last executing test programs: 16.490303344s ago: executing program 0: openat$pfkey(0xffffff9c, &(0x7f0000004500), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@noblock_validity}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 15.525105733s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002480)=@delchain={0x2c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}]}, 0x2c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 14.918628538s ago: executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x9, 0x6, 0x990, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0xe}, 0x48) r1 = socket$inet6(0x10, 0x2, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r1, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e9b200a00080001c00000000160bae2a6ec6ca42cecb54aac7b0a", 0x2a, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002140)=@gcm_128={{0x303}, "8f0800", "a4616bf45c64c5000000878f00", 'ZD0\b', "ffffffffffffffff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005000f566f3d2af35b03ffbcbb5b4a59384633cc880dc638202dc5e888a8494500eada4e11e53cdaa6fd89a300e82f01811544abc803d4fb676c8a1b05fe7cfc04d03729d2fc4b71f4e0512eafb1de18ed361cd1d7881d09856b40c43d1199baae4cc8460dc69c1505981f00000000", @ANYRES32=r5, @ANYBLOB="0800040052030000"], 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000001640)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xd3, [0x1]}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r7, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r7, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) shutdown(r7, 0x1) 14.23896579s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x1ff) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file1'}, 0xb) close(r2) execveat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0) 14.020904271s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 13.952671543s ago: executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r2, 0x47) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x12, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) 13.192495719s ago: executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x24}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 12.835728081s ago: executing program 2: openat$pfkey(0xffffff9c, &(0x7f0000004500), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@noblock_validity}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 12.785421551s ago: executing program 0: r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f00000004c0), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x2000000, 0x0, 0x0, 0x0) 12.566494527s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) nanosleep(0x0, 0x0) socket$inet6(0xa, 0x0, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xffdd) 11.047535588s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10.932699678s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 9.75066401s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfed7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000bbe9b6080000000000007b8af8ff00000000bfa20001000000000703000000ffffffb703000008000000b7040000000095270000000300000095000000000000005ddf0a843707357ec4aa73546f5defa71e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000001a40)="$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") r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmmsg$unix(r5, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 9.436291295s ago: executing program 3: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2ad080, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) writev(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x18}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.872277509s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4.945417265s ago: executing program 3: r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f00000004c0), &(0x7f0000000040)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 4.824513426s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4.1515402s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 4.015076243s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 3.52127999s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 2.940751558s ago: executing program 1: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x24}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000000)={0x0, 0x0, 0x4}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.650362777s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2.503460424s ago: executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000240)=""/26, 0x1a) getdents64(r0, 0x0, 0x2000) 2.054135162s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}}, 0x0) 1.554900427s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000110001000000000200000000000000", @ANYRES32=r1], 0x20}}, 0x0) 1.075061717s ago: executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r1, 0x0, 0x0) 799.377309ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@handle, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0x14}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 597.000943ms ago: executing program 4: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x9, 0x6, 0x990, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0xe}, 0x48) r1 = socket$inet6(0x10, 0x2, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r1, &(0x7f0000000180)="1c0000001200050f0c1000000049b23e9b200a00080001c00000000160bae2a6ec6ca42cecb54aac7b0a", 0x2a, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000002140)=@gcm_128={{0x303}, "8f0800", "a4616bf45c64c5000000878f00", 'ZD0\b', "ffffffffffffffff"}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e0004000280080005000f566f3d2af35b03ffbcbb5b4a59384633cc880dc638202dc5e888a8494500eada4e11e53cdaa6fd89a300e82f01811544abc803d4fb676c8a1b05fe7cfc04d03729d2fc4b71f4e0512eafb1de18ed361cd1d7881d09856b40c43d1199baae4cc8460dc69c1505981f00000000", @ANYRES32=r5, @ANYBLOB="0800040052030000"], 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000300)={'team0\x00', &(0x7f0000001640)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xd3, [0x1]}}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000005640)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x4000006, 0x8000, 0x4000006}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r7, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r7, 0x0, 0x0, 0x10020, &(0x7f0000001340)={0xa, 0x4e20, 0x1936e1a0, @empty, 0x3}, 0x1c) recvmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/98, 0x62}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d40)}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x7, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/168, 0xa8}], 0x2}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000001280)=""/46, 0x2e}, {&(0x7f0000001680)=""/237, 0xed}], 0x4, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) 314.880809ms ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xb) copy_file_range(r6, &(0x7f0000000080), r5, 0x0, 0xfffffffffffffff8, 0x0) 0s ago: executing program 4: openat$pfkey(0xffffff9c, &(0x7f0000004500), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, &(0x7f0000000a40)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={[{@noblock_validity}, {@errors_continue}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fowner_lt}], 0x2c}, 0x0, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.152' (ED25519) to the list of known hosts. 2024/06/13 23:51:51 fuzzer started 2024/06/13 23:51:51 dialing manager at 10.128.0.169:30024 [ 163.463645][ T5042] cgroup: Unknown subsys name 'net' [ 163.659560][ T5042] cgroup: Unknown subsys name 'rlimit' 2024/06/13 23:52:39 starting 5 executor processes [ 210.238336][ T5048] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 213.613690][ T5071] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.630577][ T5071] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.639270][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.650555][ T5071] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.663610][ T5071] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.665605][ T5076] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.674672][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.680025][ T5076] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.689137][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.698253][ T5076] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.711202][ T5076] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.722764][ T4427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.752209][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.764789][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.776800][ T5071] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.792508][ T5071] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.803995][ T5071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.814555][ T5071] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.271709][ T5074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.282652][ T5074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.298364][ T5074] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.310091][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.324892][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.367314][ T5074] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.375812][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.404508][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.421868][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.442580][ T5074] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.471633][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 214.484013][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.868228][ T5068] chnl_net:caif_netlink_parms(): no params data found [ 215.399278][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 215.741485][ T50] Bluetooth: hci0: command tx timeout [ 215.845294][ T50] Bluetooth: hci1: command tx timeout [ 215.891043][ T50] Bluetooth: hci2: command tx timeout [ 215.967318][ T5075] chnl_net:caif_netlink_parms(): no params data found [ 216.048296][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 216.140454][ T5068] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.148174][ T5068] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.156154][ T5068] bridge_slave_0: entered allmulticast mode [ 216.165466][ T5068] bridge_slave_0: entered promiscuous mode [ 216.212871][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 216.266707][ T5068] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.274685][ T5068] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.283308][ T5068] bridge_slave_1: entered allmulticast mode [ 216.292757][ T5068] bridge_slave_1: entered promiscuous mode [ 216.530590][ T50] Bluetooth: hci3: command tx timeout [ 216.619452][ T5068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.633085][ T50] Bluetooth: hci4: command tx timeout [ 216.677516][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.685374][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.693352][ T5072] bridge_slave_0: entered allmulticast mode [ 216.702497][ T5072] bridge_slave_0: entered promiscuous mode [ 216.722930][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.730852][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.738548][ T5072] bridge_slave_1: entered allmulticast mode [ 216.748167][ T5072] bridge_slave_1: entered promiscuous mode [ 216.831995][ T5068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.854146][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.964413][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.981808][ T5068] team0: Port device team_slave_0 added [ 217.038371][ T5068] team0: Port device team_slave_1 added [ 217.324256][ T5072] team0: Port device team_slave_0 added [ 217.387784][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.395252][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.422383][ T5068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.466187][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.474052][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.481985][ T5075] bridge_slave_0: entered allmulticast mode [ 217.490131][ T5075] bridge_slave_0: entered promiscuous mode [ 217.508768][ T5072] team0: Port device team_slave_1 added [ 217.521116][ T5068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.528243][ T5068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.554577][ T5068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.581707][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.589384][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.597253][ T5081] bridge_slave_0: entered allmulticast mode [ 217.605366][ T5081] bridge_slave_0: entered promiscuous mode [ 217.617605][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.625397][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.633238][ T5075] bridge_slave_1: entered allmulticast mode [ 217.641932][ T5075] bridge_slave_1: entered promiscuous mode [ 217.778382][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.786168][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.794056][ T5081] bridge_slave_1: entered allmulticast mode [ 217.802307][ T5081] bridge_slave_1: entered promiscuous mode [ 217.811136][ T50] Bluetooth: hci0: command tx timeout [ 217.890872][ T50] Bluetooth: hci1: command tx timeout [ 217.926891][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.934752][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.942763][ T5083] bridge_slave_0: entered allmulticast mode [ 217.952320][ T5083] bridge_slave_0: entered promiscuous mode [ 217.971050][ T50] Bluetooth: hci2: command tx timeout [ 218.051220][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.058375][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.085148][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.097329][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.107454][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.115352][ T5083] bridge_slave_1: entered allmulticast mode [ 218.125047][ T5083] bridge_slave_1: entered promiscuous mode [ 218.145063][ T5068] hsr_slave_0: entered promiscuous mode [ 218.155404][ T5068] hsr_slave_1: entered promiscuous mode [ 218.206906][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.218550][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.225880][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.252264][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.272760][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.357936][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.392068][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.471546][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.575173][ T5075] team0: Port device team_slave_0 added [ 218.597093][ T5075] team0: Port device team_slave_1 added [ 218.612910][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.618961][ T50] Bluetooth: hci3: command tx timeout [ 218.690445][ T50] Bluetooth: hci4: command tx timeout [ 218.807771][ T5081] team0: Port device team_slave_0 added [ 218.897020][ T5083] team0: Port device team_slave_0 added [ 218.919357][ T5072] hsr_slave_0: entered promiscuous mode [ 218.928781][ T5072] hsr_slave_1: entered promiscuous mode [ 218.937346][ T5072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.946008][ T5072] Cannot create hsr debugfs directory [ 218.959381][ T5081] team0: Port device team_slave_1 added [ 218.983979][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.991507][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.017986][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.038819][ T5083] team0: Port device team_slave_1 added [ 219.048347][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.055833][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.082200][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.110744][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.117406][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.311567][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.318811][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.345450][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.365845][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.373180][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.399428][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.418443][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.425695][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.452188][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.524955][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.532360][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.558945][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.891276][ T5075] hsr_slave_0: entered promiscuous mode [ 219.892119][ T50] Bluetooth: hci0: command tx timeout [ 219.904913][ T5075] hsr_slave_1: entered promiscuous mode [ 219.913222][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.921363][ T5075] Cannot create hsr debugfs directory [ 219.950081][ T5081] hsr_slave_0: entered promiscuous mode [ 219.958906][ T5081] hsr_slave_1: entered promiscuous mode [ 219.967037][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.972404][ T50] Bluetooth: hci1: command tx timeout [ 219.974943][ T5081] Cannot create hsr debugfs directory [ 220.052040][ T50] Bluetooth: hci2: command tx timeout [ 220.091130][ T5083] hsr_slave_0: entered promiscuous mode [ 220.106093][ T5083] hsr_slave_1: entered promiscuous mode [ 220.115195][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.123134][ T5083] Cannot create hsr debugfs directory [ 220.604790][ T5068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.699138][ T50] Bluetooth: hci3: command tx timeout [ 220.713326][ T5068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.736293][ T5068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.774188][ T50] Bluetooth: hci4: command tx timeout [ 220.830777][ T5068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.075576][ T5072] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.161308][ T5072] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.285015][ T5072] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.307670][ T5072] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.587085][ T5083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.629898][ T5081] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.654629][ T5081] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.677318][ T5083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.702337][ T5083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.725956][ T5083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.746393][ T5081] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.865998][ T5075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.894951][ T5075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.922372][ T5081] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.946843][ T5075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.971007][ T50] Bluetooth: hci0: command tx timeout [ 222.022920][ T5075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.050685][ T50] Bluetooth: hci1: command tx timeout [ 222.136615][ T50] Bluetooth: hci2: command tx timeout [ 222.707647][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.770921][ T50] Bluetooth: hci3: command tx timeout [ 222.831999][ T5068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.853000][ T50] Bluetooth: hci4: command tx timeout [ 222.915275][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.022377][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.041342][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.095901][ T5068] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.153108][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.160903][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.234985][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.242953][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.258935][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.267040][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.317018][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.325077][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.430736][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.438421][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.457794][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.465649][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.798609][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.004173][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.029765][ T5068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.118424][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.176806][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.184663][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.290814][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.298477][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.457728][ T5075] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.628753][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.636589][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.796960][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.804821][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.114999][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.185958][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.245103][ T5068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.683997][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.798104][ T5083] veth0_vlan: entered promiscuous mode [ 226.904937][ T5068] veth0_vlan: entered promiscuous mode [ 226.990757][ T5083] veth1_vlan: entered promiscuous mode [ 227.034633][ T5068] veth1_vlan: entered promiscuous mode [ 227.308485][ T5081] veth0_vlan: entered promiscuous mode [ 227.399040][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.454867][ T5083] veth0_macvtap: entered promiscuous mode [ 227.469545][ T5068] veth0_macvtap: entered promiscuous mode [ 227.486944][ T5081] veth1_vlan: entered promiscuous mode [ 227.554524][ T5068] veth1_macvtap: entered promiscuous mode [ 227.576118][ T5083] veth1_macvtap: entered promiscuous mode [ 227.805287][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.823536][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.834339][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.849384][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.945927][ T5068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.002668][ T5081] veth0_macvtap: entered promiscuous mode [ 228.070556][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.082819][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.097688][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.116128][ T5068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.126718][ T5068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.138188][ T5068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.147400][ T5068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.185164][ T5075] veth0_vlan: entered promiscuous mode [ 228.213649][ T5081] veth1_macvtap: entered promiscuous mode [ 228.273776][ T5083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.283094][ T5083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.294377][ T5083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.303605][ T5083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.405681][ T5075] veth1_vlan: entered promiscuous mode [ 228.518287][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.530807][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.544331][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.555474][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.572289][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.811879][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.824358][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.834985][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.845754][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.861768][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.952157][ T5075] veth0_macvtap: entered promiscuous mode [ 229.034588][ T5075] veth1_macvtap: entered promiscuous mode [ 229.132746][ T5081] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.141915][ T5081] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.151197][ T5081] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.160195][ T5081] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.288338][ T5072] veth0_vlan: entered promiscuous mode [ 229.320598][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.333658][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.344922][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.355729][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.365835][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.376571][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.392093][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.550422][ T5072] veth1_vlan: entered promiscuous mode [ 229.613073][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.623950][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.634397][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.645145][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.658579][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.670747][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.685710][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.998773][ T5072] veth0_macvtap: entered promiscuous mode [ 230.074649][ T5075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.084198][ T5075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.093449][ T5075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.102600][ T5075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.148977][ T5072] veth1_macvtap: entered promiscuous mode [ 230.324197][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.336027][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.349274][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.360108][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.375023][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.387283][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.397507][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.408275][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.423976][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.478195][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.489715][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.502903][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.514292][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.524412][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.541494][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.554230][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.565176][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.580168][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.755509][ T5072] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.764806][ T5072] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.774829][ T5072] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.785804][ T5072] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.001189][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.009268][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.254972][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.263790][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.391461][ T5122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.399529][ T5122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.629824][ T4159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.638026][ T4159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.227483][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.238953][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.540741][ T5122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.551944][ T5122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.288341][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.296543][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.373962][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.382369][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.486060][ T5264] loop1: detected capacity change from 0 to 512 [ 237.509115][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.517802][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.755041][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.762549][ T5270] loop3: detected capacity change from 0 to 256 [ 237.763141][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.862999][ T5264] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 237.915613][ T5264] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 237.997882][ T5264] EXT4-fs (loop1): Remounting filesystem read-only [ 238.046086][ T5264] EXT4-fs (loop1): 1 truncate cleaned up [ 238.052587][ T5264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.219405][ T5270] FAT-fs (loop3): Directory bread(block 64) failed [ 238.226439][ T5270] FAT-fs (loop3): Directory bread(block 65) failed [ 238.233774][ T5270] FAT-fs (loop3): Directory bread(block 66) failed [ 238.240644][ T5270] FAT-fs (loop3): Directory bread(block 67) failed [ 238.247561][ T5270] FAT-fs (loop3): Directory bread(block 68) failed [ 238.254668][ T5270] FAT-fs (loop3): Directory bread(block 69) failed [ 238.261800][ T5270] FAT-fs (loop3): Directory bread(block 70) failed [ 238.268613][ T5270] FAT-fs (loop3): Directory bread(block 71) failed [ 238.275702][ T5270] FAT-fs (loop3): Directory bread(block 72) failed [ 238.282605][ T5270] FAT-fs (loop3): Directory bread(block 73) failed [ 238.342324][ T5264] Bluetooth: MGMT ver 1.22 [ 238.674225][ T5068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.563801][ C0] net_ratelimit: 2 callbacks suppressed [ 239.563887][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 239.701756][ T5292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.802341][ T5292] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 241.842055][ T5316] loop2: detected capacity change from 0 to 256 [ 241.867374][ T5314] loop3: detected capacity change from 0 to 512 [ 242.046139][ T5314] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 242.118544][ T5314] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 242.171052][ T5314] EXT4-fs (loop3): Remounting filesystem read-only [ 242.287954][ T5316] FAT-fs (loop2): Directory bread(block 64) failed [ 242.298605][ T5316] FAT-fs (loop2): Directory bread(block 65) failed [ 242.305890][ T5316] FAT-fs (loop2): Directory bread(block 66) failed [ 242.312871][ T5316] FAT-fs (loop2): Directory bread(block 67) failed [ 242.319786][ T5316] FAT-fs (loop2): Directory bread(block 68) failed [ 242.326768][ T5316] FAT-fs (loop2): Directory bread(block 69) failed [ 242.333869][ T5316] FAT-fs (loop2): Directory bread(block 70) failed [ 242.340887][ T5316] FAT-fs (loop2): Directory bread(block 71) failed [ 242.347822][ T5316] FAT-fs (loop2): Directory bread(block 72) failed [ 242.354783][ T5316] FAT-fs (loop2): Directory bread(block 73) failed [ 242.394019][ T5314] EXT4-fs (loop3): 1 truncate cleaned up [ 242.399976][ T5314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.067174][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.226168][ T5328] loop1: detected capacity change from 0 to 256 [ 243.238948][ T5328] ======================================================= [ 243.238948][ T5328] WARNING: The mand mount option has been deprecated and [ 243.238948][ T5328] and is ignored by this kernel. Remove the mand [ 243.238948][ T5328] option from the mount to silence this warning. [ 243.238948][ T5328] ======================================================= [ 243.327917][ T5328] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 244.073466][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.293565][ T5349] binder: 5348:5349 ioctl c0306201 0 returned -14 [ 246.291964][ T5363] loop4: detected capacity change from 0 to 256 [ 246.299991][ T5360] loop3: detected capacity change from 0 to 512 [ 246.368241][ T5360] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 246.402882][ T5360] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 246.422950][ T5360] EXT4-fs (loop3): Remounting filesystem read-only [ 246.534864][ T5360] EXT4-fs (loop3): 1 truncate cleaned up [ 246.540952][ T5360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.586681][ T5371] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 246.774338][ T5363] FAT-fs (loop4): Directory bread(block 64) failed [ 246.781337][ T5363] FAT-fs (loop4): Directory bread(block 65) failed [ 246.790904][ T5363] FAT-fs (loop4): Directory bread(block 66) failed [ 246.797726][ T5363] FAT-fs (loop4): Directory bread(block 67) failed [ 246.804832][ T5363] FAT-fs (loop4): Directory bread(block 68) failed [ 246.811786][ T5363] FAT-fs (loop4): Directory bread(block 69) failed [ 246.818707][ T5363] FAT-fs (loop4): Directory bread(block 70) failed [ 246.825748][ T5363] FAT-fs (loop4): Directory bread(block 71) failed [ 246.832781][ T5363] FAT-fs (loop4): Directory bread(block 72) failed [ 246.839558][ T5363] FAT-fs (loop4): Directory bread(block 73) failed [ 246.905527][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.550011][ T5383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.597584][ T5384] binder: 5380:5384 ioctl c0306201 0 returned -14 [ 248.060034][ T5394] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 248.655552][ T5404] loop3: detected capacity change from 0 to 256 [ 248.667440][ T5399] loop0: detected capacity change from 0 to 512 [ 248.821535][ T5399] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 248.858322][ T5399] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 248.881055][ T5399] EXT4-fs (loop0): Remounting filesystem read-only [ 248.908337][ T5399] EXT4-fs (loop0): 1 truncate cleaned up [ 248.914636][ T5399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.928543][ T5120] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 248.974417][ T5404] FAT-fs (loop3): Directory bread(block 64) failed [ 248.982692][ T5404] FAT-fs (loop3): Directory bread(block 65) failed [ 248.989671][ T5404] FAT-fs (loop3): Directory bread(block 66) failed [ 248.996885][ T5404] FAT-fs (loop3): Directory bread(block 67) failed [ 249.004054][ T5404] FAT-fs (loop3): Directory bread(block 68) failed [ 249.010954][ T5404] FAT-fs (loop3): Directory bread(block 69) failed [ 249.017892][ T5404] FAT-fs (loop3): Directory bread(block 70) failed [ 249.024946][ T5404] FAT-fs (loop3): Directory bread(block 71) failed [ 249.032030][ T5404] FAT-fs (loop3): Directory bread(block 72) failed [ 249.046393][ T5404] FAT-fs (loop3): Directory bread(block 73) failed [ 249.265789][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.422296][ T5120] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 249.431139][ T5120] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 249.439484][ T5120] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 249.455277][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 249.718728][ T5417] binder: 5416:5417 ioctl c0306201 0 returned -14 [ 249.751167][ T5120] usb 5-1: string descriptor 0 read error: -22 [ 249.764654][ T5120] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 249.776176][ T5120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.880094][ T5120] usb 5-1: config 0 descriptor?? [ 249.902366][ T5402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 250.053347][ T5120] hub 5-1:0.0: bad descriptor, ignoring hub [ 250.060225][ T5120] hub 5-1:0.0: probe with driver hub failed with error -5 [ 250.087204][ T5120] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 250.253541][ T5120] usb 5-1: USB disconnect, device number 2 [ 250.620175][ T5429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.159371][ T5435] loop2: detected capacity change from 0 to 512 [ 251.248991][ T5435] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 252.169887][ T5445] loop1: detected capacity change from 0 to 512 [ 252.298512][ T5445] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 252.365220][ T5445] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 252.470699][ T5450] loop4: detected capacity change from 0 to 256 [ 252.496281][ T5445] EXT4-fs (loop1): Remounting filesystem read-only [ 252.533603][ T5445] EXT4-fs (loop1): 1 truncate cleaned up [ 252.539697][ T5445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.811250][ T5450] FAT-fs (loop4): Directory bread(block 64) failed [ 252.818167][ T5450] FAT-fs (loop4): Directory bread(block 65) failed [ 252.826420][ T5450] FAT-fs (loop4): Directory bread(block 66) failed [ 252.833605][ T5450] FAT-fs (loop4): Directory bread(block 67) failed [ 252.840685][ T5450] FAT-fs (loop4): Directory bread(block 68) failed [ 252.847462][ T5450] FAT-fs (loop4): Directory bread(block 69) failed [ 252.854634][ T5450] FAT-fs (loop4): Directory bread(block 70) failed [ 252.861649][ T5450] FAT-fs (loop4): Directory bread(block 71) failed [ 252.868573][ T5450] FAT-fs (loop4): Directory bread(block 72) failed [ 252.875566][ T5450] FAT-fs (loop4): Directory bread(block 73) failed [ 252.963928][ T5068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.352673][ T5467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.480786][ T5122] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 254.884086][ T5122] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 254.892784][ T5122] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 254.901340][ T5122] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 254.911537][ T5122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 255.231693][ T5122] usb 1-1: string descriptor 0 read error: -22 [ 255.238650][ T5122] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 255.248479][ T5122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.308993][ T5122] usb 1-1: config 0 descriptor?? [ 255.342369][ T5464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 255.418630][ T5122] hub 1-1:0.0: bad descriptor, ignoring hub [ 255.424995][ T5122] hub 1-1:0.0: probe with driver hub failed with error -5 [ 255.441190][ T5122] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 255.521000][ T5480] loop2: detected capacity change from 0 to 256 [ 255.533066][ T5478] loop1: detected capacity change from 0 to 512 [ 255.718359][ T5482] loop4: detected capacity change from 0 to 128 [ 255.770614][ T5482] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 255.779513][ T5482] FAT-fs (loop4): Filesystem has been set read-only [ 255.801905][ T5478] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 255.851732][ T5478] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 255.874498][ T5119] usb 1-1: USB disconnect, device number 2 [ 255.954102][ T5478] EXT4-fs (loop1): Remounting filesystem read-only [ 255.955403][ T5480] FAT-fs (loop2): Directory bread(block 64) failed [ 255.967926][ T5480] FAT-fs (loop2): Directory bread(block 65) failed [ 255.974998][ T5480] FAT-fs (loop2): Directory bread(block 66) failed [ 255.978868][ T5478] EXT4-fs (loop1): 1 truncate cleaned up [ 255.981795][ T5480] FAT-fs (loop2): Directory bread(block 67) failed [ 255.982056][ T5480] FAT-fs (loop2): Directory bread(block 68) failed [ 255.987686][ T5478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.994206][ T5480] FAT-fs (loop2): Directory bread(block 69) failed [ 256.022462][ T5480] FAT-fs (loop2): Directory bread(block 70) failed [ 256.029226][ T5480] FAT-fs (loop2): Directory bread(block 71) failed [ 256.036356][ T5480] FAT-fs (loop2): Directory bread(block 72) failed [ 256.043422][ T5480] FAT-fs (loop2): Directory bread(block 73) failed [ 256.561562][ T5068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.431694][ T5501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.712845][ T5508] binder: BINDER_SET_CONTEXT_MGR already set [ 257.719087][ T5508] binder: 5506:5508 ioctl 4018620d 20000040 returned -16 [ 258.218753][ T5516] loop4: detected capacity change from 0 to 256 [ 258.241981][ T5516] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 258.672677][ T5517] loop1: detected capacity change from 0 to 512 [ 259.052441][ T5517] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 259.154094][ T5517] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 2683928664 (level 1) [ 259.278507][ T5517] EXT4-fs (loop1): Remounting filesystem read-only [ 259.307185][ T5523] loop3: detected capacity change from 0 to 256 [ 259.352220][ T5517] EXT4-fs (loop1): 1 truncate cleaned up [ 259.358344][ T5517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.816929][ T5523] FAT-fs (loop3): Directory bread(block 64) failed [ 259.824384][ T5523] FAT-fs (loop3): Directory bread(block 65) failed [ 259.831505][ T5523] FAT-fs (loop3): Directory bread(block 66) failed [ 259.838259][ T5523] FAT-fs (loop3): Directory bread(block 67) failed [ 259.845298][ T5523] FAT-fs (loop3): Directory bread(block 68) failed [ 259.852166][ T5523] FAT-fs (loop3): Directory bread(block 69) failed [ 259.859066][ T5523] FAT-fs (loop3): Directory bread(block 70) failed [ 259.866027][ T5523] FAT-fs (loop3): Directory bread(block 71) failed [ 259.873320][ T5523] FAT-fs (loop3): Directory bread(block 72) failed [ 259.880074][ T5523] FAT-fs (loop3): Directory bread(block 73) failed [ 260.181161][ T5068] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.310736][ T5119] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 260.741123][ T5119] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 260.750011][ T5119] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 260.758618][ T5119] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 260.768400][ T5119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 261.062255][ T5119] usb 3-1: string descriptor 0 read error: -22 [ 261.069125][ T5119] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 261.079031][ T5119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.128527][ T5119] usb 3-1: config 0 descriptor?? [ 261.153545][ T5525] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 261.268056][ T5119] hub 3-1:0.0: bad descriptor, ignoring hub [ 261.274449][ T5119] hub 3-1:0.0: probe with driver hub failed with error -5 [ 261.290730][ T5119] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 261.360213][ T5537] tipc: Started in network mode [ 261.365687][ T5537] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 261.377660][ T5537] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 261.394053][ T5537] tipc: Enabled bearer , priority 10 [ 261.492607][ T5119] usb 3-1: USB disconnect, device number 2 [ 262.190770][ T5549] loop3: detected capacity change from 0 to 512 [ 262.330732][ T5549] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 262.439801][ T5549] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor.3: invalid indirect mapped block 2683928664 (level 1) [ 262.504404][ T5119] tipc: Node number set to 1 [ 262.521554][ T5549] EXT4-fs (loop3): Remounting filesystem read-only [ 262.555767][ T5549] EXT4-fs (loop3): 1 truncate cleaned up [ 262.561875][ T5549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.720474][ T5561] loop2: detected capacity change from 0 to 256 [ 262.995703][ T5561] FAT-fs (loop2): Directory bread(block 64) failed [ 263.003631][ T5561] FAT-fs (loop2): Directory bread(block 65) failed [ 263.010801][ T5561] FAT-fs (loop2): Directory bread(block 66) failed [ 263.017588][ T5561] FAT-fs (loop2): Directory bread(block 67) failed [ 263.025019][ T5561] FAT-fs (loop2): Directory bread(block 68) failed [ 263.031935][ T5561] FAT-fs (loop2): Directory bread(block 69) failed [ 263.038864][ T5561] FAT-fs (loop2): Directory bread(block 70) failed [ 263.045858][ T5561] FAT-fs (loop2): Directory bread(block 71) failed [ 263.053024][ T5561] FAT-fs (loop2): Directory bread(block 72) failed [ 263.059854][ T5561] FAT-fs (loop2): Directory bread(block 73) failed [ 263.108071][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.458549][ T5569] binder: BINDER_SET_CONTEXT_MGR already set [ 263.465096][ T5569] binder: 5568:5569 ioctl 4018620d 20000040 returned -16 [ 264.286312][ T5122] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 264.672079][ T5122] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 264.681064][ T5122] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 264.689548][ T5122] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 264.699003][ T5122] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 264.981222][ T5122] usb 1-1: string descriptor 0 read error: -22 [ 264.988203][ T5122] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 264.997981][ T5122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.085812][ T5122] usb 1-1: config 0 descriptor?? [ 265.111902][ T5585] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 265.196500][ T5599] loop2: detected capacity change from 0 to 512 [ 265.243927][ T5122] hub 1-1:0.0: bad descriptor, ignoring hub [ 265.256730][ T5122] hub 1-1:0.0: probe with driver hub failed with error -5 [ 265.274859][ T5122] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 265.367147][ T5599] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 265.382825][ T5599] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 265.490733][ T5599] EXT4-fs (loop2): Remounting filesystem read-only [ 265.523597][ T8] usb 1-1: USB disconnect, device number 3 [ 265.542795][ T5599] EXT4-fs (loop2): 1 truncate cleaned up [ 265.548715][ T5599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.633600][ T5608] loop4: detected capacity change from 0 to 256 [ 266.154616][ T5075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.157387][ T5608] FAT-fs (loop4): Directory bread(block 64) failed [ 266.171005][ T5608] FAT-fs (loop4): Directory bread(block 65) failed [ 266.177963][ T5608] FAT-fs (loop4): Directory bread(block 66) failed [ 266.184928][ T5608] FAT-fs (loop4): Directory bread(block 67) failed [ 266.191995][ T5608] FAT-fs (loop4): Directory bread(block 68) failed [ 266.198774][ T5608] FAT-fs (loop4): Directory bread(block 69) failed [ 266.205928][ T5608] FAT-fs (loop4): Directory bread(block 70) failed [ 266.212841][ T5608] FAT-fs (loop4): Directory bread(block 71) failed [ 266.219764][ T5608] FAT-fs (loop4): Directory bread(block 72) failed [ 266.226703][ T5608] FAT-fs (loop4): Directory bread(block 73) failed [ 267.862351][ T5636] loop0: detected capacity change from 0 to 512 [ 268.055955][ T5636] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 268.142910][ T5636] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 268.210759][ T5636] EXT4-fs (loop0): Remounting filesystem read-only [ 268.282782][ T5636] EXT4-fs (loop0): 1 truncate cleaned up [ 268.289865][ T5636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.633461][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.742344][ T29] audit: type=1326 audit(1718322818.278:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dce7cea9 code=0x7ffc0000 [ 268.783288][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.821432][ T29] audit: type=1326 audit(1718322818.318:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dce7cea9 code=0x7ffc0000 [ 268.844628][ T29] audit: type=1326 audit(1718322818.318:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f11dce7cea9 code=0x7ffc0000 [ 268.867996][ T29] audit: type=1326 audit(1718322818.318:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dce7cea9 code=0x7ffc0000 [ 270.525153][ T5686] loop2: detected capacity change from 0 to 512 [ 270.762297][ T5686] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 270.835512][ T5686] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 270.917318][ T5686] EXT4-fs (loop2): Remounting filesystem read-only [ 270.949096][ T5686] EXT4-fs (loop2): 1 truncate cleaned up [ 270.956894][ T5686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.361691][ T5075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.539390][ T5702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.640982][ T29] audit: type=1804 audit(1718322822.098:6): pid=5718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1828888891/syzkaller.8m3QIF/29/file1" dev="sda1" ino=1960 res=1 errno=0 [ 273.153301][ T5726] loop0: detected capacity change from 0 to 512 [ 273.281216][ T5726] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 273.359374][ T5726] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 273.424478][ T5726] EXT4-fs (loop0): Remounting filesystem read-only [ 273.462843][ T5726] EXT4-fs (loop0): 1 truncate cleaned up [ 273.468951][ T5726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.988313][ T5081] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.855586][ T5746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.670284][ C0] sched: RT throttling activated [ 275.849470][ T5755] process 'syz-executor.2' launched './file1' with NULL argv: empty string added [ 277.076642][ T5771] loop2: detected capacity change from 0 to 512 [ 277.395742][ T5771] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 277.506578][ T5771] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 2683928664 (level 1) [ 277.608424][ T5771] EXT4-fs (loop2): Remounting filesystem read-only [ 277.682447][ T5771] EXT4-fs (loop2): 1 truncate cleaned up [ 277.688380][ T5771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.245831][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.593525][ T5075] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.352507][ T5804] syz-executor.0[5804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.353067][ T5804] syz-executor.0[5804] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.449080][ T5807] loop3: detected capacity change from 0 to 256 [ 280.574338][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.583465][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.770668][ T5804] loop0: detected capacity change from 0 to 256 [ 281.697816][ T5804] FAT-fs (loop0): Directory bread(block 64) failed [ 281.709040][ T5804] FAT-fs (loop0): Directory bread(block 65) failed [ 281.716557][ T5804] FAT-fs (loop0): Directory bread(block 66) failed [ 281.723462][ T5804] FAT-fs (loop0): Directory bread(block 67) failed [ 281.730824][ T5804] FAT-fs (loop0): Directory bread(block 68) failed [ 281.737583][ T5804] FAT-fs (loop0): Directory bread(block 69) failed [ 281.744634][ T5804] FAT-fs (loop0): Directory bread(block 70) failed [ 281.751479][ T5804] FAT-fs (loop0): Directory bread(block 71) failed [ 281.758365][ T5804] FAT-fs (loop0): Directory bread(block 72) failed [ 281.765555][ T5804] FAT-fs (loop0): Directory bread(block 73) failed [ 285.144926][ T5826] loop4: detected capacity change from 0 to 512 [ 285.189963][ T5829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.338096][ T5826] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 285.441815][ T5826] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 285.511190][ T5826] EXT4-fs (loop4): Remounting filesystem read-only [ 285.537855][ T5826] EXT4-fs (loop4): 1 truncate cleaned up [ 285.544476][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.014591][ T5072] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.147503][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.044037][ T5863] ===================================================== [ 290.051283][ T5863] BUG: KMSAN: uninit-value in dev_map_hash_lookup_elem+0x116/0x2e0 [ 290.059360][ T5863] dev_map_hash_lookup_elem+0x116/0x2e0 [ 290.065257][ T5863] bpf_map_lookup_elem+0x5c/0x80 [ 290.070372][ T5863] ___bpf_prog_run+0x13fe/0xe0f0 [ 290.075502][ T5863] __bpf_prog_run64+0xb5/0xe0 [ 290.080338][ T5863] bpf_trace_run4+0x150/0x340 [ 290.085165][ T5863] __bpf_trace_sched_switch+0x37/0x50 [ 290.090725][ T5863] __traceiter_sched_switch+0xb7/0x150 [ 290.096379][ T5863] __schedule+0x2eca/0x6bc0 [ 290.101044][ T5863] __cond_resched+0x49/0xc0 [ 290.105700][ T5863] do_recvmmsg+0x9fc/0xfd0 [ 290.110308][ T5863] __x64_sys_recvmmsg+0x397/0x490 [ 290.115515][ T5863] x64_sys_call+0xf6c/0x3b50 [ 290.120282][ T5863] do_syscall_64+0xcf/0x1e0 [ 290.124961][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.131039][ T5863] [ 290.133437][ T5863] Local variable stack created at: [ 290.138633][ T5863] __bpf_prog_run64+0x45/0xe0 [ 290.143470][ T5863] bpf_trace_run4+0x150/0x340 [ 290.148298][ T5863] [ 290.150710][ T5863] CPU: 1 PID: 5863 Comm: syz-executor.1 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 290.160859][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.171038][ T5863] ===================================================== [ 290.178059][ T5863] Disabling lock debugging due to kernel taint [ 290.184302][ T5863] Kernel panic - not syncing: kmsan.panic set ... [ 290.190802][ T5863] CPU: 1 PID: 5863 Comm: syz-executor.1 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 290.202390][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 290.212543][ T5863] Call Trace: [ 290.215894][ T5863] [ 290.218894][ T5863] dump_stack_lvl+0x216/0x2d0 [ 290.223727][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.229672][ T5863] dump_stack+0x1e/0x30 [ 290.233967][ T5863] panic+0x4e2/0xcd0 [ 290.238001][ T5863] ? kmsan_get_metadata+0xf1/0x1d0 [ 290.243682][ T5863] kmsan_report+0x2d5/0x2e0 [ 290.248315][ T5863] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 290.254557][ T5863] ? __msan_warning+0x95/0x120 [ 290.259435][ T5863] ? dev_map_hash_lookup_elem+0x116/0x2e0 [ 290.265289][ T5863] ? bpf_map_lookup_elem+0x5c/0x80 [ 290.270541][ T5863] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 290.275786][ T5863] ? __bpf_prog_run64+0xb5/0xe0 [ 290.280763][ T5863] ? bpf_trace_run4+0x150/0x340 [ 290.285737][ T5863] ? __bpf_trace_sched_switch+0x37/0x50 [ 290.291433][ T5863] ? __traceiter_sched_switch+0xb7/0x150 [ 290.297216][ T5863] ? __schedule+0x2eca/0x6bc0 [ 290.302012][ T5863] ? __cond_resched+0x49/0xc0 [ 290.306810][ T5863] ? do_recvmmsg+0x9fc/0xfd0 [ 290.311544][ T5863] ? __x64_sys_recvmmsg+0x397/0x490 [ 290.316886][ T5863] ? x64_sys_call+0xf6c/0x3b50 [ 290.321877][ T5863] ? do_syscall_64+0xcf/0x1e0 [ 290.326713][ T5863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.332968][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.338310][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.344257][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.349581][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.354904][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.360846][ T5863] ? try_to_wake_up+0xa27/0x1920 [ 290.365925][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.371244][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.376572][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.382507][ T5863] __msan_warning+0x95/0x120 [ 290.387207][ T5863] dev_map_hash_lookup_elem+0x116/0x2e0 [ 290.392893][ T5863] ? __pfx_dev_map_hash_lookup_elem+0x10/0x10 [ 290.399094][ T5863] bpf_map_lookup_elem+0x5c/0x80 [ 290.404177][ T5863] ___bpf_prog_run+0x13fe/0xe0f0 [ 290.409248][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.414587][ T5863] __bpf_prog_run64+0xb5/0xe0 [ 290.419399][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.425340][ T5863] ? __pfx___bpf_prog_run64+0x10/0x10 [ 290.430862][ T5863] ? __pfx___bpf_prog_run64+0x10/0x10 [ 290.436365][ T5863] bpf_trace_run4+0x150/0x340 [ 290.441170][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.446494][ T5863] __bpf_trace_sched_switch+0x37/0x50 [ 290.452016][ T5863] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 290.458241][ T5863] __traceiter_sched_switch+0xb7/0x150 [ 290.463860][ T5863] __schedule+0x2eca/0x6bc0 [ 290.468487][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.473806][ T5863] ? ___sys_recvmsg+0x255/0x840 [ 290.478807][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.484127][ T5863] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 290.490086][ T5863] ? filter_irq_stacks+0x164/0x1a0 [ 290.495369][ T5863] ? kmsan_internal_check_memory+0x98/0x560 [ 290.501436][ T5863] __cond_resched+0x49/0xc0 [ 290.506062][ T5863] do_recvmmsg+0x9fc/0xfd0 [ 290.510637][ T5863] ? stack_depot_save_flags+0x2c/0x6e0 [ 290.516228][ T5863] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 290.522675][ T5863] __x64_sys_recvmmsg+0x397/0x490 [ 290.527889][ T5863] ? kmsan_get_metadata+0x146/0x1d0 [ 290.533228][ T5863] x64_sys_call+0xf6c/0x3b50 [ 290.538057][ T5863] do_syscall_64+0xcf/0x1e0 [ 290.542724][ T5863] ? clear_bhb_loop+0x25/0x80 [ 290.547560][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.553611][ T5863] RIP: 0033:0x7f11dce7cea9 [ 290.558124][ T5863] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 290.577868][ T5863] RSP: 002b:00007f11ddb430c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 290.586414][ T5863] RAX: ffffffffffffffda RBX: 00007f11dcfb4050 RCX: 00007f11dce7cea9 [ 290.594490][ T5863] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 290.602579][ T5863] RBP: 00007f11dceebff4 R08: 0000000000000000 R09: 0000000000000000 [ 290.610652][ T5863] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 290.618718][ T5863] R13: 000000000000006e R14: 00007f11dcfb4050 R15: 00007ffd076e3a78 [ 290.626811][ T5863] [ 291.996764][ T5863] Shutting down cpus with NMI [ 292.001666][ T5863] Kernel Offset: disabled [ 292.006237][ T5863] Rebooting in 86400 seconds..