last executing test programs: 3m26.493060567s ago: executing program 3 (id=4): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x100000, 0x1000}}) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000005000000000000000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c00000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000003c0)='./file0\x00', 0x210451, &(0x7f0000000000)=ANY=[], 0x1, 0x24c, &(0x7f0000000680)="$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") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000002800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) 3m21.405033627s ago: executing program 3 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_newnexthop={0x70, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x18}, [@NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5}}, @NHA_OIF={0x8, 0x5, r2}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6e4}]}, @NHA_OIF={0x8}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x5}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xd0}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x7fff8}]}]}, 0x70}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x8001, 0xa, 0x800000001, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000003fffffc, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000004c0)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000006800050203001000fdffff7f0000000000000000affc0200ffffffff1500000000000b0008000500", @ANYRES32=r2, @ANYBLOB="816953f0706b8ab1ea9738e0ff9b59193be603fe9cc1b12801a9d768678e1449e5b1ef50de99731d4d20b0062038e8687a1bc45ed05ddfc5c2c3f4474bc627"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x40000c4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0xfffe, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0) 3m19.705329342s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x87) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 3m16.819387123s ago: executing program 0 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x3c32}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) pwrite64(r1, &(0x7f0000000300)="572654b114b1a9e1879a390786dd87318827008a118e186ae35a8dd9fd884cd2abd63116b12a26eff4b1eff53b8259e7f06d5e4cb9d8", 0xc0, 0x100000000) 3m15.759263088s ago: executing program 0 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x20a) 3m14.323611896s ago: executing program 0 (id=26): pipe2$9p(&(0x7f0000000080), 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0010a6", 0x14, 0x4, 0x0, @empty, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af3"}}}}}, 0x0) 3m13.910213258s ago: executing program 0 (id=28): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 3m12.673786197s ago: executing program 0 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007"], 0xac}}, 0x0) 3m11.930707239s ago: executing program 0 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x5404, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getrusage(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300002100000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000a00)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@nomblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}, {@test_dummy_encryption}], [{@smackfsdef}]}, 0x3, 0x438, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x7f) mkdir(&(0x7f0000000000)='./bus\x00', 0x6c832ac377d24da9) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000aefa00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x5000) 3m4.435117344s ago: executing program 32 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x1, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnfo9P5Oud0/v++8z/n+zzf2eP3POt553jXGnPNucfe+11z7WevbzoMqVy3SoXazAz/EvzzS3cASAGA/gBwHQBEAFAiS4ksV/Zn0Nj9XzuJ+Pd6aPrVHoG4mqT+aZvUP22T+qdtUv+0Teqftkn90zapf9om9RciLds+I+f1sqXdTe7/p2Xy+f8f5GjhsV9sLHxjx38iReqftkn90zapf9om9U/bpP5pm9Q/bZP6p21SfyHSsv/5vWP528F/wna1v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNF8JvDAD85VUIIYQQQgghhBD/OUL6qz0CIYQQQgghhBBC/N+HoECDgQjSQXpIgQyQEa6BTHAtZIbrIAHXQxa4AbLCjZANskMOyAm5IDfkAQsEDhhiyAv5IAk3QX64GVKhABSEQuChMBSBolAMboHicCuUgNugJNwOpaA0lIGycAeUgzuhPNwFFeBuqAiVoDJUgXugKtwL1eA+qA73Qw14AGrCg1AL/gS14SGoAw9DXXgE6sGjUB8aQENoBI3/R/kvQBd4EbpCN+gOPaAn9ILe0Af6Qj/oDy/BAHgZBsIrMAgGwxB4FYbCazAMXofhMAJGwhswCkbDGBgL42A8TIA3YSK8BZPgbZgMU2AqTIPpMANmwjswC2bDHHgX5sJ7MA/mwwJYCIvgfVgMS2ApfADL4ENYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOH8EO2Am7YDfsgb2wDz6G/fAJHIBP4SB89k/mn/+7/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIV5MA8SEjIy5sW8mMQk5sf8mIqpWBALokePRbAIFsNbsDgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWwAlbEilgZK+M9eA/ei9WwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAe1sf62BAbYmNsjE2wCTbFptgcm2MLbIGtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWVD2wJ/bE3tgb+2I/7Icv4QB8GV/GV3AQDsYh+Cq+iq/hMDyHw3EEjsSRWE6NxjE4FlmNxwk4ASfiRJyEk3AyTsEpOA2n4wyciTNxFs7G2fguzsX38D2cj/NxIS7CRbgYl+BSXIrL8DwuxxW4ElfhalyDq3Edrsd1uBE34UbcgltwG27Dj/Aj3Ik7cTfuxr1oAPBj/AQ/wUF4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7AE3gST+IpPI1n8DSexbN4Ds/jBbyAF/EiXsLncn1VZ2+BDYNAXWGUUelUOpWiUlRGlVFlUplUZpVZJVRCZVFZVFaVVWVT2VQOlUPlUrlUHpVHkSLFKlZ5VV6VVEmVX+VXqSpVFVQFlVdeFVFFVDFVTBVXxVUJdZsqqW5XpVRp1cyXVWVVOdXcl1d3qQqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqoHVS3VA/viQ+pKZeqqwVhPDcH6qoFqqBqp1/Ax1UQNw6aqmWqunlAjcDi2Uk18a/WUaqPGYFv1jBqLz6r2ajx2UM+rjqqT6qxeUF1UU99VdVOTsYfqqaZhb9VH9VX91CyspK5UrLJ6RQ1Sg9UQ9apaiK+pYep1NVyNUCPVG2qUGq3GqLFqnBqvJqg31UT1lpqk3laT1RQ1VU1T09UMNVO9o2ap2WqOelfNVe+peWq+WqAWqkXqfbVYLVFL1QdqmfpQLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fa1TW1XH6kdaqfapXarPWqv2qc+VvvVJ+qA+lQdVJ+pQ+pzdVh9oY6oL9VR9ZU6pr5Wx9U36oT6Vp1U36lT6rQ6o75XZ9UP6pw6ry6oH9VF9ZO6pH5Wl1VQoFErrbXRkU6n0+sUnUFn1NfoTPpanVlfpxP6ep1F36Cz6ht1Np1d59A5dS6dW+fRVpN2mnWs8+p8Oqlv0vn1zTpVF9AFdSHtdWFdRBfVxfQturi+VZfQt+mS+nZdSpfWZXRZfYcup+/U5fVduoK+W1fUlXRlXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSf9K19UO6jn5Y19WP6Hr6UV1fN9ANdSPdWD+mm+jHdVPdTDfXT+gWuqVupZ/UrfVTuo1+WrfVz+h2+lndXj+nO+jndUfdSXfWP+vLOuiuupvurnvonrqX7q376L66n+6vX9ID9Mt6oH5FD9KD9RD9qh6qX9PD9Ot6uB6hR+o39Cg9Wo/RY/U4PV5P0G/qifotPUm/rSfrKXqqnqan6xm67689zfk/yH/rH+QP/OXs2/R2/ZHeoXfqXXq33qP36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+ro/rE/qEPqlP6lP6tP5Rf6/P6h/0OX1en9c/6ov6or7069cADBpltDEmMulMepNiMpiM5hqTyVxrMpvrTMJcb7KYG0xWc6PJZrKbHCanyWVymzzGGjLOsIlNXpPPJM1N+OsFhSloChlvCpsipug/k2/ym5tNqinwN/l/NL7GprFpYpqYpqapaW6amxamhWllWpnWprVpY9qYtqataWfamfamvelgOpiOpqPpbDqbLqaL6Wq6mu6mu+lpepnepo/pa/qZ/uYlM8AMMAPNQDPIDDJDzBAz1Aw1w8wwM9wMNyPNSDPKjDJjzBgzzowzE8wEM9FMNJPMJDPZTDZTzVQz3Uw3M81MM8vMMnPMHDPXzDXzzDyzwCwwi8wis9gsNkvNUrPMLDPLzQqzwqwyq8was8asM+vMBrPBbDKbzBazxSw32812s8PsMLvMLrPH7DH7zD6z3+w3B8wBc9AcNIfMIXPYHDZHzBFz1Bw1x8wxc9wcNyfMCXPSnDSnzClzxpwxZ81Zc86cMxfMBXPRXDSXzCVz2Vy+ctkXqUhFJjJRuihdlBKlRBmjjFGmKFOUOcocJaJElCXKEmWNboyyRdmjHFHOKFeUO8oT2YgiF3EUR3mjfFEyuinKH90cpUYFooJRochHhaMiUdGoWHRLVDy6NSoR3RaVjG6PSkWlozJR2eiOqFx0Z1Q+uiuqEN0dVYwqRZWjKtE9UdXo3qhadF9UPbo/qhE9ENWMHoxqRX+KakcPRXWih6O60SNRvejRqH7UIGoYNYoa/1v7D+Fc9sd9V9vNdrc9bE/by/a2fWxf28/2ty/ZAfZlO9C+YgfZwXaIfdUOta/ZYfZ1O9yOsCPtG3aUHW3H2LF2nB1vJ9g37UT7lp1k37aT7RQ71U6z0+0MO9O+Y2fZ2XaOfdfOte/ZeXa+XWAX2kX2fbvYLrFL7Qd2mf3QLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63H9kddqfdZXfbPXav3Wc/tvvtJ/aA/dQetJ/ZQ/Zze9h+YY/YL+1R+5U9Zr+2x+039oT91p6039lT9rQ9Y7+3Z+0P9pw9by/YH+1F+5O9ZH+2l224cnF/5eOdDBlKR+kohVIoI2WkTJSJMlNmSlCCslAWykpZKRtloxyUg3JRLspDeegKJqa8lJeSlKT8lJ9SKZUKUkHy5KkIFaFiVIyKU3EqQSWoJJWkUlSKylAZuoPuoDvpTrqL7qK76W6qRJWoClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpITWkxtSYmlATakpNqTk1pxbUglpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pe7UnXpST+pNvakv9aX+1J8G0AAaSANpEA2iITSEhtJQGkbDaDiNoJH0Bo2i0TSGxtI4Gk8TaAJNpIk0iSbRZJpMU2kqTafpNJNm0iyaRXNoDs2luTSP5tECWkCLaBEtpsW0lJbSMlpGy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaTvtoB20i3bRHtpD+2gf7af9dIAO0EE6SIfoUEAAOkJH6CgdpWN0jI7TcTpBJ+gknaRTdIrO0Bk6S2fpHJ2jC3SBLtJPdIl+pssUKMVlcBndNS6Tu9Zldte5v49zuJwul8vt8jjrsrnsfxOTcy7VFXAF/7LEdEVdasqV10LOu8KuiCvqSrnSrowr6+5w5dydrvzv4qruXlfN3eequ/tdFXfP38Q13AOupnvE1XKPutqugavjGrm67hFXzz3q6rsGrqFr5Fq4lq6Ve9K1dk+5Nu7p38WL3RK33m1wG90mt9994i64H91x94276H5yXV0319+95Aa4l91A94ob5Ab/Lh7p3nCj3Gg3xo1149z438VT3TQ33c1wM907bpab/bt4kXvfzXVL3Tw33y1wC3+Jr4xpqfvALXMfuuVuhVvpVrnVbo1b69b977GuclvcVrfN7XMfux1up9vldrs9bu8v8ZV5HHCfuoPuM3fMfe0Ouy/cEXfCHXVf/RJfmd8J96076b5zp9xpd8Z97866H9w5d/7K/MOVuX/vfnaXXXDAyIo1G444HafnFM7AGfkazsTXcma+jhN8PWfhGzgr38jZODvn4Jyci3NzHrZM7Jg55rycj5N8E+fnmzmVC3BBLsSeC3MRLsrF+BYuzrdyCb6NS/LtXIpLcxkuy3dwOb6Ty/NdXIHv5opciStzFb6Hq/K9XI3v4+p8P9fgB7gmP8i1+E9cmx/iOvww1+VHuB4/yvW5ATfkRtyYH+Mm/Dg35WbcnJ/gFtySW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkXtyb+3Bf7sf9+SUewC/zQH6FB/FgHsKv8lB+jYfx6zycR/BIfoNH8Wgew2N5HI/nCfwmT+S3eBK/zZN5Ck/laTydZ/BMfodn8Wyew+/yXH6P5/F8XsALeRG/z4t5CS/lD3gZf8jLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbextv5I97BO3kX7+Y9vJf38ce8nzP8+gP3GR/iz/kwf8FH+Es+yl/xMf6aj/M3fIK/5ZP8HZ/i03yGv+ez/AOf4/N8gX/ki/wTX+Kf+TIHhhhjFevYxFGcLk4fp8QZ4ozxNXGm+No4c3xdnIivj7PEN8RZ4xvjbHH2OEecM84V547zxDam2MUcx3HeOF+cjG+K88c3x6lxgbhgXCj2ceG4SFw0LhbfEhePb41LxLfFJePb41Jx6fiR+8vGd8Tl4jvj8vFdcYX47rhiXCmuHFeJ74mrxvfG1eL74urx/XHx+IG4ZvxgDL/+v0qd+OG4bvxIXC9+NK4fN4gbxo3ixvFjcZP48bhp3CxuHj8Rt4hbxq3iJ+PW8VNxm/jpP9zfPe4R94x7xb3iEO7TC5ILk4uS7ycXJ5cklyY/SC5LfphcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JTcnNyS3JrclgyhSnrw6JXX3vjIp/PpfYrP4DP6a3wmf63P7K/zCX+9z+Jv8Fn9jT6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df5/P5mn+oL+IK+kPe+sC/iG/nGvrFv4h/3TX0z39w/4Z/wLX1L/6R/0j/l2/infVv/jG/nn/Xt/XP+Of+87+g7+c7+Bd/Fv+i7+m6+u+/ue/qevrfv7fv6vr6/7+8H+AF+oB/oB/lBfogf4of6oX6YH+aH++F+pB/pR/lRfowf48f5cX6Cn+An+ol+kp/kIwCY6qf66X66n+ln+ll+lp/j5/i5qXP9PD/PL/AL/CK/yC/2i/1Sv9Qv88v8cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Xa/3e/wO/wuv8vv8Xv8Pr/P7/f7/QF/wB/0B/0hf8gf9of9Ef+lP+q/8sf81/64/8af8N/6k/47f8qf9mf89/6s/8Gf8+f9Bf+jv+h/8pf8z/6yD35C4s3ExMRbiUmJtxOTE1MSUxPTEtMTMxIzE+8kZiVmJ+Yk3k3MTbyXmJeYn1iQWJhYlHg/sTixJLE08UFiWeLDxPLEisTKxKrE6sQaAyH3jjjkDflCMtwU8oebQ2ooEAqGQsGHwqFIKBqKhVtC8XBrKBFuCyXD7aFUKB3KhEdD/dAgNAyNQuPwWGgSHg9NQ7PQPDwRWoSWoVV4MrQOT4U24enQNjwT2oVnQ/vwXOgQng8dQ6fQObwQuoQXQ9fQLXQPPULP0Cv0Dn1C39Av9A8vhQHh5TAwvBIGhcFhSHg1DA2vhWHh9TA8jAgjwxthVBgdxoSxYVwYHyaEN8PE8FaYFN4Ok8OUMDVMC9PDjDAzvBNmhdlhTng3zA3vhXlhflgQFoZF4f2wOCwJS8MHYVn4MCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LWsC1sDx+FHWFn2BV2hz1hb9gXPg77wyfhQPg0HAyfhUPh83A4fBGOhC/D0fBVOBa+DsfDN+FE+DacDN+FU+F0OBO+D2fDD+FcOB8uhB/DxfBTuBR+DpdDCP/MXe9K/85b6EIIIYQQ/x/p9Qf7e/yD9wwAqF/bP4UQrt2Z8+hf79cAsDnbn9t9VK4WCQB4qluHh/6yVazYvXv3X49driHKNx8AEn93gl/jFdAcWkJraAbF/uH4+qhOF/kP+k/eBpDxr3JS4Lf4t/4//y/6f+yJkYtLxhey/Df9zwdIzfdbzpVV+F/iFdD8l8cpNIPi/0X/2Zv8wfgzfDEBoOlf5WQCgKYZ/n78ReBxeBpa/82RQgghhBBCCCHEn/VRZdr90fr5yvo81189FDA9/Bb/0fpcCCGEEEIIIYQQV9+znTo/+Vjr1s3aSUMa0khjjZb/zTFX+zeTEEIIIYQQ4t/tt4v+397LcDUHJIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpEH/L540drXnKIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxt/ysAAP//KWozhQ==") socket$inet6_icmp_raw(0xa, 0x3, 0x87) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x10004, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 2m56.626159387s ago: executing program 33 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{0x0}], 0x1, 0x5404, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) getrusage(0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080200000100"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300002100000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000a00)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@nomblk_io_submit}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}, {@test_dummy_encryption}], [{@smackfsdef}]}, 0x3, 0x438, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x7f) mkdir(&(0x7f0000000000)='./bus\x00', 0x6c832ac377d24da9) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000aefa00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x5000) 2m35.952539456s ago: executing program 1 (id=71): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x2a, 0x5}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2m30.931555242s ago: executing program 1 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 2m30.056760025s ago: executing program 1 (id=78): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x13, 0x10, 0x2}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, 0x0, &(0x7f0000000680)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, r0, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @private2, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}, 0x0) fsmount(r6, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000bc0)=ANY=[@ANYBLOB="696f636861727365743d63703835300080016ad509c02d303030303030303030303030303030303030303234302c6572726f72733d72656d6f756e742d726f2c696f636861727365743d63703933362c696f636861727365743d69736f383835392d31342c6769643d", @ANYRESHEX, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000002367,errors=continue,iocharset=iso8859-2,uid=', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000010001,euid<', @ANYRESDEC=0x0, @ANYBLOB=',subj_type=sched_switch\x00,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") 2m25.556064461s ago: executing program 1 (id=90): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), r4) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r6}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 2m23.469890664s ago: executing program 5 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x0, 0x2, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x0) 2m22.410882442s ago: executing program 5 (id=96): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3f, 0x2000000000000033, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffffffffffbff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 2m21.497047278s ago: executing program 5 (id=99): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) 2m20.708036275s ago: executing program 1 (id=101): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r0, 0x0, r2, 0x0, 0xfffd, 0x2) 2m20.707663587s ago: executing program 5 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 2m19.815207918s ago: executing program 5 (id=105): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) io_uring_setup(0x1be5, &(0x7f0000000080)={0x0, 0x1916, 0x800, 0x1, 0x4}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0xb, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x33f, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x9, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x7, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x7, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd7, 0xfffd, 0xb, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x3, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffa, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x164282}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m16.950313789s ago: executing program 5 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000280)={0xb94, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$eJzs3c1rHOUfAPDvbN7aNL9fIghaTwFBA6UbU2Or6KHiQQQLBT3bLpttqNlkS3dTmhDQIoIXQcWDoJeefak3r75c9V/w5EEsVdNixYNEZrPTbJvdNEmTbHU/H5js88zM5pnvPDPzPLvzMBtA1xpN/+QiDkbEe0nEcGN+EhF99VRvxPHV9W4uLxXTKYmVlVd+S+rr3FheKkbTe1IHGpmHI+LbtyMO5daXW11YnCmUy6Xzjfx4bfbceHWhPyIK06Xp0tzRicnJI8eeOnZ052L944fFoavvv/j4F8f/euuhK+9+l8TxGGosa45jp4zGaGOf9KW78DYv7HRhHZZ0egPYlvTU7Fk9y+NgDEdPPQUA/Je9ERErAECXSbT/ANBlsu8BbiwvFbOps99I7K1rz0fEvtX4s/ubq0t6G/fs9tXvgw7eSG67M5JExMgOlD8aEZ989dpn6ZTmf3y2u/Y/0DlvXoqI0yOj66//yboxC1v1xAbL+huvo3fM77b2Bzrp67T/83Sr/l/uVv8nWvR/Blqcu9tx1/N//w4UsoG0//dc09i2m03xN4z0NHL/q/f5+pIzZ8ul9Nr2/4gYi76BND+xQRlj1/++3m5Zc//v9w9e/zQtP31dWyP3S+/A7e+ZKtQK9xJzs2uXIh7pbRV/cqv+kzb935ObLOOlZ975uN2yNP403mxaH380RiftjpXLEY+1rP+1EW3J2vjExcNnZ+8YnzhePxzGs4OihS9/+miwXfnN9Z9OafnZZ4G9kNb/4MbxjyTN4zWrWy/j+8vD37Rbdvf4Wx///cmr9XTWj7hYqNXOT0T0Jy+vn39k7b1ZPls/jX/s0dbn/0bHf/qZ8HSrgFrUdO/VXz/ffvy7K41/akv1v/XElZszPe3K31z9T9ZTY405m7n+bXYD72XfAQAAAAAAAAAAAAAAAAAAAAAAAMBm5SJiKJJc/lY6l8vnV3/D+8EYzJUr1dqhM5X5uamo/1b2SPTlskddDjc9D3Wi8Tz8LH/kjvyTEfFARHw4sD/JnqM41eHYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBzoM3v/6d+Huj01gEAu2ZfpzcAANhz2n8A6D7afwDoPtp/AOg+2n8A6D7afwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHbZyRMn0mnlz+WlYpqfurAwP1O5cHiqVJ3Jz84X88WhOJefrlSmy6V8sTJ7t/9XrlTOTcbc/MXxWqlaG68uLJ6arczP1U6dnS1Ml06V+vYkKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYmurC4kyhXC6dl9hGYuX+2IzOJ3oah9MuFJFEROcD3HAL74/N2OFEhy9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8S/wQAAP//iZYeGw==") 2m15.918517347s ago: executing program 1 (id=118): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18) 2m1.512104113s ago: executing program 34 (id=111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000280)={0xb94, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") 2m0.142286283s ago: executing program 35 (id=118): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x18) 1m18.363942821s ago: executing program 2 (id=204): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) 1m17.658166575s ago: executing program 2 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty=0xf5ff}, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) 1m12.684337809s ago: executing program 2 (id=208): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m10.335196138s ago: executing program 2 (id=212): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1m7.767894051s ago: executing program 2 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = creat(&(0x7f0000000540)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) close(r1) r3 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m6.875874183s ago: executing program 2 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000280)={0xb94, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m2.370528017s ago: executing program 36 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xe, &(0x7f0000000280)={0xb94, 0x6}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 47.235165402s ago: executing program 6 (id=252): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) unshare(0x22020600) io_setup(0x800, 0x0) io_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8003, 0xc95a, 0xf, 0x1, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xff7fff00, 0x6, 0x3, 0x7, 0x7, 0x4, 0x0, 0x7, 0x3c5e, 0x1, 0x8, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffebf2, 0x7, 0x3, 0x855, 0x4c74, 0x10000, 0x242, 0x3, 0xb, 0x8, 0x80008071, 0x7, 0x17, 0xfffffffe, 0x7, 0x5, 0x3e, 0x8e, 0x9, 0x106, 0x0, 0x5, 0x2, 0x8, 0x3ff, 0x9, 0x0, 0x5, 0x2006, 0x8, 0x4000074, 0x0, 0xe], [0x10000007, 0x9, 0x8000012f, 0x100, 0x5, 0x5, 0x129432e6, 0xc8, 0x2f9, 0xe, 0x2bf, 0x6, 0x9, 0x384, 0xb, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xfffe, 0x4, 0x4007, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x5, 0x7, 0x5f31, 0xd, 0x4e0, 0x80000002, 0x6, 0xb, 0x0, 0x5662, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x8, 0x3, 0xbc45, 0x48c93690, 0x80, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x80b, 0x4, 0x5, 0x800, 0x0, 0x4d4, 0x5, 0x8000008, 0x86, 0x3, 0xcc, 0x3e7, 0xb, 0xbc, 0x2, 0x6, 0x3, 0x2000000b, 0x4, 0x106d01, 0x4, 0x38, 0x800003, 0x1fc, 0x9, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x10000ac8, 0xbf, 0x3, 0xffffffff, 0x3, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x7, 0x120000, 0x3, 0x6, 0x712, 0xc, 0x25], [0x9, 0xbb35, 0x7b304120, 0x3ff, 0x5, 0x938, 0x6, 0x6, 0x400000, 0x8, 0xff, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x3f51, 0x4, 0x1, 0xffff, 0xa620, 0x2, 0x5, 0x2000001, 0x2000002, 0x14c, 0x60a7, 0x2000006, 0x16, 0xffffffff, 0x80000000, 0x9, 0x8, 0xc8, 0x1, 0xfffff000, 0x9, 0x3, 0x7e, 0x100, 0x8, 0x7, 0xaf, 0x8, 0xa, 0x226, 0x5, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x6, 0x2, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1000d5, 0x200, 0x9, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 46.344688835s ago: executing program 6 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 45.066485859s ago: executing program 6 (id=258): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) recvmsg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x60) socket(0x2c, 0x800, 0x90fb) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r6, 0x3312, 0x374b) 44.599388711s ago: executing program 7 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) getpid() munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 43.144212098s ago: executing program 6 (id=261): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 43.025174364s ago: executing program 7 (id=262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) 41.587071017s ago: executing program 6 (id=264): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x8000000000000001, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.172388448s ago: executing program 6 (id=268): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, 0x0) 35.35166786s ago: executing program 7 (id=270): preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 34.66617182s ago: executing program 7 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) getpid() munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 33.463261415s ago: executing program 7 (id=273): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x374b) 32.249173271s ago: executing program 7 (id=276): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000fde4d58a61fd7f9767cded21c90dc899a489afd2d4070200", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) futex(&(0x7f0000000400)=0x2, 0x2, 0x1, &(0x7f0000000680)={0x0, 0x3938700}, &(0x7f00000006c0), 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16.975593095s ago: executing program 37 (id=276): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x400001) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000fde4d58a61fd7f9767cded21c90dc899a489afd2d4070200", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) futex(&(0x7f0000000400)=0x2, 0x2, 0x1, &(0x7f0000000680)={0x0, 0x3938700}, &(0x7f00000006c0), 0x2) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 12.951594508s ago: executing program 4 (id=300): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x5a, [{{0x9, 0x4, 0x0, 0x4, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8003, 0xf9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc, 0x0, 0x4e}}}}}]}}]}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 11.499997716s ago: executing program 8 (id=302): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) futimesat(0xffffffffffffffff, &(0x7f0000000480)='./bus\x00', 0x0) 11.499759848s ago: executing program 9 (id=221): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3f, 0x2000000000000033, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffffffffffbff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 10.727152562s ago: executing program 8 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 10.298393964s ago: executing program 4 (id=304): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x4000000000, 0x7, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 9.667318317s ago: executing program 8 (id=305): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc71b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, "b6"}, @global=@item_4={0x3, 0x1, 0x3, "e58eb8c0"}]}}, 0x0}, 0x0) 8.440395552s ago: executing program 4 (id=306): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "ae1fc1c6"}]}}, 0x0}, 0x0) 7.528321084s ago: executing program 9 (id=307): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x10) pwrite64(r3, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r3, r3, 0x0, 0xe3aa6ea) 7.015794441s ago: executing program 8 (id=308): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') socket$inet6(0xa, 0x2, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r0], 0x0) 5.850838654s ago: executing program 4 (id=309): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0xc}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 4.590419263s ago: executing program 8 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 4.395503921s ago: executing program 4 (id=311): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, 0x0, 0x0, 0x4000, 0x0) 3.811737721s ago: executing program 8 (id=312): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) getpid() r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f80)=""/237, 0x1a, 0xed, 0x2}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x0) 3.752846035s ago: executing program 4 (id=313): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x62000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 3.28749336s ago: executing program 9 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002f400008500000082000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.02980816s ago: executing program 9 (id=315): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', 0x0) 781.301156ms ago: executing program 9 (id=316): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3f, 0x2000000000000033, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lseek(0xffffffffffffffff, 0x7ffffffffffffbff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 9 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r3}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.136169][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.415573][ T5810] hsr_slave_0: entered promiscuous mode [ 174.426551][ T5810] hsr_slave_1: entered promiscuous mode [ 174.543433][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.551280][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.559230][ T5813] bridge_slave_0: entered allmulticast mode [ 174.568476][ T5813] bridge_slave_0: entered promiscuous mode [ 174.740223][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.747824][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.757185][ T5821] bridge_slave_0: entered allmulticast mode [ 174.766096][ T5821] bridge_slave_0: entered promiscuous mode [ 174.781773][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.789382][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.797734][ T5813] bridge_slave_1: entered allmulticast mode [ 174.806693][ T5813] bridge_slave_1: entered promiscuous mode [ 174.861623][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.870601][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.878369][ T5821] bridge_slave_1: entered allmulticast mode [ 174.887642][ T5821] bridge_slave_1: entered promiscuous mode [ 174.959032][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.966729][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.974275][ T5817] bridge_slave_0: entered allmulticast mode [ 174.984620][ T5817] bridge_slave_0: entered promiscuous mode [ 175.087056][ T5818] Bluetooth: hci0: command tx timeout [ 175.124179][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.132000][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.139745][ T5817] bridge_slave_1: entered allmulticast mode [ 175.148376][ T5817] bridge_slave_1: entered promiscuous mode [ 175.209692][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.217542][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.225232][ T5815] bridge_slave_0: entered allmulticast mode [ 175.234476][ T5815] bridge_slave_0: entered promiscuous mode [ 175.245310][ T5818] Bluetooth: hci4: command tx timeout [ 175.250896][ T5818] Bluetooth: hci1: command tx timeout [ 175.256754][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.325443][ T5818] Bluetooth: hci2: command tx timeout [ 175.331022][ T5818] Bluetooth: hci3: command tx timeout [ 175.361388][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.381748][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.391479][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.399263][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.407365][ T5815] bridge_slave_1: entered allmulticast mode [ 175.416537][ T5815] bridge_slave_1: entered promiscuous mode [ 175.439343][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.506178][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.526307][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.757984][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.776806][ T5813] team0: Port device team_slave_0 added [ 175.821983][ T5821] team0: Port device team_slave_0 added [ 175.837862][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.869490][ T5813] team0: Port device team_slave_1 added [ 175.883937][ T5817] team0: Port device team_slave_0 added [ 175.901233][ T5817] team0: Port device team_slave_1 added [ 175.916136][ T5821] team0: Port device team_slave_1 added [ 176.198650][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.207111][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.234656][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.250141][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.257535][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.283943][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.297958][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.305206][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.331690][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.398686][ T5815] team0: Port device team_slave_0 added [ 176.428523][ T5815] team0: Port device team_slave_1 added [ 176.452401][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.459954][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.486293][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.516944][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.524083][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.551040][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.649321][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.656640][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.683233][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.701343][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.709893][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.736303][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.820431][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.827734][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.854395][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.977677][ T5813] hsr_slave_0: entered promiscuous mode [ 176.987506][ T5813] hsr_slave_1: entered promiscuous mode [ 176.996185][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 177.002080][ T5813] Cannot create hsr debugfs directory [ 177.099525][ T5817] hsr_slave_0: entered promiscuous mode [ 177.109219][ T5817] hsr_slave_1: entered promiscuous mode [ 177.118190][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 177.124089][ T5817] Cannot create hsr debugfs directory [ 177.168263][ T5818] Bluetooth: hci0: command tx timeout [ 177.328034][ T5818] Bluetooth: hci1: command tx timeout [ 177.332992][ T5821] hsr_slave_0: entered promiscuous mode [ 177.333603][ T5818] Bluetooth: hci4: command tx timeout [ 177.343557][ T5821] hsr_slave_1: entered promiscuous mode [ 177.353468][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 177.359539][ T5821] Cannot create hsr debugfs directory [ 177.405615][ T49] Bluetooth: hci3: command tx timeout [ 177.411200][ T49] Bluetooth: hci2: command tx timeout [ 177.490274][ T5815] hsr_slave_0: entered promiscuous mode [ 177.502228][ T5815] hsr_slave_1: entered promiscuous mode [ 177.510358][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 177.516325][ T5815] Cannot create hsr debugfs directory [ 177.670435][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.694032][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.808187][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.923584][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.751846][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.815620][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.866332][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.963745][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.117506][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.177843][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.263092][ T5818] Bluetooth: hci0: command tx timeout [ 179.269693][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.306495][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.424942][ T5818] Bluetooth: hci4: command tx timeout [ 179.430534][ T5818] Bluetooth: hci1: command tx timeout [ 179.442150][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.477840][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.502507][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.511216][ T49] Bluetooth: hci2: command tx timeout [ 179.511358][ T5818] Bluetooth: hci3: command tx timeout [ 179.540071][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.570545][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.593922][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.643125][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.723099][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.878994][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.204239][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.341645][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.349196][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.442631][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.513568][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.521566][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.583316][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.901224][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.951079][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.996340][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.040089][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.088800][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.096374][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.111642][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.119231][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.228646][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.296134][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.352305][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.359902][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.375778][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.383425][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.417221][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.425022][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.586198][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.593654][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.616476][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.624011][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.639257][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.646799][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.741931][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.174025][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.576422][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.119807][ T5810] veth0_vlan: entered promiscuous mode [ 183.233738][ T5810] veth1_vlan: entered promiscuous mode [ 183.409252][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.622219][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.636887][ T5810] veth0_macvtap: entered promiscuous mode [ 183.775714][ T5810] veth1_macvtap: entered promiscuous mode [ 183.921010][ T5817] veth0_vlan: entered promiscuous mode [ 184.002090][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.016878][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.085255][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.193621][ T1864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.249237][ T1864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.274361][ T5817] veth1_vlan: entered promiscuous mode [ 184.284574][ T1864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.296372][ T3602] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.318513][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.348248][ T5813] veth0_vlan: entered promiscuous mode [ 184.488381][ T5813] veth1_vlan: entered promiscuous mode [ 184.656789][ T5817] veth0_macvtap: entered promiscuous mode [ 184.769544][ T5817] veth1_macvtap: entered promiscuous mode [ 184.779755][ T5815] veth0_vlan: entered promiscuous mode [ 184.880886][ T5813] veth0_macvtap: entered promiscuous mode [ 184.922640][ T5815] veth1_vlan: entered promiscuous mode [ 184.974459][ T5813] veth1_macvtap: entered promiscuous mode [ 184.995468][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.055530][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.133572][ T1864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.195439][ T1864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.212240][ T3788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.265443][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.282705][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.323467][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.414090][ T5815] veth0_macvtap: entered promiscuous mode [ 185.437892][ T5070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.465119][ T5815] veth1_macvtap: entered promiscuous mode [ 185.476735][ T5070] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.513278][ T5070] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.579587][ T5070] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.705796][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.801042][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.926655][ T1864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.970119][ T5070] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.012841][ T5070] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.085954][ T5070] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.153151][ T5821] veth0_vlan: entered promiscuous mode [ 187.273842][ T5821] veth1_vlan: entered promiscuous mode [ 187.572070][ T5821] veth0_macvtap: entered promiscuous mode [ 187.658502][ T5821] veth1_macvtap: entered promiscuous mode [ 187.811202][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.901357][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.019398][ T3754] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.054293][ T3754] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.101471][ T3754] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.136168][ T3754] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.535105][ T3754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.543088][ T3754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.708502][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.716779][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.068165][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 191.861779][ T3602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.871432][ T3602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.010026][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.018513][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.183178][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.191340][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.309796][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.317983][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.823086][ T3754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.831207][ T3754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.938662][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.947569][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.476513][ T5864] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 193.675181][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 193.709223][ T5864] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 193.718113][ T5864] usb 1-1: config 0 has no interface number 0 [ 193.724501][ T5864] usb 1-1: config 0 interface 184 has no altsetting 0 [ 193.758360][ T6009] loop2: detected capacity change from 0 to 256 [ 193.791641][ T6009] ======================================================= [ 193.791641][ T6009] WARNING: The mand mount option has been deprecated and [ 193.791641][ T6009] and is ignored by this kernel. Remove the mand [ 193.791641][ T6009] option from the mount to silence this warning. [ 193.791641][ T6009] ======================================================= [ 193.891650][ T5864] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 193.902778][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.911208][ T5864] usb 1-1: Product: syz [ 193.915814][ T5864] usb 1-1: Manufacturer: syz [ 193.920596][ T5864] usb 1-1: SerialNumber: syz [ 194.019207][ T5864] usb 1-1: config 0 descriptor?? [ 194.023166][ T6009] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.035504][ T6009] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 194.078839][ T5864] smsc75xx v1.0.0 [ 194.196241][ T6009] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.327993][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.336476][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.451841][ T30] audit: type=1804 audit(1755143739.881:2): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6" name="/newroot/1/bus/bus" dev="loop2" ino=1048597 res=1 errno=0 [ 194.480989][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 194.634608][ T5070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.642983][ T5070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.334117][ T5864] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 195.346941][ T5864] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 195.458496][ T6017] loop2: detected capacity change from 0 to 256 [ 195.536156][ T5864] usb 1-1: USB disconnect, device number 2 [ 196.740114][ T6021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8'. [ 196.917709][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 197.088586][ T6026] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 197.185522][ T6027] loop0: detected capacity change from 0 to 512 [ 197.515271][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.537053][ T6027] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.724041][ T6023] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.9: corrupted inode contents [ 197.775577][ T6023] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.9: mark_inode_dirty error [ 197.857030][ T6023] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.9: corrupted inode contents [ 197.881788][ T6023] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.9: mark_inode_dirty error [ 198.186273][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.447889][ T6040] IPv4: Oversized IP packet from 127.202.26.0 [ 198.499525][ T6041] loop3: detected capacity change from 0 to 256 [ 198.595143][ T6038] serio: Serial port ptm0 [ 200.155391][ T5873] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 200.458187][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.469618][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.479782][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.493146][ T5873] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.508334][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.508649][ T5864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.648502][ T5873] usb 2-1: config 0 descriptor?? [ 200.718000][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 200.764583][ T5864] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 200.773599][ T5864] usb 3-1: config 0 has no interface number 0 [ 200.782186][ T5864] usb 3-1: config 0 interface 184 has no altsetting 0 [ 200.881516][ T5864] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 200.893304][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.903757][ T5864] usb 3-1: Product: syz [ 200.911812][ T5864] usb 3-1: Manufacturer: syz [ 200.917444][ T5864] usb 3-1: SerialNumber: syz [ 201.055035][ T5864] usb 3-1: config 0 descriptor?? [ 201.091122][ T5873] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xe [ 201.099430][ T5873] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 201.119062][ T5864] smsc75xx v1.0.0 [ 201.228249][ T5873] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 201.362401][ T5873] usb 2-1: USB disconnect, device number 2 [ 201.456291][ T6061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.815896][ T5864] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 201.827177][ T5864] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 201.956871][ T5864] usb 3-1: USB disconnect, device number 2 [ 202.234000][ T6066] fido_id[6066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 203.902084][ T6085] loop2: detected capacity change from 0 to 512 [ 203.968230][ T6085] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 204.393574][ T6087] serio: Serial port ptm0 [ 205.266119][ T6100] netlink: 108 bytes leftover after parsing attributes in process `syz.0.34'. [ 205.276563][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 206.185186][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.386424][ T5873] usb 5-1: Using ep0 maxpacket: 32 [ 206.419297][ T5873] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.428106][ T5873] usb 5-1: config 0 has no interface number 0 [ 206.434395][ T5873] usb 5-1: config 0 interface 184 has no altsetting 0 [ 206.556833][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.566233][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.574430][ T5873] usb 5-1: Product: syz [ 206.579232][ T5873] usb 5-1: Manufacturer: syz [ 206.584100][ T5873] usb 5-1: SerialNumber: syz [ 206.655739][ T5873] usb 5-1: config 0 descriptor?? [ 206.674413][ T5873] smsc75xx v1.0.0 [ 207.513092][ T5873] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 207.524749][ T5873] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 207.612542][ T5873] usb 5-1: USB disconnect, device number 2 [ 208.541234][ T6112] netlink: 44 bytes leftover after parsing attributes in process `syz.4.37'. [ 208.550475][ T6112] netlink: 43 bytes leftover after parsing attributes in process `syz.4.37'. [ 208.561429][ T6112] netlink: 'syz.4.37': attribute type 6 has an invalid length. [ 208.569288][ T6112] netlink: 'syz.4.37': attribute type 5 has an invalid length. [ 208.577167][ T6112] netlink: 43 bytes leftover after parsing attributes in process `syz.4.37'. [ 208.827199][ T6113] loop0: detected capacity change from 0 to 512 [ 208.857884][ T6113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.865118][ T6113] EXT4-fs: quotafile must be on filesystem root [ 209.275980][ T6117] loop4: detected capacity change from 0 to 256 [ 214.195824][ T6130] serio: Serial port ptm0 [ 214.653077][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.666337][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.702493][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.716829][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.740790][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.793507][ T6133] chnl_net:caif_netlink_parms(): no params data found [ 216.861411][ T5818] Bluetooth: hci5: command tx timeout [ 217.482884][ T6133] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.511671][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.519463][ T6133] bridge_slave_0: entered allmulticast mode [ 217.529030][ T6133] bridge_slave_0: entered promiscuous mode [ 217.637330][ T6133] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.645955][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.653637][ T6133] bridge_slave_1: entered allmulticast mode [ 217.663018][ T6133] bridge_slave_1: entered promiscuous mode [ 218.107904][ T6133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.219805][ T6133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.549330][ T6133] team0: Port device team_slave_0 added [ 218.644681][ T6133] team0: Port device team_slave_1 added [ 218.945522][ T5818] Bluetooth: hci5: command tx timeout [ 219.103545][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.110934][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.139406][ T6133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.279749][ T6133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.287129][ T6133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.313853][ T6133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.805677][ T6133] hsr_slave_0: entered promiscuous mode [ 219.815836][ T6133] hsr_slave_1: entered promiscuous mode [ 219.824420][ T6133] debugfs: 'hsr0' already exists in 'hsr' [ 219.830550][ T6133] Cannot create hsr debugfs directory [ 220.250498][ T6154] loop2: detected capacity change from 0 to 4096 [ 220.407642][ T6154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.015120][ T5818] Bluetooth: hci5: command tx timeout [ 221.276523][ T6133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 221.382188][ T6133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 221.517595][ T6133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 221.617369][ T6133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.731050][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.746779][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.756671][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.774461][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.810908][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.093347][ T49] Bluetooth: hci5: command tx timeout [ 223.161834][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.424635][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.450120][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.474043][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.481747][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.654141][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.661869][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.456365][ T6164] chnl_net:caif_netlink_parms(): no params data found [ 224.557710][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.568922][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.935309][ T49] Bluetooth: hci6: command tx timeout [ 225.137524][ T6177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.56'. [ 225.897851][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 225.907106][ T6185] netlink: 32 bytes leftover after parsing attributes in process `syz.1.57'. [ 225.935804][ T6185] gretap1: entered promiscuous mode [ 226.515024][ T6164] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.522512][ T6164] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.531450][ T6164] bridge_slave_0: entered allmulticast mode [ 226.540969][ T6164] bridge_slave_0: entered promiscuous mode [ 226.667558][ T6164] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.675132][ T6164] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.682825][ T6164] bridge_slave_1: entered allmulticast mode [ 226.693333][ T6164] bridge_slave_1: entered promiscuous mode [ 226.773451][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.017634][ T49] Bluetooth: hci6: command tx timeout [ 227.050019][ T6164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.072862][ T6164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.257079][ T6164] team0: Port device team_slave_0 added [ 227.317663][ T6164] team0: Port device team_slave_1 added [ 227.803667][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.811159][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.839753][ T6164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.929898][ T6164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.937377][ T6164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.965740][ T6164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.623210][ T6164] hsr_slave_0: entered promiscuous mode [ 228.633309][ T6164] hsr_slave_1: entered promiscuous mode [ 228.642112][ T6164] debugfs: 'hsr0' already exists in 'hsr' [ 228.648227][ T6164] Cannot create hsr debugfs directory [ 229.088131][ T49] Bluetooth: hci6: command tx timeout [ 229.574110][ T6199] loop2: detected capacity change from 0 to 512 [ 229.920958][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.429678][ T6164] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.464414][ T6133] veth0_vlan: entered promiscuous mode [ 230.476728][ T6164] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.527045][ T6164] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.641339][ T6164] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.743219][ T6133] veth1_vlan: entered promiscuous mode [ 231.147126][ T6133] veth0_macvtap: entered promiscuous mode [ 231.168710][ T49] Bluetooth: hci6: command tx timeout [ 231.206155][ T6133] veth1_macvtap: entered promiscuous mode [ 231.415669][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.526074][ T6133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.667919][ T3754] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.726250][ T3754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.792080][ T3754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.849317][ T3788] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.220112][ T6164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.469528][ T6164] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.590519][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.598105][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.733248][ T3788] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.740947][ T3788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.227660][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.852658][ T6221] loop2: detected capacity change from 0 to 512 [ 234.956945][ T6221] EXT4-fs: Conflicting test_dummy_encryption options [ 235.149235][ T6164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.564169][ T6229] loop1: detected capacity change from 0 to 4096 [ 236.813202][ T6229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.249407][ T6164] veth0_vlan: entered promiscuous mode [ 238.364711][ T6164] veth1_vlan: entered promiscuous mode [ 238.738470][ T6164] veth0_macvtap: entered promiscuous mode [ 238.824519][ T6164] veth1_macvtap: entered promiscuous mode [ 239.066262][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.166518][ T6164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.390083][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.433334][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.508397][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.586994][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.746737][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.634326][ T6255] loop1: detected capacity change from 0 to 256 [ 240.877509][ T6255] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 240.991967][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.000324][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.059740][ T6255] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 241.209727][ T6255] exFAT-fs (loop1): valid_size(150994954) is greater than size(10) [ 241.295770][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.303874][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.520016][ T6263] process 'syz.5.42' launched './file0' with NULL argv: empty string added [ 244.133194][ T6277] tmpfs: Bad value for 'huge' [ 245.283779][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 245.487497][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 245.516867][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 245.525769][ T9] usb 3-1: config 0 has no interface number 0 [ 245.532167][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 245.613336][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 245.623766][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.632532][ T9] usb 3-1: Product: syz [ 245.637012][ T9] usb 3-1: Manufacturer: syz [ 245.641778][ T9] usb 3-1: SerialNumber: syz [ 245.774700][ T9] usb 3-1: config 0 descriptor?? [ 245.820986][ T9] smsc75xx v1.0.0 [ 247.070645][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 247.083699][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 247.157816][ T9] usb 3-1: USB disconnect, device number 3 [ 247.999790][ T6297] loop4: detected capacity change from 0 to 128 [ 248.105257][ T6297] EXT4-fs (loop4): Test dummy encryption mode enabled [ 248.191903][ T6297] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.274611][ T6297] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.328798][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.336898][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.753639][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.761953][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.646390][ T6297] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 249.795768][ T6314] loop5: detected capacity change from 0 to 256 [ 249.977419][ T6297] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 250.510821][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.595841][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 252.189091][ T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 252.407310][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 252.443478][ T42] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.452611][ T42] usb 7-1: config 0 has no interface number 0 [ 252.459281][ T42] usb 7-1: config 0 interface 184 has no altsetting 0 [ 252.545148][ T30] audit: type=1326 audit(1755143797.951:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.567302][ T30] audit: type=1326 audit(1755143797.971:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.589501][ T30] audit: type=1326 audit(1755143797.981:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.611780][ T30] audit: type=1326 audit(1755143797.981:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.639907][ T30] audit: type=1326 audit(1755143797.981:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.664423][ T30] audit: type=1326 audit(1755143797.991:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 252.875460][ T42] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.885581][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.894074][ T42] usb 7-1: Product: syz [ 252.898811][ T42] usb 7-1: Manufacturer: syz [ 252.903590][ T42] usb 7-1: SerialNumber: syz [ 253.037353][ T42] usb 7-1: config 0 descriptor?? [ 253.068455][ T42] smsc75xx v1.0.0 [ 253.140324][ T30] audit: type=1326 audit(1755143798.191:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 253.162581][ T30] audit: type=1326 audit(1755143798.191:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6335 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 254.046687][ T42] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 254.068415][ T42] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 254.196156][ T42] usb 7-1: USB disconnect, device number 2 [ 256.037542][ T6355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 256.684343][ T6358] loop6: detected capacity change from 0 to 1024 [ 256.941966][ T6358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.955128][ T6358] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.049282][ T6358] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.98: bg 0: block 393: padding at end of block bitmap is not set [ 257.080870][ T6358] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 257.094219][ T6358] EXT4-fs (loop6): This should not happen!! Data will be lost [ 257.094219][ T6358] [ 257.104307][ T6358] EXT4-fs (loop6): Total free blocks count 0 [ 257.110776][ T6358] EXT4-fs (loop6): Free/Dirty block details [ 257.116943][ T6358] EXT4-fs (loop6): free_blocks=0 [ 257.122130][ T6358] EXT4-fs (loop6): dirty_blocks=16 [ 257.135033][ T6358] EXT4-fs (loop6): Block reservation details [ 257.141199][ T6358] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 257.718241][ T6164] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.333345][ T6378] loop6: detected capacity change from 0 to 512 [ 258.410751][ T6378] msdos: Bad value for 'allow_utime' [ 258.445146][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 258.645354][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 258.696312][ T6378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.713515][ T42] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 258.722523][ T42] usb 6-1: config 0 has no interface number 0 [ 258.729133][ T42] usb 6-1: config 0 interface 184 has no altsetting 0 [ 258.925969][ T42] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 258.935430][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.943644][ T42] usb 6-1: Product: syz [ 258.948124][ T42] usb 6-1: Manufacturer: syz [ 258.952894][ T42] usb 6-1: SerialNumber: syz [ 258.974575][ T30] audit: type=1326 audit(1755143804.401:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.114112][ T42] usb 6-1: config 0 descriptor?? [ 259.165655][ T30] audit: type=1326 audit(1755143804.511:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.182997][ T42] smsc75xx v1.0.0 [ 259.191787][ T30] audit: type=1326 audit(1755143804.511:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.217671][ T30] audit: type=1326 audit(1755143804.511:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.239889][ T30] audit: type=1326 audit(1755143804.521:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.262308][ T30] audit: type=1326 audit(1755143804.551:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.288297][ T30] audit: type=1326 audit(1755143804.551:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.312218][ T30] audit: type=1326 audit(1755143804.731:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 259.805964][ T42] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 259.817176][ T42] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 260.025517][ T42] usb 6-1: USB disconnect, device number 2 [ 260.191401][ T30] audit: type=1326 audit(1755143804.891:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 260.217493][ T30] audit: type=1326 audit(1755143804.931:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.107" exe="/root/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 260.522349][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.6.110'. [ 262.168546][ T6407] loop6: detected capacity change from 0 to 256 [ 262.447675][ T6405] loop5: detected capacity change from 0 to 2048 [ 262.535263][ T6407] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 262.705875][ T6407] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 262.827994][ T6416] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 263.037252][ T6405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.566705][ T6420] loop2: detected capacity change from 0 to 1024 [ 263.670170][ T6420] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 263.947714][ T6420] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.119: Invalid block bitmap block 0 in block_group 0 [ 264.025656][ T6420] __quota_error: 1 callbacks suppressed [ 264.025738][ T6420] Quota error (device loop2): write_blk: dquota write failed [ 264.039601][ T6420] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 264.049967][ T6420] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.119: Failed to acquire dquot type 0 [ 264.206315][ T6420] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.119: Freeing blocks not in datazone - block = 0, count = 4096 [ 264.266910][ T6420] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.119: Invalid inode bitmap blk 0 in block_group 0 [ 264.308074][ T6424] overlayfs: overlapping lowerdir path [ 264.315485][ T3754] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-7 [ 264.325056][ T3754] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 0 [ 264.365753][ T6420] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 264.432950][ T6420] EXT4-fs (loop2): 1 orphan inode deleted [ 264.441667][ T6420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.903981][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.255271][ T42] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 265.446092][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 265.482150][ T42] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 265.491724][ T42] usb 7-1: config 0 has no interface number 0 [ 265.498649][ T42] usb 7-1: config 0 interface 184 has no altsetting 0 [ 265.633842][ T42] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 265.643282][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.651673][ T42] usb 7-1: Product: syz [ 265.656158][ T42] usb 7-1: Manufacturer: syz [ 265.661005][ T42] usb 7-1: SerialNumber: syz [ 265.811074][ T42] usb 7-1: config 0 descriptor?? [ 265.839386][ T42] smsc75xx v1.0.0 [ 266.645188][ T42] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 266.666296][ T42] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 266.819912][ T42] usb 7-1: USB disconnect, device number 3 [ 267.276939][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.124'. [ 268.435644][ T6449] loop2: detected capacity change from 0 to 256 [ 268.673148][ T6449] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d) [ 268.702035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 270.125350][ T30] audit: type=1326 audit(1755143815.541:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.285229][ T30] audit: type=1326 audit(1755143815.641:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.307832][ T30] audit: type=1326 audit(1755143815.681:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.330224][ T30] audit: type=1326 audit(1755143815.681:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.358809][ T30] audit: type=1326 audit(1755143815.681:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.383480][ T30] audit: type=1326 audit(1755143815.681:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.405849][ T30] audit: type=1326 audit(1755143815.681:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.428207][ T30] audit: type=1326 audit(1755143815.681:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 270.457061][ T30] audit: type=1326 audit(1755143815.681:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.2.131" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 272.145204][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 272.335336][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 272.415571][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 272.424076][ T9] usb 3-1: config 0 has no interface number 0 [ 272.430579][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 272.559941][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 272.569452][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.577954][ T9] usb 3-1: Product: syz [ 272.582290][ T9] usb 3-1: Manufacturer: syz [ 272.591033][ T9] usb 3-1: SerialNumber: syz [ 272.818203][ T9] usb 3-1: config 0 descriptor?? [ 272.868614][ T9] smsc75xx v1.0.0 [ 273.655292][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 273.666591][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 273.796658][ T9] usb 3-1: USB disconnect, device number 4 [ 274.302466][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.6.138'. [ 275.162970][ T6480] syz.6.140: attempt to access beyond end of device [ 275.162970][ T6480] loop13: rw=0, sector=0, nr_sectors = 1 limit=0 [ 275.176472][ T6480] FAT-fs (loop13): unable to read boot sector [ 277.549152][ T3602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.866162][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.887851][ T3602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.904008][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.925766][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.995232][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.025993][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.148855][ T6499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 278.260114][ T3602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.295327][ T5871] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 278.509371][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 278.606451][ T5871] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.615977][ T5871] usb 7-1: config 0 has no interface number 0 [ 278.622260][ T5871] usb 7-1: config 0 interface 184 has no altsetting 0 [ 278.719995][ T3602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.805931][ T5871] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.815588][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.823769][ T5871] usb 7-1: Product: syz [ 278.828386][ T5871] usb 7-1: Manufacturer: syz [ 278.837613][ T5871] usb 7-1: SerialNumber: syz [ 278.886084][ T5871] usb 7-1: config 0 descriptor?? [ 279.048562][ T5871] smsc75xx v1.0.0 [ 279.640440][ T3602] bridge_slave_1: left allmulticast mode [ 279.646816][ T3602] bridge_slave_1: left promiscuous mode [ 279.659098][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.681683][ T3602] bridge_slave_0: left allmulticast mode [ 279.688218][ T3602] bridge_slave_0: left promiscuous mode [ 279.695492][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.765511][ T5818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 279.778371][ T5818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 279.881102][ T5818] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 279.894641][ T5818] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 279.907446][ T5818] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.203349][ T5818] Bluetooth: hci0: command tx timeout [ 280.271316][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.303492][ T5871] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 280.315567][ T5871] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 280.415488][ T5871] usb 7-1: USB disconnect, device number 4 [ 280.436921][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.520366][ T3602] bond0 (unregistering): Released all slaves [ 280.907529][ T6514] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 281.978218][ T5818] Bluetooth: hci7: command tx timeout [ 282.079785][ T3602] hsr_slave_0: left promiscuous mode [ 282.095774][ T3602] hsr_slave_1: left promiscuous mode [ 282.103737][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.117351][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.237946][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.245750][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.285826][ T5818] Bluetooth: hci0: command tx timeout [ 282.324353][ T3602] veth1_macvtap: left promiscuous mode [ 282.331227][ T3602] veth0_macvtap: left promiscuous mode [ 282.337350][ T3602] veth1_vlan: left promiscuous mode [ 282.342872][ T3602] veth0_vlan: left promiscuous mode [ 283.090032][ T30] audit: type=1326 audit(1755143828.521:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.113926][ T30] audit: type=1326 audit(1755143828.531:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.141022][ T30] audit: type=1326 audit(1755143828.531:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.579586][ T30] audit: type=1326 audit(1755143828.611:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.602160][ T30] audit: type=1326 audit(1755143828.651:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.624647][ T30] audit: type=1326 audit(1755143828.651:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.652206][ T30] audit: type=1326 audit(1755143828.651:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.676168][ T30] audit: type=1326 audit(1755143828.721:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.698551][ T30] audit: type=1326 audit(1755143828.741:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 283.721367][ T30] audit: type=1326 audit(1755143828.741:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.4.158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 284.075184][ T5818] Bluetooth: hci7: command tx timeout [ 284.117281][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 284.214207][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 284.445415][ T5818] Bluetooth: hci0: command tx timeout [ 285.464731][ T6494] chnl_net:caif_netlink_parms(): no params data found [ 285.997033][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.008151][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.128301][ T5818] Bluetooth: hci7: command tx timeout [ 286.346004][ T6510] chnl_net:caif_netlink_parms(): no params data found [ 286.535541][ T5818] Bluetooth: hci0: command tx timeout [ 287.770803][ T3602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.835836][ T42] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 288.089722][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 288.121432][ T42] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 288.130023][ T42] usb 7-1: config 0 has no interface number 0 [ 288.136701][ T42] usb 7-1: config 0 interface 184 has no altsetting 0 [ 288.222642][ T5818] Bluetooth: hci7: command tx timeout [ 288.313416][ T42] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 288.323124][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.331508][ T42] usb 7-1: Product: syz [ 288.335964][ T42] usb 7-1: Manufacturer: syz [ 288.340740][ T42] usb 7-1: SerialNumber: syz [ 288.353528][ T3602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.486838][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.489482][ T42] usb 7-1: config 0 descriptor?? [ 288.494491][ T6494] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.506988][ T6494] bridge_slave_0: entered allmulticast mode [ 288.516438][ T6494] bridge_slave_0: entered promiscuous mode [ 288.628978][ T42] smsc75xx v1.0.0 [ 288.717471][ T3602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.900153][ T6494] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.907805][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.915810][ T6494] bridge_slave_1: entered allmulticast mode [ 288.925403][ T6494] bridge_slave_1: entered promiscuous mode [ 289.050109][ T3602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.248481][ T42] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 289.259807][ T42] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 289.448542][ T42] usb 7-1: USB disconnect, device number 5 [ 289.728247][ T6568] loop4: detected capacity change from 0 to 512 [ 289.871434][ T6494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.906343][ T6510] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.913969][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.922054][ T6510] bridge_slave_0: entered allmulticast mode [ 289.931423][ T6510] bridge_slave_0: entered promiscuous mode [ 289.975571][ T6494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.978919][ T6568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 290.128006][ T6510] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.135873][ T6510] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.143701][ T6510] bridge_slave_1: entered allmulticast mode [ 290.153689][ T6510] bridge_slave_1: entered promiscuous mode [ 290.768018][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.933345][ T3602] bridge_slave_1: left allmulticast mode [ 290.940039][ T3602] bridge_slave_1: left promiscuous mode [ 290.947353][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.108241][ T3602] bridge_slave_0: left allmulticast mode [ 291.114258][ T3602] bridge_slave_0: left promiscuous mode [ 291.128632][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.793511][ T5871] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 292.026379][ T5871] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 292.037760][ T5871] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.055005][ T5871] usb 7-1: config 0 interface 0 has no altsetting 0 [ 292.061866][ T5871] usb 7-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 292.072588][ T5871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.260101][ T5871] usb 7-1: config 0 descriptor?? [ 292.267361][ T6577] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 292.584290][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.663758][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.757578][ T3602] bond0 (unregistering): Released all slaves [ 292.803208][ T5871] usbhid 7-1:0.0: can't add hid device: -71 [ 292.809838][ T5871] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 292.908435][ T5871] usb 7-1: USB disconnect, device number 6 [ 293.095606][ T6494] team0: Port device team_slave_0 added [ 293.123766][ T6510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.298031][ T6494] team0: Port device team_slave_1 added [ 293.370376][ T6510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.244013][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.251940][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.278353][ T6494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.375408][ T5871] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 294.449918][ T3602] hsr_slave_0: left promiscuous mode [ 294.482315][ T3602] hsr_slave_1: left promiscuous mode [ 294.490269][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.498082][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.559806][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 294.579723][ T5871] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 294.584401][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.588258][ T5871] usb 7-1: config 0 has no interface number 0 [ 294.588387][ T5871] usb 7-1: config 0 interface 184 has no altsetting 0 [ 294.614502][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.648017][ T5871] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 294.657491][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.665964][ T5871] usb 7-1: Product: syz [ 294.670291][ T5871] usb 7-1: Manufacturer: syz [ 294.675207][ T5871] usb 7-1: SerialNumber: syz [ 294.812111][ T3602] veth1_macvtap: left promiscuous mode [ 294.818117][ T3602] veth0_macvtap: left promiscuous mode [ 294.820786][ T5871] usb 7-1: config 0 descriptor?? [ 294.823947][ T3602] veth1_vlan: left promiscuous mode [ 294.834286][ T3602] veth0_vlan: left promiscuous mode [ 294.908490][ T5871] smsc75xx v1.0.0 [ 296.042886][ T5871] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 296.056242][ T5871] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 296.196110][ T5871] usb 7-1: USB disconnect, device number 7 [ 296.686930][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 296.791877][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 297.276880][ T6510] team0: Port device team_slave_0 added [ 297.298392][ T6494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.305602][ T6494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.332617][ T6494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.510919][ T6510] team0: Port device team_slave_1 added [ 298.050053][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.057448][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.088285][ T6510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.297041][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 298.303417][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 298.306580][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 298.408645][ T6510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.415879][ T6510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.442231][ T6510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.484666][ T6494] hsr_slave_0: entered promiscuous mode [ 298.502562][ T6494] hsr_slave_1: entered promiscuous mode [ 299.030441][ T6510] hsr_slave_0: entered promiscuous mode [ 299.041719][ T6510] hsr_slave_1: entered promiscuous mode [ 299.053029][ T6510] debugfs: 'hsr0' already exists in 'hsr' [ 299.059054][ T6510] Cannot create hsr debugfs directory [ 301.354159][ T6494] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.447222][ T6494] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.506985][ T6494] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 301.632446][ T6494] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.726261][ T6510] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.824720][ T6510] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.946234][ T6510] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 302.106684][ T6510] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 302.630884][ T6641] loop4: detected capacity change from 0 to 1024 [ 302.718741][ T6641] EXT4-fs: Ignoring removed i_version option [ 302.802923][ T6641] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.047077][ T6641] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.184: Invalid block bitmap block 0 in block_group 0 [ 303.177947][ T6641] __quota_error: 20 callbacks suppressed [ 303.178028][ T6641] Quota error (device loop4): write_blk: dquota write failed [ 303.191676][ T6641] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 303.202113][ T6641] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.184: Failed to acquire dquot type 0 [ 303.375458][ T6641] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.184: Freeing blocks not in datazone - block = 0, count = 4096 [ 303.470856][ T6641] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.184: Invalid inode bitmap blk 0 in block_group 0 [ 303.497836][ T3602] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8 [ 303.507533][ T3602] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 0 [ 303.605108][ T6641] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 303.745995][ T6641] EXT4-fs (loop4): 1 orphan inode deleted [ 303.753950][ T6641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.900318][ T6494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.043828][ T6510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.265303][ T6494] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.398163][ T6510] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.424650][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.432211][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.623918][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.631620][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.651750][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.659295][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.082251][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.089988][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.241501][ T6494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.259458][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.385180][ T6510] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.395913][ T6510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.485262][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 305.514677][ T6656] loop6: detected capacity change from 0 to 2048 [ 305.660501][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 305.755976][ T42] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 305.768413][ T42] usb 3-1: config 0 has no interface number 0 [ 305.774708][ T42] usb 3-1: config 0 interface 184 has no altsetting 0 [ 305.936196][ T42] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 305.946234][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.954445][ T42] usb 3-1: Product: syz [ 305.959079][ T42] usb 3-1: Manufacturer: syz [ 305.963848][ T42] usb 3-1: SerialNumber: syz [ 306.188454][ T42] usb 3-1: config 0 descriptor?? [ 306.244058][ T42] smsc75xx v1.0.0 [ 307.495642][ T42] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 307.513330][ T42] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 307.705424][ T42] usb 3-1: USB disconnect, device number 5 [ 308.128753][ T30] audit: type=1326 audit(1755143853.571:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.6.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 308.248811][ T6494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.274068][ T30] audit: type=1326 audit(1755143853.621:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.6.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=306 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 308.296427][ T30] audit: type=1326 audit(1755143853.621:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.6.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 308.319233][ T30] audit: type=1326 audit(1755143853.621:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6682 comm="syz.6.191" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4539 code=0x7ffc0000 [ 308.449313][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.959290][ T6689] loop2: detected capacity change from 0 to 256 [ 309.058810][ T6689] vfat: Unknown parameter 'shor†name' [ 309.365219][ T6692] loop4: detected capacity change from 0 to 2048 [ 309.682045][ T6692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.366582][ T5821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 310.445328][ T5821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 310.688191][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.992863][ T6494] veth0_vlan: entered promiscuous mode [ 312.171425][ T6510] veth0_vlan: entered promiscuous mode [ 312.213369][ T6494] veth1_vlan: entered promiscuous mode [ 312.380467][ T6510] veth1_vlan: entered promiscuous mode [ 312.613012][ T6494] veth0_macvtap: entered promiscuous mode [ 312.809633][ T6494] veth1_macvtap: entered promiscuous mode [ 312.969932][ T6510] veth0_macvtap: entered promiscuous mode [ 313.091110][ T6510] veth1_macvtap: entered promiscuous mode [ 313.169128][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.350766][ T6494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.403452][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.471751][ T3629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.540272][ T3629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.584606][ T3629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.593788][ T3629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.644341][ T6510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.835314][ T3629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.845233][ T3754] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.925333][ T3602] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.936159][ T5070] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.502649][ T6724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.505424][ T6737] loop6: detected capacity change from 0 to 256 [ 315.888803][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 316.064182][ T6737] FAT-fs (loop6): Directory bread(block 64) failed [ 316.073205][ T6737] FAT-fs (loop6): Directory bread(block 65) failed [ 316.080347][ T6737] FAT-fs (loop6): Directory bread(block 66) failed [ 316.087357][ T6737] FAT-fs (loop6): Directory bread(block 67) failed [ 316.094210][ T6737] FAT-fs (loop6): Directory bread(block 68) failed [ 316.101082][ T6737] FAT-fs (loop6): Directory bread(block 69) failed [ 316.112707][ T6737] FAT-fs (loop6): Directory bread(block 70) failed [ 316.115495][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 316.121082][ T6737] FAT-fs (loop6): Directory bread(block 71) failed [ 316.131477][ T6737] FAT-fs (loop6): Directory bread(block 72) failed [ 316.138317][ T6737] FAT-fs (loop6): Directory bread(block 73) failed [ 316.202502][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 316.216365][ T24] usb 3-1: config 0 has no interface number 0 [ 316.222681][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 316.355580][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 316.366561][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.374753][ T24] usb 3-1: Product: syz [ 316.379616][ T24] usb 3-1: Manufacturer: syz [ 316.384409][ T24] usb 3-1: SerialNumber: syz [ 316.560151][ T24] usb 3-1: config 0 descriptor?? [ 316.639239][ T24] smsc75xx v1.0.0 [ 317.482654][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 317.494634][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 317.714209][ T24] usb 3-1: USB disconnect, device number 6 [ 323.604067][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.612262][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.031551][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.039892][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.210700][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.219137][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.686471][ T3602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.694506][ T3602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.792594][ T6814] random: crng reseeded on system resumption [ 326.095100][ T6811] loop2: detected capacity change from 0 to 2048 [ 326.506175][ T6811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.879566][ T6823] netlink: 72 bytes leftover after parsing attributes in process `syz.6.210'. [ 327.246230][ T6819] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 327.627215][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.665437][ T5864] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 327.895933][ T5864] usb 9-1: Using ep0 maxpacket: 32 [ 327.922384][ T6830] loop7: detected capacity change from 0 to 512 [ 327.958281][ T5864] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 327.967604][ T5864] usb 9-1: config 0 has no interface number 0 [ 327.973889][ T5864] usb 9-1: config 0 interface 184 has no altsetting 0 [ 328.111568][ T5864] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 328.121325][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.129886][ T5864] usb 9-1: Product: syz [ 328.134224][ T5864] usb 9-1: Manufacturer: syz [ 328.139113][ T5864] usb 9-1: SerialNumber: syz [ 328.216825][ T6833] loop6: detected capacity change from 0 to 256 [ 328.300365][ T6833] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.311627][ T6833] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 328.341431][ T6830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.355400][ T6830] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 328.423670][ T5864] usb 9-1: config 0 descriptor?? [ 328.473584][ T5864] smsc75xx v1.0.0 [ 328.520168][ T6833] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 328.567221][ T6838] loop2: detected capacity change from 0 to 512 [ 328.621247][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.721482][ T6838] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 328.735046][ T6838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 328.787050][ T30] audit: type=1804 audit(1755143874.211:65): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.214" name="/newroot/39/bus/bus" dev="loop6" ino=1048637 res=1 errno=0 [ 328.914226][ T6838] EXT4-fs (loop2): 1 truncate cleaned up [ 328.923645][ T6838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.578793][ T5864] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 329.590099][ T5864] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 329.823065][ T5864] usb 9-1: USB disconnect, device number 2 [ 330.518134][ T6853] loop4: detected capacity change from 0 to 256 [ 330.529013][ T3629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.579449][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.618258][ T6853] exfat: Unknown parameter 'fsmagic' [ 330.891537][ T3629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.177474][ T3629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.477426][ T3629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.895614][ T6865] loop4: detected capacity change from 0 to 512 [ 332.037962][ T6865] EXT4-fs: Ignoring removed orlov option [ 332.043855][ T6865] EXT4-fs: Ignoring removed i_version option [ 332.340354][ T6865] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.220: corrupted in-inode xattr: invalid ea_ino [ 332.429649][ T3629] bridge_slave_1: left allmulticast mode [ 332.435678][ T3629] bridge_slave_1: left promiscuous mode [ 332.442193][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.468100][ T6865] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.220: couldn't read orphan inode 15 (err -117) [ 332.522387][ T6494] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.539656][ T3629] bridge_slave_0: left allmulticast mode [ 332.546221][ T3629] bridge_slave_0: left promiscuous mode [ 332.547866][ T6865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.552735][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.471392][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.913545][ T3629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.993958][ T3629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.051918][ T3629] bond0 (unregistering): Released all slaves [ 334.891363][ T3629] hsr_slave_0: left promiscuous mode [ 334.925090][ T3629] hsr_slave_1: left promiscuous mode [ 334.932770][ T3629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.942252][ T3629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.025282][ T3629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.032860][ T3629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.221238][ T3629] veth1_macvtap: left promiscuous mode [ 335.227112][ T3629] veth0_macvtap: left promiscuous mode [ 335.232965][ T3629] veth1_vlan: left promiscuous mode [ 335.238749][ T3629] veth0_vlan: left promiscuous mode [ 336.036818][ T6883] loop4: detected capacity change from 0 to 512 [ 336.327269][ T6883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.340485][ T6883] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.125146][ T3629] team0 (unregistering): Port device team_slave_1 removed [ 337.245333][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.283278][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.294002][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.323433][ T3629] team0 (unregistering): Port device team_slave_0 removed [ 337.413866][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.426017][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 337.570046][ T6895] netlink: 32 bytes leftover after parsing attributes in process `syz.8.228'. [ 337.593615][ T6898] loop7: detected capacity change from 0 to 256 [ 337.626572][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.228'. [ 337.681257][ T6898] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.692621][ T6898] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 337.857672][ T6898] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 338.215241][ T30] audit: type=1804 audit(1755143883.611:66): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.227" name="/newroot/4/bus/bus" dev="loop7" ino=1048639 res=1 errno=0 [ 338.555613][ T5865] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 338.798128][ T5865] usb 7-1: Using ep0 maxpacket: 32 [ 338.857372][ T5865] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 338.865973][ T5865] usb 7-1: config 0 has no interface number 0 [ 338.872268][ T5865] usb 7-1: config 0 interface 184 has no altsetting 0 [ 338.955264][ T5865] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 338.964581][ T5865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.973101][ T5865] usb 7-1: Product: syz [ 338.978118][ T5865] usb 7-1: Manufacturer: syz [ 338.982905][ T5865] usb 7-1: SerialNumber: syz [ 339.178471][ T5865] usb 7-1: config 0 descriptor?? [ 339.229141][ T5865] smsc75xx v1.0.0 [ 339.267594][ T5106] Bluetooth: hci5: command 0x0406 tx timeout [ 339.497875][ T5822] Bluetooth: hci1: command tx timeout [ 340.258618][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.543864][ T5865] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 340.560290][ T5865] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 340.721975][ T5865] usb 7-1: USB disconnect, device number 8 [ 340.914617][ T6891] chnl_net:caif_netlink_parms(): no params data found [ 341.577863][ T5822] Bluetooth: hci1: command tx timeout [ 343.264328][ T6891] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.273282][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.281201][ T6891] bridge_slave_0: entered allmulticast mode [ 343.290615][ T6891] bridge_slave_0: entered promiscuous mode [ 343.467545][ T6891] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.475277][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.486976][ T6891] bridge_slave_1: entered allmulticast mode [ 343.496614][ T6891] bridge_slave_1: entered promiscuous mode [ 343.649527][ T5822] Bluetooth: hci1: command tx timeout [ 343.977847][ T6949] loop4: detected capacity change from 0 to 256 [ 344.060561][ T6947] loop7: detected capacity change from 0 to 2048 [ 344.146418][ T6949] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 344.158354][ T6949] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 344.222093][ T6891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.295313][ T5864] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 344.361615][ T6891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.410842][ T6949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 344.485525][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 344.613711][ T5864] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 344.622472][ T5864] usb 7-1: config 0 has no interface number 0 [ 344.629649][ T5864] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.639878][ T5864] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 344.743759][ T30] audit: type=1804 audit(1755143890.161:67): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.239" name="/newroot/59/bus/bus" dev="loop4" ino=1048641 res=1 errno=0 [ 344.869597][ T5864] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 344.879365][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.891463][ T5864] usb 7-1: Product: syz [ 344.897390][ T5864] usb 7-1: Manufacturer: syz [ 344.902180][ T5864] usb 7-1: SerialNumber: syz [ 344.914057][ T5864] usb 7-1: config 0 descriptor?? [ 344.921820][ T6952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 344.966594][ T6891] team0: Port device team_slave_0 added [ 344.977213][ T6952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.069929][ T6891] team0: Port device team_slave_1 added [ 345.229386][ T6952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.337600][ T6952] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 345.692098][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.699770][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.732514][ T6891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.753812][ T5822] Bluetooth: hci1: command tx timeout [ 345.856497][ T6891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.863733][ T6891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.891041][ T6891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.301269][ T5871] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 346.361772][ T5871] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 346.559327][ T6960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.111829][ T5864] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 347.312441][ T6965] fido_id[6965]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 347.356960][ T6891] hsr_slave_0: entered promiscuous mode [ 347.374917][ T6891] hsr_slave_1: entered promiscuous mode [ 347.383751][ T6891] debugfs: 'hsr0' already exists in 'hsr' [ 347.389820][ T6891] Cannot create hsr debugfs directory [ 347.435799][ T5865] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 347.457182][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.463988][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.581907][ T5864] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 347.598281][ T5864] asix 7-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 347.609078][ T5864] asix 7-1:0.251: probe with driver asix failed with error -5 [ 347.680161][ T5865] usb 9-1: Using ep0 maxpacket: 32 [ 347.757428][ T5865] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 347.766025][ T5865] usb 9-1: config 0 has no interface number 0 [ 347.772303][ T5865] usb 9-1: config 0 interface 184 has no altsetting 0 [ 347.886951][ T5864] usb 7-1: USB disconnect, device number 9 [ 347.906265][ T5865] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 347.916117][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.924316][ T5865] usb 9-1: Product: syz [ 347.928946][ T5865] usb 9-1: Manufacturer: syz [ 347.933702][ T5865] usb 9-1: SerialNumber: syz [ 348.118591][ T5865] usb 9-1: config 0 descriptor?? [ 348.198850][ T5865] smsc75xx v1.0.0 [ 348.816081][ T5865] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 348.827439][ T5865] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 349.038933][ T5865] usb 9-1: USB disconnect, device number 3 [ 349.571569][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 350.429786][ T6891] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 350.586441][ T6891] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 350.766578][ T6891] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 350.936948][ T6891] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 351.180600][ T6997] loop7: detected capacity change from 0 to 128 [ 351.465471][ T30] audit: type=1800 audit(1755143897.878:68): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.254" name="bus" dev="loop7" ino=1048642 res=0 errno=0 [ 351.497900][ T6999] loop8: detected capacity change from 0 to 256 [ 351.826687][ T7002] capability: warning: `syz.6.256' uses deprecated v2 capabilities in a way that may be insecure [ 353.021431][ T6891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.577009][ T6891] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.883714][ T7016] random: crng reseeded on system resumption [ 353.938369][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.946008][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.962204][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.969766][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.275092][ T5871] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 354.550416][ T5871] usb 9-1: Using ep0 maxpacket: 32 [ 354.580244][ T5871] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 354.589539][ T5871] usb 9-1: config 0 has no interface number 0 [ 354.596331][ T5871] usb 9-1: config 0 interface 184 has no altsetting 0 [ 354.757642][ T5871] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 354.767290][ T5871] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.776156][ T5871] usb 9-1: Product: syz [ 354.780833][ T5871] usb 9-1: Manufacturer: syz [ 354.781864][ T6891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.785710][ T5871] usb 9-1: SerialNumber: syz [ 354.980304][ T5871] usb 9-1: config 0 descriptor?? [ 355.089691][ T5871] smsc75xx v1.0.0 [ 355.135450][ T7021] cgroup: fork rejected by pids controller in /syz6 [ 355.671405][ T5871] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 355.682586][ T5871] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 355.867241][ T5871] usb 9-1: USB disconnect, device number 4 [ 357.419930][ T1864] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.594053][ T1864] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.017849][ T1864] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.290002][ T1864] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.806350][ T6891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.435783][ T1864] bridge_slave_1: left allmulticast mode [ 359.441782][ T1864] bridge_slave_1: left promiscuous mode [ 359.448985][ T1864] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.511722][ T6400] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.606019][ T1864] bridge_slave_0: left allmulticast mode [ 359.611863][ T1864] bridge_slave_0: left promiscuous mode [ 359.618715][ T1864] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.501421][ T1864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.566743][ T1864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.620988][ T1864] bond0 (unregistering): Released all slaves [ 361.559477][ T1864] hsr_slave_0: left promiscuous mode [ 361.589732][ T1864] hsr_slave_1: left promiscuous mode [ 361.598154][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.605892][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.653095][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.661211][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.782840][ T1864] veth1_macvtap: left promiscuous mode [ 361.788813][ T1864] veth0_macvtap: left promiscuous mode [ 361.794675][ T1864] veth1_vlan: left promiscuous mode [ 361.800380][ T1864] veth0_vlan: left promiscuous mode [ 362.895138][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.911877][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.921214][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.934439][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.946762][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.968413][ T5865] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 363.180386][ T5865] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.190888][ T5865] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.322768][ T5865] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.333774][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.342252][ T5865] usb 9-1: SerialNumber: syz [ 363.353353][ T1864] team0 (unregistering): Port device team_slave_1 removed [ 363.411371][ T1864] team0 (unregistering): Port device team_slave_0 removed [ 363.730181][ T5865] usb 9-1: 0:2 : does not exist [ 363.916105][ T5865] usb 9-1: USB disconnect, device number 5 [ 364.140275][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.562320][ T7072] random: crng reseeded on system resumption [ 365.013205][ T5822] Bluetooth: hci3: command tx timeout [ 365.510121][ T1864] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.728919][ T1864] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.910012][ T1864] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.047893][ T5865] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 366.300173][ T5865] usb 9-1: Using ep0 maxpacket: 32 [ 366.344497][ T5865] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.353152][ T5865] usb 9-1: config 0 has no interface number 0 [ 366.359769][ T5865] usb 9-1: config 0 interface 184 has no altsetting 0 [ 366.397386][ T1864] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.441505][ T5865] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.451041][ T5865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.459381][ T5865] usb 9-1: Product: syz [ 366.463718][ T5865] usb 9-1: Manufacturer: syz [ 366.468627][ T5865] usb 9-1: SerialNumber: syz [ 366.515467][ T7090] loop4: detected capacity change from 0 to 128 [ 366.524360][ T6891] veth0_vlan: entered promiscuous mode [ 366.701815][ T5865] usb 9-1: config 0 descriptor?? [ 366.716847][ T5865] smsc75xx v1.0.0 [ 366.723844][ T7090] EXT4-fs (loop4): Test dummy encryption mode enabled [ 366.977437][ T1864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.995378][ T7090] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 367.085954][ T7090] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.096971][ T6891] veth1_vlan: entered promiscuous mode [ 367.119039][ T5822] Bluetooth: hci3: command tx timeout [ 367.253252][ T1864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.314019][ T5865] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 367.325626][ T5865] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.337925][ T7090] overlayfs: failed to resolve './file0': -2 [ 367.391239][ T5865] usb 9-1: USB disconnect, device number 6 [ 367.490369][ T1864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.843689][ T1864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.189370][ T7090] overlayfs: failed to resolve './file0': -2 [ 368.210427][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 369.171425][ T5822] Bluetooth: hci3: command tx timeout [ 369.400967][ T1864] bridge_slave_1: left allmulticast mode [ 369.408366][ T1864] bridge_slave_1: left promiscuous mode [ 369.414974][ T1864] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.599028][ T1864] bridge_slave_0: left allmulticast mode [ 369.606949][ T1864] bridge_slave_0: left promiscuous mode [ 369.613463][ T1864] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.790469][ T1864] bridge_slave_1: left allmulticast mode [ 369.796570][ T1864] bridge_slave_1: left promiscuous mode [ 369.803009][ T1864] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.036751][ T1864] bridge_slave_0: left allmulticast mode [ 370.042823][ T1864] bridge_slave_0: left promiscuous mode [ 370.049546][ T1864] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.068409][ T7107] loop8: detected capacity change from 0 to 256 [ 370.211598][ T5821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.450968][ T7107] FAT-fs (loop8): Directory bread(block 64) failed [ 370.458049][ T7107] FAT-fs (loop8): Directory bread(block 65) failed [ 370.465131][ T7107] FAT-fs (loop8): Directory bread(block 66) failed [ 370.472028][ T7107] FAT-fs (loop8): Directory bread(block 67) failed [ 370.479126][ T7107] FAT-fs (loop8): Directory bread(block 68) failed [ 370.491223][ T7107] FAT-fs (loop8): Directory bread(block 69) failed [ 370.499918][ T7107] FAT-fs (loop8): Directory bread(block 70) failed [ 370.506869][ T7107] FAT-fs (loop8): Directory bread(block 71) failed [ 370.513733][ T7107] FAT-fs (loop8): Directory bread(block 72) failed [ 370.520705][ T7107] FAT-fs (loop8): Directory bread(block 73) failed [ 371.136753][ T1864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.226679][ T1864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.245764][ T5106] Bluetooth: hci3: command tx timeout [ 371.332648][ T1864] bond0 (unregistering): Released all slaves [ 371.807389][ T1864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.854906][ T1864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.881397][ T1864] bond0 (unregistering): Released all slaves [ 372.475651][ T5864] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 372.503594][ T6891] veth0_macvtap: entered promiscuous mode [ 372.583471][ T6891] veth1_macvtap: entered promiscuous mode [ 372.692926][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.703865][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.817088][ T5864] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 372.826479][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 372.835056][ T5864] usb 5-1: SerialNumber: syz [ 373.231466][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.236873][ T5864] usb 5-1: 0:2 : does not exist [ 373.400548][ T1864] hsr_slave_0: left promiscuous mode [ 373.423244][ T1864] hsr_slave_1: left promiscuous mode [ 373.432961][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.437009][ T5864] usb 5-1: USB disconnect, device number 3 [ 373.440757][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.546282][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.558451][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.687815][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.726359][ T1864] hsr_slave_0: left promiscuous mode [ 373.746263][ T1864] hsr_slave_1: left promiscuous mode [ 373.754132][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.766304][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.796787][ T1864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.804446][ T1864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.916056][ T1864] veth1_macvtap: left promiscuous mode [ 373.921800][ T1864] veth0_macvtap: left promiscuous mode [ 373.928545][ T1864] veth1_vlan: left promiscuous mode [ 373.934055][ T1864] veth0_vlan: left promiscuous mode [ 374.005211][ T1864] veth1_macvtap: left promiscuous mode [ 374.010929][ T1864] veth0_macvtap: left promiscuous mode [ 374.017156][ T1864] veth1_vlan: left promiscuous mode [ 374.022670][ T1864] veth0_vlan: left promiscuous mode [ 374.865382][ T5864] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 375.045425][ T5864] usb 9-1: Using ep0 maxpacket: 32 [ 375.061951][ T1864] team0 (unregistering): Port device team_slave_1 removed [ 375.086346][ T5864] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 375.096496][ T5864] usb 9-1: config 0 has no interface number 0 [ 375.102775][ T5864] usb 9-1: config 0 interface 184 has no altsetting 0 [ 375.172356][ T1864] team0 (unregistering): Port device team_slave_0 removed [ 375.205653][ T5864] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 375.215104][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.223290][ T5864] usb 9-1: Product: syz [ 375.228020][ T5864] usb 9-1: Manufacturer: syz [ 375.232786][ T5864] usb 9-1: SerialNumber: syz [ 375.352142][ T5864] usb 9-1: config 0 descriptor?? [ 375.449735][ T5864] smsc75xx v1.0.0 [ 375.838948][ T1864] team0 (unregistering): Port device team_slave_1 removed [ 375.955587][ T1864] team0 (unregistering): Port device team_slave_0 removed [ 375.963870][ T5864] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 375.975179][ T5864] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 376.180404][ T5864] usb 9-1: USB disconnect, device number 7 [ 376.288474][ T6891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.480345][ T5070] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.689909][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.700350][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.708548][ T7065] bridge_slave_0: entered allmulticast mode [ 376.717990][ T7065] bridge_slave_0: entered promiscuous mode [ 376.742429][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.750136][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.758966][ T7065] bridge_slave_1: entered allmulticast mode [ 376.768815][ T7065] bridge_slave_1: entered promiscuous mode [ 376.850003][ T5070] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.925217][ T5070] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.054606][ T5070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.247852][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.339243][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.884352][ T7065] team0: Port device team_slave_0 added [ 377.991553][ T7065] team0: Port device team_slave_1 added [ 378.346632][ T7154] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 378.356969][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.369842][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.397699][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.524374][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 378.622141][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.629511][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.656419][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.222080][ T7065] hsr_slave_0: entered promiscuous mode [ 379.232713][ T7065] hsr_slave_1: entered promiscuous mode [ 379.241503][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 379.247613][ T7065] Cannot create hsr debugfs directory [ 381.227595][ T7065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.346532][ T7065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.458049][ T7065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.559811][ T7065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.423235][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.432892][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.448376][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.463461][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.476308][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.726943][ T5865] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.785696][ T42] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 382.949010][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.043635][ T5865] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.054971][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.074214][ T42] usb 9-1: Using ep0 maxpacket: 32 [ 383.135169][ T42] usb 9-1: config 0 has an invalid interface number: 184 but max is 0 [ 383.143578][ T42] usb 9-1: config 0 has no interface number 0 [ 383.151153][ T42] usb 9-1: config 0 interface 184 has no altsetting 0 [ 383.166556][ T5865] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 383.176635][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 383.188224][ T5865] usb 5-1: SerialNumber: syz [ 383.392469][ T42] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 383.402398][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.411044][ T42] usb 9-1: Product: syz [ 383.415622][ T42] usb 9-1: Manufacturer: syz [ 383.420514][ T42] usb 9-1: SerialNumber: syz [ 383.505753][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.548645][ T42] usb 9-1: config 0 descriptor?? [ 383.592527][ T42] smsc75xx v1.0.0 [ 383.637210][ T3602] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.644996][ T3602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.653701][ T5865] usb 5-1: 0:2 : does not exist [ 383.812645][ T5865] usb 5-1: USB disconnect, device number 4 [ 383.868172][ T3602] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.875829][ T3602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.097180][ T7194] chnl_net:caif_netlink_parms(): no params data found [ 384.232902][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.466542][ T42] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 384.477850][ T42] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -71 [ 384.529139][ T5822] Bluetooth: hci2: command tx timeout [ 384.708822][ T42] usb 9-1: USB disconnect, device number 8 [ 385.099926][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 385.213754][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.222062][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.363989][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.374264][ T9] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 385.387481][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 385.396633][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 385.406289][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.570143][ T9] usb 5-1: config 0 descriptor?? [ 385.622511][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.630813][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.246052][ T9] wacom 0003:056A:00B1.0003: unknown main item tag 0x0 [ 386.255711][ T9] wacom 0003:056A:00B1.0003: unknown main item tag 0x0 [ 386.262934][ T9] wacom 0003:056A:00B1.0003: unknown main item tag 0x0 [ 386.271034][ T9] wacom 0003:056A:00B1.0003: unknown main item tag 0x0 [ 386.278393][ T9] wacom 0003:056A:00B1.0003: unknown main item tag 0x0 [ 386.490804][ T42] usb 5-1: USB disconnect, device number 5 [ 386.606147][ T5106] Bluetooth: hci2: command tx timeout [ 386.836907][ T7194] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.844500][ T7194] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.854377][ T7194] bridge_slave_0: entered allmulticast mode [ 386.868573][ T7194] bridge_slave_0: entered promiscuous mode [ 386.980527][ T7194] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.988348][ T7194] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.996287][ T7194] bridge_slave_1: entered allmulticast mode [ 387.006499][ T7194] bridge_slave_1: entered promiscuous mode [ 387.140421][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.655509][ T7194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.742125][ T7194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.193786][ T7237] pim6reg1: entered promiscuous mode [ 388.202390][ T7237] pim6reg1: entered allmulticast mode [ 388.245687][ T7194] team0: Port device team_slave_0 added [ 388.317236][ T7194] team0: Port device team_slave_1 added [ 388.558210][ T9] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 388.594640][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.602253][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.630484][ T7194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.699853][ T5106] Bluetooth: hci2: command tx timeout [ 388.712399][ T7194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.720954][ T7194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.748417][ T7194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.796366][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 388.807556][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 388.822845][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 388.833065][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.958610][ T9] usb 9-1: config 0 descriptor?? [ 388.970105][ T7241] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 389.346960][ T7194] hsr_slave_0: entered promiscuous mode [ 389.359682][ T7194] hsr_slave_1: entered promiscuous mode [ 389.370839][ T7194] debugfs: 'hsr0' already exists in 'hsr' [ 389.377227][ T7194] Cannot create hsr debugfs directory [ 389.573603][ T9] logitech-djreceiver 0003:046D:C71B.0004: hidraw0: USB HID vff.fa Device [HID 046d:c71b] on usb-dummy_hcd.8-1/input0 [ 389.766205][ T9] usb 9-1: USB disconnect, device number 9 [ 389.815294][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 390.036958][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.050870][ T42] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 390.062623][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.187795][ T42] usb 5-1: config 0 descriptor?? [ 390.459249][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 390.787030][ T5106] Bluetooth: hci2: command tx timeout [ 390.807912][ T42] hid-led 0003:1294:1320.0005: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.4-1/input0 [ 390.987656][ T42] hid-led 0003:1294:1320.0005: Riso Kagaku Webmail Notifier initialized [ 391.052206][ T42] usb 5-1: USB disconnect, device number 6 [ 391.061604][ T7065] veth0_vlan: entered promiscuous mode [ 391.137566][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 391.171059][ T3602] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 391.253545][ T1132] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 391.288629][ T7065] veth1_vlan: entered promiscuous mode [ 391.330571][ T58] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 391.424015][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.434691][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.548476][ T9] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.558709][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 391.570483][ T9] usb 9-1: SerialNumber: syz [ 391.791732][ T7260] loop9: detected capacity change from 0 to 1024 [ 391.947593][ T7259] fido_id[7259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 392.034407][ T9] usb 9-1: 0:2 : does not exist [ 392.050923][ T7260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.064728][ T7260] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.295815][ T9] usb 9-1: USB disconnect, device number 10 [ 392.323044][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.309'. [ 392.680023][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.970624][ T7065] veth0_macvtap: entered promiscuous mode [ 393.104311][ T7065] veth1_macvtap: entered promiscuous mode [ 393.349374][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.471699][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.614375][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.696772][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.724359][ T7194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.826406][ T3602] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.887282][ T7194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.975052][ T3602] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.017260][ T7194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 394.140973][ T7194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.376268][ T6891] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.560583][ T7194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.785002][ T7194] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.877815][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.885370][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.070506][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.078293][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.199158][ T7314] ===================================================== [ 398.206493][ T7314] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 398.215387][ T7314] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 398.221365][ T7314] do_xdp_generic+0xd52/0x1690 [ 398.226579][ T7314] tun_get_user+0x45be/0x6ca0 [ 398.231418][ T7314] tun_chr_write_iter+0x3e9/0x5c0 [ 398.236898][ T7314] vfs_write+0xbdf/0x15d0 [ 398.241383][ T7314] __ia32_sys_write+0x1f9/0x4d0 [ 398.246719][ T7314] ia32_sys_call+0x35bc/0x4310 [ 398.251620][ T7314] __do_fast_syscall_32+0xb0/0x150 [ 398.257083][ T7314] do_fast_syscall_32+0x38/0x80 [ 398.262104][ T7314] do_SYSENTER_32+0x1f/0x30 [ 398.267173][ T7314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.273675][ T7314] [ 398.276217][ T7314] Uninit was stored to memory at: [ 398.281454][ T7314] pskb_expand_head+0x310/0x1610 [ 398.286696][ T7314] do_xdp_generic+0xa79/0x1690 [ 398.291700][ T7314] tun_get_user+0x45be/0x6ca0 [ 398.296810][ T7314] tun_chr_write_iter+0x3e9/0x5c0 [ 398.301971][ T7314] vfs_write+0xbdf/0x15d0 [ 398.306595][ T7314] __ia32_sys_write+0x1f9/0x4d0 [ 398.311706][ T7314] ia32_sys_call+0x35bc/0x4310 [ 398.316745][ T7314] __do_fast_syscall_32+0xb0/0x150 [ 398.322030][ T7314] do_fast_syscall_32+0x38/0x80 [ 398.327230][ T7314] do_SYSENTER_32+0x1f/0x30 [ 398.331893][ T7314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.338531][ T7314] [ 398.340914][ T7314] Uninit was created at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 398.345707][ T7314] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 398.352396][ T7314] kmalloc_reserve+0x22f/0x4b0 [ 398.357445][ T7314] __alloc_skb+0x347/0x7d0 [ 398.361991][ T7314] alloc_skb_with_frags+0xc5/0xa60 [ 398.367396][ T7314] sock_alloc_send_pskb+0xad8/0xc70 [ 398.372753][ T7314] tun_get_user+0x113f/0x6ca0 [ 398.377699][ T7314] tun_chr_write_iter+0x3e9/0x5c0 [ 398.382857][ T7314] vfs_write+0xbdf/0x15d0 [ 398.387494][ T7314] __ia32_sys_write+0x1f9/0x4d0 [ 398.392528][ T7314] ia32_sys_call+0x35bc/0x4310 [ 398.397666][ T7314] __do_fast_syscall_32+0xb0/0x150 [ 398.402948][ T7314] do_fast_syscall_32+0x38/0x80 [ 398.408192][ T7314] do_SYSENTER_32+0x1f/0x30 [ 398.412858][ T7314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.419567][ T7314] [ 398.422010][ T7314] CPU: 1 UID: 0 PID: 7314 Comm: syz.9.317 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(none) [ 398.434214][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.444564][ T7314] ===================================================== [ 398.451857][ T7314] Disabling lock debugging due to kernel taint [ 398.458287][ T7314] Kernel panic - not syncing: kmsan.panic set ... [ 398.464825][ T7314] CPU: 1 UID: 0 PID: 7314 Comm: syz.9.317 Tainted: G B 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(none) [ 398.478461][ T7314] Tainted: [B]=BAD_PAGE [ 398.482696][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.492894][ T7314] Call Trace: [ 398.496268][ T7314] [ 398.499278][ T7314] __dump_stack+0x26/0x30 [ 398.503863][ T7314] dump_stack_lvl+0x53/0x270 [ 398.508725][ T7314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.514719][ T7314] dump_stack+0x1e/0x25 [ 398.519128][ T7314] vpanic+0x361/0xc50 [ 398.523300][ T7314] panic+0x15d/0x160 [ 398.527396][ T7314] kmsan_report+0x31c/0x320 [ 398.532065][ T7314] ? __msan_warning+0x1b/0x30 [ 398.536873][ T7314] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 398.543020][ T7314] ? do_xdp_generic+0xd52/0x1690 [ 398.548117][ T7314] ? tun_get_user+0x45be/0x6ca0 [ 398.553197][ T7314] ? tun_chr_write_iter+0x3e9/0x5c0 [ 398.558534][ T7314] ? vfs_write+0xbdf/0x15d0 [ 398.563203][ T7314] ? __ia32_sys_write+0x1f9/0x4d0 [ 398.568392][ T7314] ? ia32_sys_call+0x35bc/0x4310 [ 398.573463][ T7314] ? __do_fast_syscall_32+0xb0/0x150 [ 398.578922][ T7314] ? do_fast_syscall_32+0x38/0x80 [ 398.584123][ T7314] ? do_SYSENTER_32+0x1f/0x30 [ 398.588977][ T7314] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.595660][ T7314] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 398.601687][ T7314] ? ___bpf_prog_run+0xea65/0xeba0 [ 398.606986][ T7314] ? __bpf_prog_run32+0xc2/0xf0 [ 398.611985][ T7314] ? kmsan_get_metadata+0xfb/0x160 [ 398.617269][ T7314] __msan_warning+0x1b/0x30 [ 398.621924][ T7314] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 398.627885][ T7314] do_xdp_generic+0xd52/0x1690 [ 398.632813][ T7314] ? tun_get_user+0x40e1/0x6ca0 [ 398.637810][ T7314] ? filter_irq_stacks+0x49/0x190 [ 398.643072][ T7314] ? kmsan_get_metadata+0xfb/0x160 [ 398.648372][ T7314] ? tun_get_user+0x453a/0x6ca0 [ 398.653371][ T7314] tun_get_user+0x45be/0x6ca0 [ 398.658200][ T7314] ? stack_depot_save_flags+0x35/0x7b0 [ 398.663836][ T7314] ? kmsan_get_metadata+0xfb/0x160 [ 398.669184][ T7314] ? kmsan_get_metadata+0xfb/0x160 [ 398.674435][ T7314] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 398.681079][ T7314] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 398.687391][ T7314] tun_chr_write_iter+0x3e9/0x5c0 [ 398.692561][ T7314] vfs_write+0xbdf/0x15d0 [ 398.697235][ T7314] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 398.702918][ T7314] __ia32_sys_write+0x1f9/0x4d0 [ 398.707937][ T7314] ia32_sys_call+0x35bc/0x4310 [ 398.712818][ T7314] __do_fast_syscall_32+0xb0/0x150 [ 398.718093][ T7314] do_fast_syscall_32+0x38/0x80 [ 398.723183][ T7314] do_SYSENTER_32+0x1f/0x30 [ 398.727823][ T7314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 398.734423][ T7314] RIP: 0023:0xf70ae539 [ 398.738582][ T7314] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 398.758327][ T7314] RSP: 002b:00000000f549e520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 398.766884][ T7314] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000600 [ 398.774953][ T7314] RDX: 000000000000fdef RSI: 00000000f7414ff4 RDI: 0000000000000000 [ 398.783277][ T7314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 398.791340][ T7314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 398.799408][ T7314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 398.807494][ T7314] [ 398.810854][ T7314] Kernel Offset: disabled [ 398.815222][ T7314] Rebooting in 86400 seconds..