiscuous mode [ 436.324544][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.332606][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.340788][ T6753] bridge_slave_1: entered allmulticast mode [ 436.350705][ T6753] bridge_slave_1: entered promiscuous mode [ 436.441509][ T3817] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.501207][ T6834] loop1: detected capacity change from 0 to 256 [ 436.817442][ T3817] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.060263][ T3817] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.081617][ T6837] loop3: detected capacity change from 0 to 512 [ 437.197095][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.256707][ T6837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.270981][ T6837] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.370021][ T3817] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.450184][ T6836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.522569][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.239401][ T6753] team0: Port device team_slave_0 added [ 438.333705][ T6753] team0: Port device team_slave_1 added [ 438.353531][ T3817] bridge_slave_1: left allmulticast mode [ 438.359863][ T3817] bridge_slave_1: left promiscuous mode [ 438.370537][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.436736][ T3817] bridge_slave_0: left allmulticast mode [ 438.442708][ T3817] bridge_slave_0: left promiscuous mode [ 438.450135][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.171004][ T3817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.252708][ T3817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.309346][ T3817] bond0 (unregistering): Released all slaves [ 439.848124][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.855783][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.882963][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.926307][ T6713] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 440.050849][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.058581][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.085606][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.213389][ T6713] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 440.265067][ T6713] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 440.356437][ T6713] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 440.477321][ T3817] hsr_slave_0: left promiscuous mode [ 440.520202][ T3817] hsr_slave_1: left promiscuous mode [ 440.528718][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.538779][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.641247][ T3817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.649965][ T3817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.786919][ T3817] veth1_macvtap: left promiscuous mode [ 440.792771][ T3817] veth0_macvtap: left promiscuous mode [ 440.800245][ T3817] veth1_vlan: left promiscuous mode [ 442.114718][ T3817] team0 (unregistering): Port device team_slave_1 removed [ 442.206141][ T3817] team0 (unregistering): Port device team_slave_0 removed [ 442.691179][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 443.117495][ T6866] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.127536][ T6866] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 443.153555][ T6753] hsr_slave_0: entered promiscuous mode [ 443.164429][ T6753] hsr_slave_1: entered promiscuous mode [ 443.174180][ T6753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.183616][ T6753] Cannot create hsr debugfs directory [ 445.435255][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.657256][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.758914][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.766703][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.945236][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.953308][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.570493][ T6753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 446.782632][ T6885] netlink: 165 bytes leftover after parsing attributes in process `syz.3.264'. [ 447.626883][ T6753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.652949][ T6753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 448.624291][ T6753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 449.745146][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.283796][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.514710][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.622488][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.630196][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.786640][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.794610][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.149516][ T6753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.004365][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 453.176017][ T6713] veth0_vlan: entered promiscuous mode [ 453.266344][ T5847] usb 3-1: Using ep0 maxpacket: 32 [ 453.347836][ T6713] veth1_vlan: entered promiscuous mode [ 453.363586][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.375884][ T5847] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.386517][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.396103][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.943368][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.348392][ T6713] veth0_macvtap: entered promiscuous mode [ 454.458787][ T5847] usb 3-1: config 0 descriptor?? [ 454.477032][ T5847] hub 3-1:0.0: USB hub found [ 454.480458][ T6713] veth1_macvtap: entered promiscuous mode [ 454.848348][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.866037][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.878171][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.889205][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.899452][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.910291][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.925947][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.445056][ T5847] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 455.544026][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.555368][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.573762][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.589889][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.600464][ T6713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.612418][ T6713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.629120][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.054588][ T5847] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 456.097172][ T5847] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 456.212992][ T6713] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.222888][ T6713] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.232629][ T6713] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.242368][ T6713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.324270][ T5847] usb 3-1: USB disconnect, device number 3 [ 457.541283][ T6962] syzkaller0: entered promiscuous mode [ 457.547420][ T6962] syzkaller0: entered allmulticast mode [ 457.789811][ T6968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.278'. [ 458.132735][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 458.378635][ T6965] netlink: 'syz.2.279': attribute type 4 has an invalid length. [ 458.387070][ T6965] netlink: 17 bytes leftover after parsing attributes in process `syz.2.279'. [ 458.824279][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 458.956392][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 459.252415][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.279'. [ 463.924702][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 463.924798][ T30] audit: type=1326 audit(1746317833.937:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 463.957841][ T30] audit: type=1326 audit(1746317833.967:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 463.981725][ T30] audit: type=1326 audit(1746317833.967:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.1.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 466.931818][ T6753] veth0_vlan: entered promiscuous mode [ 467.359696][ T6753] veth1_vlan: entered promiscuous mode [ 468.189559][ T6753] veth0_macvtap: entered promiscuous mode [ 468.287315][ T6753] veth1_macvtap: entered promiscuous mode [ 468.328823][ T7000] loop1: detected capacity change from 0 to 512 [ 468.419641][ T7000] ext4: Unknown parameter 'noacl' [ 468.481745][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.492812][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.503484][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.515850][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.526374][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.537760][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.548237][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.559371][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.576832][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.685690][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.697234][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.707628][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.718505][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.729123][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.740310][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.750976][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.762113][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.779663][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.241732][ T6753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.251070][ T6753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.260474][ T6753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.269854][ T6753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.462920][ T7009] capability: warning: `syz.1.285' uses deprecated v2 capabilities in a way that may be insecure [ 472.397561][ T7026] loop1: detected capacity change from 0 to 512 [ 472.654258][ T7026] EXT4-fs (loop1): 1 orphan inode deleted [ 472.662756][ T7026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.701689][ T62] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 472.712303][ T62] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:5: Failed to release dquot type 1 [ 472.773956][ T7026] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.275697][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.435269][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 474.529831][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 474.540124][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 474.556976][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 474.569878][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 475.392062][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.400154][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.543946][ T5847] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 475.818844][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.830401][ T5847] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.205262][ T5847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.216275][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.225378][ T5847] usb 2-1: Product: syz [ 476.230357][ T5847] usb 2-1: Manufacturer: syz [ 476.236203][ T5847] usb 2-1: SerialNumber: syz [ 476.648703][ T5790] Bluetooth: hci3: command tx timeout [ 477.385283][ T5847] usb 2-1: selecting invalid altsetting 1 [ 477.522710][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 477.653584][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.055466][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.428640][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.715440][ T5790] Bluetooth: hci3: command tx timeout [ 478.718588][ T5847] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 478.728314][ T5847] cdc_ncm 2-1:1.1: bind() failure [ 478.762125][ T5847] usb 2-1: USB disconnect, device number 6 [ 478.809441][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.740231][ T35] bridge_slave_1: left allmulticast mode [ 479.747089][ T35] bridge_slave_1: left promiscuous mode [ 479.754248][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.947315][ T35] bridge_slave_0: left allmulticast mode [ 479.954548][ T35] bridge_slave_0: left promiscuous mode [ 479.961803][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.807962][ T5790] Bluetooth: hci3: command tx timeout [ 480.855254][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.952467][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.987776][ T35] bond0 (unregistering): Released all slaves [ 481.103732][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.116929][ T5794] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.205273][ T5794] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.258351][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.279101][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.361666][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.377091][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.386701][ T7045] bridge_slave_0: entered allmulticast mode [ 481.396603][ T7045] bridge_slave_0: entered promiscuous mode [ 481.414651][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.422389][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.431796][ T7045] bridge_slave_1: entered allmulticast mode [ 481.441828][ T7045] bridge_slave_1: entered promiscuous mode [ 481.543653][ T35] hsr_slave_0: left promiscuous mode [ 481.566815][ T35] hsr_slave_1: left promiscuous mode [ 481.584486][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.592459][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.636382][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.644364][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.823934][ T35] veth1_macvtap: left promiscuous mode [ 481.829994][ T35] veth0_macvtap: left promiscuous mode [ 481.836592][ T35] veth1_vlan: left promiscuous mode [ 481.842234][ T35] veth0_vlan: left promiscuous mode [ 482.873359][ T5794] Bluetooth: hci3: command tx timeout [ 483.051640][ T7092] overlayfs: failed to clone upperpath [ 483.358299][ T5794] Bluetooth: hci4: command tx timeout [ 483.717235][ T35] team0 (unregistering): Port device team_slave_1 removed [ 483.865753][ T35] team0 (unregistering): Port device team_slave_0 removed [ 484.271398][ T7100] loop1: detected capacity change from 0 to 256 [ 484.385195][ T7100] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 484.397246][ T7100] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 484.709682][ T7100] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 484.841451][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.027349][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.465034][ T5794] Bluetooth: hci4: command tx timeout [ 485.599189][ T7045] team0: Port device team_slave_0 added [ 485.889755][ T7045] team0: Port device team_slave_1 added [ 486.608759][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.616570][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.644791][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.953624][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.960954][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.988890][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.014109][ T5790] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.044440][ T5790] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.064053][ T5790] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.151435][ T5790] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.165955][ T5790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 487.522459][ T5794] Bluetooth: hci4: command tx timeout [ 487.660169][ T7045] hsr_slave_0: entered promiscuous mode [ 487.671260][ T7045] hsr_slave_1: entered promiscuous mode [ 487.680766][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.689136][ T7045] Cannot create hsr debugfs directory [ 487.802721][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.110814][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.296752][ T7081] chnl_net:caif_netlink_parms(): no params data found [ 488.503766][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.187900][ T7124] netlink: 'syz.1.304': attribute type 13 has an invalid length. [ 489.276557][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.353602][ T5794] Bluetooth: hci5: command tx timeout [ 489.593450][ T5794] Bluetooth: hci4: command tx timeout [ 491.029404][ T35] bridge_slave_1: left allmulticast mode [ 491.036598][ T35] bridge_slave_1: left promiscuous mode [ 491.043507][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.157956][ T35] bridge_slave_0: left allmulticast mode [ 491.164468][ T35] bridge_slave_0: left promiscuous mode [ 491.171098][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.462360][ T5794] Bluetooth: hci5: command tx timeout [ 491.997834][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.018404][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.040881][ T35] bond0 (unregistering): Released all slaves [ 492.560301][ T35] hsr_slave_0: left promiscuous mode [ 492.580061][ T35] hsr_slave_1: left promiscuous mode [ 492.588487][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.599816][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.624797][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.632914][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.682648][ T35] veth1_macvtap: left promiscuous mode [ 492.689178][ T35] veth0_macvtap: left promiscuous mode [ 492.695832][ T35] veth1_vlan: left promiscuous mode [ 492.701447][ T35] veth0_vlan: left promiscuous mode [ 493.514786][ T5794] Bluetooth: hci5: command tx timeout [ 493.542450][ T35] team0 (unregistering): Port device team_slave_1 removed [ 493.571393][ T35] team0 (unregistering): Port device team_slave_0 removed [ 494.955464][ T7081] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.963346][ T7081] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.971461][ T7081] bridge_slave_0: entered allmulticast mode [ 494.982024][ T7081] bridge_slave_0: entered promiscuous mode [ 495.067772][ T7081] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.076488][ T7081] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.084799][ T7081] bridge_slave_1: entered allmulticast mode [ 495.097584][ T7081] bridge_slave_1: entered promiscuous mode [ 495.509793][ T7110] chnl_net:caif_netlink_parms(): no params data found [ 495.578149][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.598555][ T5794] Bluetooth: hci5: command tx timeout [ 495.705847][ T7081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.757582][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.904020][ T7081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.979093][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.297293][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.515685][ T7081] team0: Port device team_slave_0 added [ 496.593913][ T7081] team0: Port device team_slave_1 added [ 496.906939][ T7045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 497.068784][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.077014][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.104474][ T7081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.148774][ T7045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 497.441881][ T7045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 497.458060][ T5848] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 497.684211][ T5848] usb 2-1: Using ep0 maxpacket: 32 [ 497.712472][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.724420][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.735343][ T5848] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 497.744876][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.030083][ T5848] usb 2-1: config 0 descriptor?? [ 498.224843][ T7045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 498.306384][ T7081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.314044][ T7081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.340828][ T7081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.375564][ T35] bridge_slave_1: left allmulticast mode [ 498.381801][ T35] bridge_slave_1: left promiscuous mode [ 498.389325][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.423328][ T35] bridge_slave_0: left allmulticast mode [ 498.429702][ T35] bridge_slave_0: left promiscuous mode [ 498.437398][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.801029][ T5848] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 499.306753][ T5847] usb 2-1: USB disconnect, device number 7 [ 500.353775][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.396270][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.451363][ T35] bond0 (unregistering): Released all slaves [ 500.644969][ T7110] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.652618][ T7110] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.660586][ T7110] bridge_slave_0: entered allmulticast mode [ 500.670455][ T7110] bridge_slave_0: entered promiscuous mode [ 501.042332][ T7081] hsr_slave_0: entered promiscuous mode [ 501.053226][ T7081] hsr_slave_1: entered promiscuous mode [ 501.062199][ T7081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.070502][ T7081] Cannot create hsr debugfs directory [ 501.077981][ T7110] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.086163][ T7110] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.094287][ T7110] bridge_slave_1: entered allmulticast mode [ 501.104407][ T7110] bridge_slave_1: entered promiscuous mode [ 501.658384][ T7110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.073826][ T7110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.242777][ T35] hsr_slave_0: left promiscuous mode [ 502.275051][ T35] hsr_slave_1: left promiscuous mode [ 502.283729][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.291530][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.311539][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.320348][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.374532][ T35] veth1_macvtap: left promiscuous mode [ 502.380362][ T35] veth0_macvtap: left promiscuous mode [ 502.388324][ T35] veth1_vlan: left promiscuous mode [ 502.394350][ T35] veth0_vlan: left promiscuous mode [ 502.425170][ T5848] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 502.653688][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 502.665866][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.678731][ T5848] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 502.689095][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.792429][ T5848] usb 2-1: config 0 descriptor?? [ 503.344439][ T5848] steelseries 0003:1038:1410.0006: item fetching failed at offset 2/7 [ 503.349848][ T35] team0 (unregistering): Port device team_slave_1 removed [ 503.379175][ T5848] steelseries 0003:1038:1410.0006: parse failed [ 503.386880][ T5848] steelseries 0003:1038:1410.0006: probe with driver steelseries failed with error -22 [ 503.420079][ T35] team0 (unregistering): Port device team_slave_0 removed [ 503.546088][ T5848] usb 2-1: USB disconnect, device number 8 [ 504.156942][ T7110] team0: Port device team_slave_0 added [ 504.187132][ T7110] team0: Port device team_slave_1 added [ 504.614654][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.622981][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.650459][ T7110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.855998][ T7110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.863543][ T7110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.891327][ T7110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.822722][ T7110] hsr_slave_0: entered promiscuous mode [ 505.833766][ T7110] hsr_slave_1: entered promiscuous mode [ 505.842790][ T7110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.852165][ T7110] Cannot create hsr debugfs directory [ 506.286899][ T30] audit: type=1326 audit(1746317876.327:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 506.407679][ T30] audit: type=1326 audit(1746317876.377:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 506.431747][ T30] audit: type=1326 audit(1746317876.377:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 506.455870][ T30] audit: type=1326 audit(1746317876.377:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7282 comm="syz.1.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 506.821651][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.149635][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.518821][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.526861][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.664176][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.672070][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.800693][ T7081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 507.938988][ T7081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 508.034805][ T7081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 508.215380][ T7081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 508.411800][ T7110] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 508.541615][ T7110] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 508.696637][ T7110] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 508.819257][ T7110] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 510.138694][ T7081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.520440][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.564039][ T7081] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.628331][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.636641][ T3724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.669244][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.814914][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.822568][ T3724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.955170][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.124617][ T3857] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.132585][ T3857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.158249][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.166139][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.381897][ T7081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.393220][ T7081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.621128][ T7110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.642479][ T7347] loop1: detected capacity change from 0 to 2048 [ 514.049417][ T7347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.554695][ T7081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.603204][ T5844] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 514.706456][ T7045] veth0_vlan: entered promiscuous mode [ 514.824002][ T5844] usb 2-1: Using ep0 maxpacket: 8 [ 514.917436][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.929003][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.939248][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 514.952941][ T5844] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 514.966532][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.059685][ T7045] veth1_vlan: entered promiscuous mode [ 515.539743][ T5844] usb 2-1: config 0 descriptor?? [ 516.330132][ T7352] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 516.579944][ T30] audit: type=1800 audit(1746317886.617:134): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.338" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 516.710425][ T5844] usbhid 2-1:0.0: can't add hid device: -71 [ 516.720597][ T5844] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 516.735580][ T7045] veth0_macvtap: entered promiscuous mode [ 516.795522][ T5844] usb 2-1: USB disconnect, device number 9 [ 517.067104][ T7110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.535720][ T7347] syz.1.338 (7347) used greatest stack depth: 5232 bytes left [ 517.677944][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.760851][ T7045] veth1_macvtap: entered promiscuous mode [ 518.156400][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.167515][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.177788][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.188727][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.205281][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.650950][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.663990][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.674790][ T7045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.686937][ T7045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.702525][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.102017][ T7045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.111567][ T7045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.122735][ T7045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.132556][ T7045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.406932][ T7081] veth0_vlan: entered promiscuous mode [ 521.537618][ T7081] veth1_vlan: entered promiscuous mode [ 522.177665][ T30] audit: type=1326 audit(1746317892.157:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.200860][ T30] audit: type=1326 audit(1746317892.167:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.224749][ T30] audit: type=1326 audit(1746317892.207:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.249408][ T30] audit: type=1326 audit(1746317892.207:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.273830][ T30] audit: type=1326 audit(1746317892.207:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.507394][ T7110] veth0_vlan: entered promiscuous mode [ 522.895841][ T7081] veth0_macvtap: entered promiscuous mode [ 522.925706][ T30] audit: type=1326 audit(1746317892.377:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.953552][ T30] audit: type=1326 audit(1746317892.377:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 522.978891][ T30] audit: type=1326 audit(1746317892.377:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 523.002070][ T30] audit: type=1326 audit(1746317892.377:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7394 comm="syz.3.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 523.098174][ T7110] veth1_vlan: entered promiscuous mode [ 523.244959][ T7081] veth1_macvtap: entered promiscuous mode [ 523.676927][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.688340][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.699236][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.710430][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.720953][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 523.732088][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 523.747936][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.931591][ T7110] veth0_macvtap: entered promiscuous mode [ 524.131222][ T7110] veth1_macvtap: entered promiscuous mode [ 524.207170][ T30] audit: type=1326 audit(1746317894.217:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7401 comm="syz.3.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd1eb8e969 code=0x7ffc0000 [ 524.632083][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.648631][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.663258][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.674306][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.684522][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.698867][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.710098][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.721355][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.737693][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.759275][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.770212][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.781236][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.793456][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.805059][ T7081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 524.816126][ T7081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.831630][ T7081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.176360][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.194243][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.207997][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.220056][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.230538][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.242751][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.253959][ T7110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.265010][ T7110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.281150][ T7110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.327440][ T7081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.337055][ T7081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.346512][ T7081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.356511][ T7081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.638445][ T7110] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.648003][ T7110] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.657509][ T7110] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.666947][ T7110] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.751747][ T7446] netlink: 'syz.3.350': attribute type 298 has an invalid length. [ 532.108579][ T7458] process 'syz.1.351' launched '/dev/fd/7' with NULL argv: empty string added [ 532.131625][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 532.131715][ T30] audit: type=1326 audit(1746317902.117:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 532.451290][ T30] audit: type=1326 audit(1746317902.247:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 532.475864][ T30] audit: type=1326 audit(1746317902.247:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 532.499529][ T30] audit: type=1326 audit(1746317902.247:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.1.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 535.579092][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 535.589756][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 535.627811][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 535.660840][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 535.678364][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 536.996575][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.003734][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.155454][ T7482] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 537.763537][ T5790] Bluetooth: hci2: command tx timeout [ 539.175089][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 539.324059][ T7473] chnl_net:caif_netlink_parms(): no params data found [ 539.365955][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 539.398281][ T24] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.408899][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 539.416083][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.00 [ 539.425661][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.526200][ T24] usb 2-1: config 0 descriptor?? [ 539.844725][ T5790] Bluetooth: hci2: command tx timeout [ 540.194214][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 540.200964][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 540.334251][ T24] usb 2-1: USB disconnect, device number 10 [ 540.438474][ T7237] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.631889][ T7237] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.929650][ T7237] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.208280][ T7237] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.647815][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 541.664820][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 541.675624][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 541.690699][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 541.704240][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 541.916332][ T5794] Bluetooth: hci2: command tx timeout [ 542.128084][ T7473] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.136192][ T7473] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.144469][ T7473] bridge_slave_0: entered allmulticast mode [ 542.157056][ T7473] bridge_slave_0: entered promiscuous mode [ 542.434262][ T7473] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.442236][ T7473] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.450479][ T7473] bridge_slave_1: entered allmulticast mode [ 542.460566][ T7473] bridge_slave_1: entered promiscuous mode [ 542.673904][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.682047][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.201686][ T7473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.303264][ T7237] bridge_slave_1: left allmulticast mode [ 543.309217][ T7237] bridge_slave_1: left promiscuous mode [ 543.316093][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.387747][ T7237] bridge_slave_0: left allmulticast mode [ 543.393865][ T7237] bridge_slave_0: left promiscuous mode [ 543.400609][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.781151][ T5794] Bluetooth: hci3: command tx timeout [ 543.999278][ T5794] Bluetooth: hci2: command tx timeout [ 544.191945][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.262174][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.322658][ T7237] bond0 (unregistering): Released all slaves [ 544.443982][ T7473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.591467][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.600065][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.772325][ T7237] hsr_slave_0: left promiscuous mode [ 544.812819][ T7237] hsr_slave_1: left promiscuous mode [ 544.821554][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.829686][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.842557][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.850827][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.923744][ T7237] veth1_macvtap: left promiscuous mode [ 544.929954][ T7237] veth0_macvtap: left promiscuous mode [ 544.936414][ T7237] veth1_vlan: left promiscuous mode [ 544.942139][ T7237] veth0_vlan: left promiscuous mode [ 545.838539][ T5794] Bluetooth: hci3: command tx timeout [ 545.867694][ T5846] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 545.954108][ T7563] overlayfs: failed to clone upperpath [ 546.195341][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.205856][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 546.215972][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.265597][ T5846] usb 2-1: config 0 descriptor?? [ 546.319549][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 546.368052][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 546.636297][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.646785][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.659430][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.675970][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.688897][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.789982][ T5846] logitech 0003:046D:C298.0007: item fetching failed at offset 5/7 [ 546.849414][ T5846] logitech 0003:046D:C298.0007: parse failed [ 546.856663][ T5846] logitech 0003:046D:C298.0007: probe with driver logitech failed with error -22 [ 547.047940][ T5846] usb 2-1: USB disconnect, device number 11 [ 547.197618][ T7473] team0: Port device team_slave_0 added [ 547.247531][ T7473] team0: Port device team_slave_1 added [ 547.456604][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.463941][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.490683][ T7473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.763744][ T7473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.771145][ T7473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.798026][ T7473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.936302][ T5790] Bluetooth: hci3: command tx timeout [ 548.507211][ T7237] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.798858][ T5790] Bluetooth: hci4: command tx timeout [ 548.908510][ T7237] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.097964][ T7473] hsr_slave_0: entered promiscuous mode [ 549.108863][ T7473] hsr_slave_1: entered promiscuous mode [ 549.118384][ T7473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.127320][ T7473] Cannot create hsr debugfs directory [ 549.210529][ T7237] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.348128][ T7237] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.717769][ T7532] chnl_net:caif_netlink_parms(): no params data found [ 549.993364][ T5790] Bluetooth: hci3: command tx timeout [ 550.201175][ T7593] loop1: detected capacity change from 0 to 2048 [ 550.212652][ T7591] fuse: Bad value for 'fd' [ 550.415697][ T7593] EXT4-fs: Ignoring removed bh option [ 550.422033][ T7593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.430829][ T7593] EXT4-fs: Ignoring removed orlov option [ 550.629865][ T7237] bridge_slave_1: left allmulticast mode [ 550.636204][ T7237] bridge_slave_1: left promiscuous mode [ 550.642856][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.703725][ T7593] EXT4-fs (loop1): can't mount with both data=journal and dax [ 550.788907][ T7237] bridge_slave_0: left allmulticast mode [ 550.795368][ T7237] bridge_slave_0: left promiscuous mode [ 550.807257][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.874715][ T5790] Bluetooth: hci4: command tx timeout [ 552.930306][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.940045][ T7612] loop1: detected capacity change from 0 to 512 [ 552.953367][ T5790] Bluetooth: hci4: command tx timeout [ 553.146236][ T7612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.163878][ T7612] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.196100][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.249456][ T7237] bond0 (unregistering): Released all slaves [ 553.561649][ T7565] chnl_net:caif_netlink_parms(): no params data found [ 553.771890][ T7237] hsr_slave_0: left promiscuous mode [ 553.804281][ T7237] hsr_slave_1: left promiscuous mode [ 553.812556][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.820655][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.900983][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.909431][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.944308][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.043601][ T7237] veth1_macvtap: left promiscuous mode [ 554.049453][ T7237] veth0_macvtap: left promiscuous mode [ 554.055958][ T7237] veth1_vlan: left promiscuous mode [ 554.061789][ T7237] veth0_vlan: left promiscuous mode [ 555.022198][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 555.033601][ T5790] Bluetooth: hci4: command tx timeout [ 555.140096][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 555.314990][ T7625] input: syz0 as /devices/virtual/input/input10 [ 555.653291][ T5844] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 556.545110][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.553629][ T7532] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.561507][ T7532] bridge_slave_0: entered allmulticast mode [ 556.571769][ T7532] bridge_slave_0: entered promiscuous mode [ 556.581045][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.595441][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.608344][ T5844] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 556.622117][ T5844] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 556.631709][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.687749][ T5844] usb 2-1: config 0 descriptor?? [ 556.855197][ T7532] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.864788][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.873663][ T7532] bridge_slave_1: entered allmulticast mode [ 556.885430][ T7532] bridge_slave_1: entered promiscuous mode [ 557.133199][ T5844] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 557.187134][ T5844] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 557.278917][ T5844] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 557.360774][ T7532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.395079][ T5844] usb 2-1: USB disconnect, device number 12 [ 557.539641][ T7237] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.646722][ T7532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.711189][ T7237] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.950961][ T7237] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.189448][ T7532] team0: Port device team_slave_0 added [ 558.226886][ T7532] team0: Port device team_slave_1 added [ 558.266358][ T7237] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.429620][ T7634] loop1: detected capacity change from 0 to 256 [ 558.762813][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.774796][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.806640][ T7532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.834683][ T7565] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.842586][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.851321][ T7565] bridge_slave_0: entered allmulticast mode [ 558.862920][ T7565] bridge_slave_0: entered promiscuous mode [ 559.001646][ T7473] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 559.090197][ T7532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.100014][ T7532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.129154][ T7532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.246947][ T30] audit: type=1326 audit(1746317929.297:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 559.253325][ T7473] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 559.384356][ T30] audit: type=1326 audit(1746317929.397:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 559.411951][ T30] audit: type=1326 audit(1746317929.397:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 559.435782][ T30] audit: type=1326 audit(1746317929.397:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7637 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4f598e969 code=0x7ffc0000 [ 559.490193][ T7565] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.498243][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.509239][ T7565] bridge_slave_1: entered allmulticast mode [ 559.519319][ T7565] bridge_slave_1: entered promiscuous mode [ 559.575066][ T7237] bridge_slave_1: left allmulticast mode [ 559.581002][ T7237] bridge_slave_1: left promiscuous mode [ 559.587982][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.634099][ T7237] bridge_slave_0: left allmulticast mode [ 559.640169][ T7237] bridge_slave_0: left promiscuous mode [ 559.647477][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.233197][ T7237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.264344][ T7237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.291112][ T7237] bond0 (unregistering): Released all slaves [ 560.321313][ T7473] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 560.590022][ T7565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.601743][ T7473] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 561.009897][ T7565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.149151][ T7532] hsr_slave_0: entered promiscuous mode [ 561.159988][ T7532] hsr_slave_1: entered promiscuous mode [ 561.169370][ T7532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.177575][ T7532] Cannot create hsr debugfs directory [ 561.598229][ T7237] hsr_slave_0: left promiscuous mode [ 561.621294][ T7237] hsr_slave_1: left promiscuous mode [ 561.629724][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.638814][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.672602][ T7237] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.681097][ T7237] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.769723][ T7237] veth1_macvtap: left promiscuous mode [ 561.775792][ T7237] veth0_macvtap: left promiscuous mode [ 561.781774][ T7237] veth1_vlan: left promiscuous mode [ 561.787993][ T7237] veth0_vlan: left promiscuous mode [ 562.798890][ T7237] team0 (unregistering): Port device team_slave_1 removed [ 562.846319][ T7237] team0 (unregistering): Port device team_slave_0 removed [ 563.264641][ T7565] team0: Port device team_slave_0 added [ 563.469123][ T7565] team0: Port device team_slave_1 added [ 563.610387][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.617999][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.645356][ T7565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.726353][ T7565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.733923][ T7565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.760784][ T7565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.564116][ T7565] hsr_slave_0: entered promiscuous mode [ 564.576197][ T7565] hsr_slave_1: entered promiscuous mode [ 564.585418][ T7565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.593390][ T7565] Cannot create hsr debugfs directory [ 566.602613][ T7473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.849068][ T7532] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.970548][ T7532] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 567.095050][ T7473] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.106692][ T7532] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 567.141225][ T7532] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 567.207022][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.215079][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.368251][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.376380][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.214670][ T7565] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.255098][ T7565] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 568.386784][ T7565] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 568.482284][ T7565] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.071030][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.299446][ T7532] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.430825][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.438687][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.629141][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.636957][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.922712][ T7473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.203789][ T7565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.508999][ T7565] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.774046][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.782225][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.995185][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.002845][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.776714][ T7532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.608257][ T7565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.011388][ T7473] veth0_vlan: entered promiscuous mode [ 574.131738][ T7473] veth1_vlan: entered promiscuous mode [ 574.559012][ T7473] veth0_macvtap: entered promiscuous mode [ 574.615139][ T7473] veth1_macvtap: entered promiscuous mode [ 574.867707][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.878938][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.889408][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 574.900488][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.916333][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 575.116708][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.128894][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.139797][ T7473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.150799][ T7473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.166151][ T7473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 575.490267][ T7473] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.500169][ T7473] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.509855][ T7473] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.519940][ T7473] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.888933][ T7532] veth0_vlan: entered promiscuous mode [ 576.023337][ T7532] veth1_vlan: entered promiscuous mode [ 576.530716][ T7532] veth0_macvtap: entered promiscuous mode [ 576.653116][ T7532] veth1_macvtap: entered promiscuous mode [ 576.687308][ T7565] veth0_vlan: entered promiscuous mode [ 576.854092][ T7565] veth1_vlan: entered promiscuous mode [ 576.982612][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 576.994252][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.004805][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.017095][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.027804][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.039115][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.055038][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.301727][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.312945][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.324527][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.337392][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.347713][ T7532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.360957][ T7532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.379724][ T7532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.498083][ T7565] veth0_macvtap: entered promiscuous mode [ 577.557279][ T7565] veth1_macvtap: entered promiscuous mode [ 577.671906][ T7532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.682468][ T7532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.692521][ T7532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.701961][ T7532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.811437][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.822657][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.836257][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.848316][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.858862][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.870897][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.881480][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.892371][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.908617][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.378872][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.390057][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.403903][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.415314][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.425901][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.437200][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.448868][ T7565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.460100][ T7565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.475802][ T7565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.069035][ T7565] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.078904][ T7565] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.088992][ T7565] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.098295][ T7565] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.156559][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 582.171660][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 582.182294][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 582.246129][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 582.265672][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 583.719205][ T7775] overlayfs: failed to resolve './file0': -2 [ 584.413848][ T5794] Bluetooth: hci5: command tx timeout [ 584.434222][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 584.668294][ T7229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.676776][ T7229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.993777][ T7216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.004733][ T7216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.329113][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.339795][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.348461][ T7753] bridge_slave_0: entered allmulticast mode [ 586.358474][ T7753] bridge_slave_0: entered promiscuous mode [ 586.498992][ T5794] Bluetooth: hci5: command tx timeout [ 586.539204][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.547093][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.556450][ T7753] bridge_slave_1: entered allmulticast mode [ 586.566636][ T7753] bridge_slave_1: entered promiscuous mode [ 586.664623][ T7808] loop6: detected capacity change from 0 to 256 [ 586.909188][ T7808] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 586.971179][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.110055][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.589195][ T7753] team0: Port device team_slave_0 added [ 587.719753][ T7753] team0: Port device team_slave_1 added [ 588.220507][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.229537][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.257440][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.312724][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.320729][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.348303][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.554107][ T5794] Bluetooth: hci5: command tx timeout [ 589.168409][ T7753] hsr_slave_0: entered promiscuous mode [ 589.182046][ T7753] hsr_slave_1: entered promiscuous mode [ 589.191818][ T7753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.204480][ T7753] Cannot create hsr debugfs directory [ 589.414716][ T7235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.423776][ T7235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.766947][ T7225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.775300][ T7225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.187270][ T7218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.195979][ T7218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.241826][ T7229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.250346][ T7229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.650247][ T5794] Bluetooth: hci5: command tx timeout [ 591.629838][ T7753] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 591.714977][ T7753] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 591.844771][ T7753] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 592.251526][ T7753] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 596.501960][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.827362][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.884260][ T30] audit: type=1326 audit(1746317966.907:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.5.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa816d8e969 code=0x7ffc0000 [ 596.908963][ T30] audit: type=1326 audit(1746317966.907:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.5.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa816d8e969 code=0x7ffc0000 [ 596.933725][ T30] audit: type=1326 audit(1746317966.907:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.5.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa816d8e969 code=0x7ffc0000 [ 597.023944][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.032077][ T7229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.254074][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.262133][ T7229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.813648][ T7753] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 598.189480][ T7874] ªªªªªª: renamed from vlan0 (while UP) [ 598.268852][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.275881][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.978509][ T7889] ===================================================== [ 599.986355][ T7889] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 599.995360][ T7889] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 600.001469][ T7889] do_xdp_generic+0xd42/0x1680 [ 600.006707][ T7889] tun_get_user+0x4841/0x6a80 [ 600.011696][ T7889] tun_chr_write_iter+0x3e9/0x5c0 [ 600.017110][ T7889] vfs_write+0xb31/0x1560 [ 600.021743][ T7889] __x64_sys_write+0x1fb/0x4d0 [ 600.027064][ T7889] x64_sys_call+0x38c3/0x3db0 [ 600.032014][ T7889] do_syscall_64+0xd9/0x1b0 [ 600.036971][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.043467][ T7889] [ 600.045921][ T7889] Uninit was stored to memory at: [ 600.051348][ T7889] pskb_expand_head+0x313/0x1c90 [ 600.057073][ T7889] do_xdp_generic+0xa69/0x1680 [ 600.062146][ T7889] tun_get_user+0x4841/0x6a80 [ 600.067255][ T7889] tun_chr_write_iter+0x3e9/0x5c0 [ 600.072637][ T7889] vfs_write+0xb31/0x1560 [ 600.077411][ T7889] __x64_sys_write+0x1fb/0x4d0 [ 600.082468][ T7889] x64_sys_call+0x38c3/0x3db0 [ 600.087635][ T7889] do_syscall_64+0xd9/0x1b0 [ 600.092387][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.098719][ T7889] [ 600.101212][ T7889] Uninit was created at: [ 600.106057][ T7889] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 600.113141][ T7889] kmalloc_reserve+0x22f/0x4b0 [ 600.118163][ T7889] __alloc_skb+0x347/0x7d0 [ 600.122831][ T7889] alloc_skb_with_frags+0xc5/0xa60 [ 600.128372][ T7889] sock_alloc_send_pskb+0xad8/0xc70 [ 600.133994][ T7889] tun_get_user+0x1013/0x6a80 [ 600.139010][ T7889] tun_chr_write_iter+0x3e9/0x5c0 [ 600.144673][ T7889] vfs_write+0xb31/0x1560 [ 600.149226][ T7889] __x64_sys_write+0x1fb/0x4d0 [ 600.154376][ T7889] x64_sys_call+0x38c3/0x3db0 [ 600.159318][ T7889] do_syscall_64+0xd9/0x1b0 [ 600.164402][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.170590][ T7889] [ 600.173729][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.430 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 600.186128][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 600.196618][ T7889] ===================================================== [ 600.203829][ T7889] Disabling lock debugging due to kernel taint [ 600.210147][ T7889] Kernel panic - not syncing: kmsan.panic set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.216846][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.430 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 600.230682][ T7889] Tainted: [B]=BAD_PAGE [ 600.235073][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 600.245355][ T7889] Call Trace: [ 600.248826][ T7889] [ 600.251916][ T7889] __dump_stack+0x26/0x30 [ 600.256542][ T7889] dump_stack_lvl+0x53/0x270 [ 600.261496][ T7889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 600.267598][ T7889] dump_stack+0x1e/0x25 [ 600.272026][ T7889] panic+0x4bd/0xd50 [ 600.276241][ T7889] kmsan_report+0x29d/0x2a0 [ 600.281015][ T7889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 600.287202][ T7889] ? __msan_warning+0x96/0x120 [ 600.292176][ T7889] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 600.298331][ T7889] ? do_xdp_generic+0xd42/0x1680 [ 600.303522][ T7889] ? tun_get_user+0x4841/0x6a80 [ 600.308579][ T7889] ? tun_chr_write_iter+0x3e9/0x5c0 [ 600.313995][ T7889] ? vfs_write+0xb31/0x1560 [ 600.318732][ T7889] ? __x64_sys_write+0x1fb/0x4d0 [ 600.324013][ T7889] ? x64_sys_call+0x38c3/0x3db0 [ 600.329227][ T7889] ? do_syscall_64+0xd9/0x1b0 [ 600.334155][ T7889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.340485][ T7889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 600.346749][ T7889] ? ___bpf_prog_run+0xea65/0xeba0 [ 600.352123][ T7889] ? __bpf_prog_run32+0xc2/0xf0 [ 600.357399][ T7889] ? __free_frozen_pages+0x65b/0x1310 [ 600.363504][ T7889] ? kmsan_get_metadata+0x105/0x1b0 [ 600.369006][ T7889] __msan_warning+0x96/0x120 [ 600.374056][ T7889] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 600.380221][ T7889] do_xdp_generic+0xd42/0x1680 [ 600.385495][ T7889] ? tun_get_user+0x4311/0x6a80 [ 600.390586][ T7889] ? filter_irq_stacks+0x49/0x190 [ 600.395942][ T7889] ? tun_get_user+0x47bc/0x6a80 [ 600.400990][ T7889] tun_get_user+0x4841/0x6a80 [ 600.405863][ T7889] ? stack_depot_save_flags+0x35/0x7c0 [ 600.411946][ T7889] ? __rcu_read_unlock+0x6d/0xd0 [ 600.417269][ T7889] ? kmsan_get_metadata+0x105/0x1b0 [ 600.422955][ T7889] ? kmsan_get_metadata+0x105/0x1b0 [ 600.428377][ T7889] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 600.434939][ T7889] ? ref_tracker_alloc+0x4c6/0x7a0 [ 600.440458][ T7889] tun_chr_write_iter+0x3e9/0x5c0 [ 600.445910][ T7889] vfs_write+0xb31/0x1560 [ 600.450729][ T7889] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 600.456499][ T7889] __x64_sys_write+0x1fb/0x4d0 [ 600.461505][ T7889] x64_sys_call+0x38c3/0x3db0 [ 600.466446][ T7889] do_syscall_64+0xd9/0x1b0 [ 600.471209][ T7889] ? irqentry_exit+0x16/0x60 [ 600.476120][ T7889] ? clear_bhb_loop+0x25/0x80 [ 600.481042][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.487243][ T7889] RIP: 0033:0x7fdd1eb8d41f [ 600.491826][ T7889] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 600.511845][ T7889] RSP: 002b:00007fdd1fa55000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 600.520832][ T7889] RAX: ffffffffffffffda RBX: 00007fdd1edb5fa0 RCX: 00007fdd1eb8d41f [ 600.529017][ T7889] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 600.537171][ T7889] RBP: 00007fdd1ec10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 600.545477][ T7889] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 600.553613][ T7889] R13: 0000000000000000 R14: 00007fdd1edb5fa0 R15: 00007fff674f93b8 [ 600.561782][ T7889] [ 600.565425][ T7889] Kernel Offset: disabled [ 600.569856][ T7889] Rebooting in 86400 seconds..