last executing test programs: 4m25.819635851s ago: executing program 1 (id=2): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast}}}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4m9.935881708s ago: executing program 32 (id=2): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @broadcast}}}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m23.318625215s ago: executing program 2 (id=230): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r2, 0x0, 0x7fffffff}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000080), 0x0}, 0x20) 2m22.170241912s ago: executing program 2 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 2m19.998305265s ago: executing program 2 (id=238): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklySVJkpA7CUmSJEnikFsSkpDrSXIPuaeTjvv9knvSyStJkpCQZH3jdPn8ey//3vf99//0vWf+xtjjrPnsPdee68zxnGfvPcZ5vuo2vHqjGlXqMzP8O/SvA/z5RxIAJADAIADIAQABAJTNWTZn+v4sGpP+rZOI/yUNZl7pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ux8V8uWcTd5/v//OfU/SZbP/wwB/9EO6f9/Gv0vHS39z9ik/xmb9D9jk/5nZMGVLkBcYfL+z9ik/0JkaH/4M+WN56/0M23Z/oVNCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYT4f+C8v8wAwK/jK12XEEIIIYQQQggh/jj+nStdgRBCCCGEEEIIIf73ISjQYCCATJAZEiALJMJVkBWyQXbIATG4GnLCNZALroXckAfyQj7IDwWgIIRAYIEhgkJQGOJwHRSB66EoFIPiUAIclIRScAOUhhuhDNwEZeFmKAe3QHmo8NM5090OleEOqAJ3QlWoBtWhBtwFNeFuqAX3QG24F+rAfVAX7od68ADUhwbQEB6ERtAYmkBTaAbNoQW0hFa/k5+c4+/lPwc94XnoBb0hCfpAX3gB+kF/GAADYRC8CIPhJRgCL8NQGAbD4RUYAa/CSHgNRsFoGAOvw1gYB+NhAkyESZAMb8BkeBOmwFuNs8E0mA4zYCbMgtnwNsyBuTAP3oH5sAAWQnKWxbAElsK7sAzegxR4H5bDB5AKK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fwg7YCbtgN+yBvbAPPoL98DEcgE8gDT/9F/PP/TYfuiMgoEKFBg1mwkyYgAmYiImYFbNidsyOMYxhTsyJuTAX5sbcmBfzYhLmx4JYEAkJGRkLYSGMYxyLYBEsikWxOBZHhw5LYSksjTdiGSyDZbEslsNyWB4rYAW8FW/FSlgJK2NlrIJVsCpWxepYHe/Cu/BurIW1sDbWxjpYB+tiXayH9bA+1seG2BAbYSNsgk2wGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHbAjdsRO2Ak7Y2fsgl2wK3bFbtgNu+Oz+Cw+h8/h8/g89saqqg/2xb7YD/vhAByIA/FFHIwv4Uv4Mg7FYTgcX8FX8FUciWdxFI7GMTgGK6lxOB4nIKtJmIzJmBkm4xScglNxGk7DGTgTZ+FsnI1zcC7OxXdwPi7ABbgIF+ESXIpLcRm+hymYgsvxHKbiClyJq3A1rsHVuA7X4zrciJtwI27BLbgNt+GH+CHuxJ24G3fjXtyLH+FH+DF+jEMxDdPwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPABcwAt4ES/iJbyU/uZX6YwyKpPKpBJUgkpUiSqryqqyq+wqpmIqp8qpcqlcKrfKrfKqvCq/yq8KqoKKFClWkSqkCqm4iqsiqogqqoqq4qq4csqpUqqUKq1KqzKqjCqrblbl1C2qvKqg2rpb1a2qkmrnKqs7VBVVRVVV1VR1VUPVUDVVTVVL1VK1VW1VR9VRddX9qp7qgwOwgUrvTCM1DJuo4dhMNVctVEv1Kj6kWquR2Ea1Ve3UI2o0jsIOqrXrqB5XndR47KyeVBPwKdVVTcJu6hnVXT2reqjnVE/VxvVSvdVU7KP6qhnYT/VXA9RANQerqfSOVVcvq+cyD1PD1StqCb6qRqrX1Cg1Wo1Rr6uxapwaryaoiWqSSlZvqMnqTTVFvaWmqmlqupqhZqpZarZ6W81Rc9U89Y6arxaohWqRWqyWqKXqXbVMvadS1PtqufpApaoVaqVapVarNWqtWqfWqw1qo9qkNqstaqvaprarD9UOtVPtUrvVHrVX7VMfqf3qY3VAfaLS1KfqoPqLOqQ+U4fV5+qI+kIdVV+qY+ordVx9rU6ob9RJdUqdVt+qM+o7dVadU+fV9+qC+kFdVD+qS8or0KiV1troQGfSmXWCzqIT9VU6q86ms+scOqav1jn1NTqXvlbn1nl0XpNP59cFdEEdatJWs450IV1Yx/V1uoi+XhfVxXRxXUI7XVKX0jfo0vpGXUbfpMvqm3U5fYsuryvoih70bbqSvl1X1nfoKvpOXVVX09V1DX2Xrqnv1rX0Pbq2vlfX0ffpuvp+XU8/oOvrBrqhflA30o11E91UN9PNdQvdUrfSD+nW+mHdRrfV7fQjur1+VHfQj+mO+nHdST+hO+sndRf9lO6qn9bd9DO6u35W99A/6kva6166t07SfXRf/YLup/vrAXqgHqRf1IP1S3qIflkP1cP0cP2KHqFf1SP1a3qUHq3H6Nf1WD1Oj9cT9EQ9SSfrN/Rk/aaeot/SU/U0PV3P0DP1LD3gl5nm/RP5b/6d/CE/nX2b3q4/1Dv0Tr1L79Z79F69T+/T+/V+fUAf0Gk6TR/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfUKf1Kf09/pbfUZ/p8/qc/qc/l5f0Bf0xV9+B2DQKKONMYHJZDKbBJPFJJqrTFaTzWQ3OUzMXG1ymmtMLnOtyW3ymLwmn8lvCpiCJjRkrGETmUKmsImb60wRc70paoqZ4qaEcaakKWVu+B/n/159rUwr09q0Nm1MG9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PFdDFdTVfTzXQz3U1308P0MD1NT9PL9DJJJsn0NS+Yfqa/GWAGmkHmRTPYDDZDzBAz1Aw1w81wM8KMMCPNSDPKjDJjzBgz1ow14814M9FMNMk+h5lsJpspZoqZaqaa6YNymJlmppltZps5Zo6ZZ+aZ+Wa+WWgWmsVmsVlqlpplZplJMSlmuVluUs0Ks8KsMqvMGrPGrDPrzAazwWwym8wWs8Wkmu1mu9lhdphdZpfZY/aYfWaf2W/2mwPmgEkzaeagOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmpDlpTpvT5ow5Y86as+a8OW8umAvmorloLplL6Zd9gQpUYAITZAoyBQlBQpAYJAZZg6xB9iB7EAtiQc4gZ5AruDbIHeQJ8gb5gvxBgaBgEAYU2ICDKCgUFA7iwXVBkeD6oGhQLCgelAhcUDIoFdwQlA5uDMoENwVlg5uDcsEtQfmgQlAxuDW4LagU3B5UDu4IqgR3BlWDakH1oEZwV1AzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf2gQdAweDBoFDQOmgRNg2ZB86BF0DJo9YfO7/3ZPA+7XmHvMCnsE/YNXwj7hf3DAeHAcFD4Yjg4fCkcEr4cDg2HhcPDV8IR4avhyPC1cFQ4OhwTvh6ODceF48MJ4cRwUpgcvhFODt8Mp4RvhVPDaeH0YEY4M5wVzg7fDueEc8N54Tvh/HBBuDBcFC4Ol4T48yUxpITvh8vDD8LUcEW4MlwVrg7XhGvDdeH6cEO4MdwUbg63lB3886HhjnBnuCvcHe4J94b7wo/C/eHH4YHwkzAt/DQ8GP4lPBR+Fh4OPw+PhF+ER8Mvw2PhV+Hx8OvwRPhNeDI8FZ4Ovw3PhN+FZ8Nz4fnw+/BC+EN4MfwxvBT69Iv79I93MmQoE2WiBEqgREqkrJSVslN2ilGMclJOykW5KDflpryUl/JTfipIBSkdE1MhKkRxilMRKkJFqSgVp+LkyFEpKkWlqTSVoTJUlspSOSpH5ak8VaSKdBvdRrfT7XQH3UF30p1UjapRDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lNDakiNqBE1oSbUjJpRC2pBragVtabW1IbaUDtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak79aAe1JN6Ui/qRUmURH2pL/WjfjSABtAgGkSDaTANoSE0lIbScBpOI2gEjaSRNIpG0xh6ncbSOBpPE2giTaJkSqbJNJmm0BSaSlNpOk2nmTSTZtNsmkNzaB7No/k0nxbSQlpMi2kpLaVltIxSKIWW03JKpVRaSStpNa2mtbSW1tN62kgbaTNtpq20lbbTdtpBO2gX7aI9tIf20T7aT/vpAB2gNEqjg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaCTdJJO02k6Q2foLJ2l83SeLtAPdJF+pEvkKcFmsYn2KpvVZrPZbQ7713Fem8/mtwVsQRva3DbPb2Ky1ha1xWxxW8I6W9KWsjf8TVzeVrAV7a32NlvJ3m4r2/I2C/zXuKa929ay99ja9l5bw971m7iOvc/WtY1tPdvU1rfNbUPb0jayjW0T29Q2s81tC9vStreP2g72MdvRPm472Sf+Jl5m37Pr7Qa70W6y++3H9rz93h6zX9kL9gfby/a2g+yLdrB9yQ6xL9uhdthvYwA7xr5ux9pxdrydYCfaSX8TT7cz7Ew7y862b9s5du7fxEvtu3a+TbEL7SK72C75KU6vKcW+b5fbD2yqXWFX2lV2tV1j19p1/7fWVXaL3Wq32X32I7vD7rS77G67x+79KU5fxwH7iU2zn9qj9kt7yH5mD9vj9oj94qc4fX3H7df2hP3GnrSn7Gn7rT1jv7Nn7bmf1p++9m/tj/aS9RYYWbFmwwFn4sycwFk4ka/irJyNs3MOjvHVnJOv4Vx8LefmPJyX83F+LsAFOWRiy8wRF+LCHOfruAhfz0W5GBfnEuy4JJfiG7g038hl+CYuyzdzOb6Fy3MFrsi38m1ciW/nynwHV+E7uSpX4+pcg+/imnw31+J7uDbfy3X4Pq7L93M9foDrcwNuyA9yI27MTbgpN+Pm3IJbcit+iFvzw9yG23I7foTb86PcgR/jjvw4d+InuDM/yV34Ke7KT3M3foa787Pcg5/jnvw89+LenMR9uC+/wP24Pw/ggTyIX+TB/BIP4Zd5KA/j4fwKj+BXeSS/xqN4NI/h13ksj+PxPIEn8iRO5jd4Mr/JU/gtnsrTeDrP4Jk8i2fz2zyH5/I8fofn8wJeyIt4MS/hpfwuL+P3OIXf5+X8AafyCl7Jq3g1r+G1vI7X8wbeyJt4M2/hrbyNt/OHvIN38i7ezXt4L+/jj3g/f8wH+BNO40/5IP+FD/FnfJg/5yP8BR/lL/kYf8XH+Ws+wd/wST7Fp/lbPsPf8Vk+x+f5e77AP/BF/pEvsWeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ixlGTqGnULGoetYhaRq2ih6LW0cNRm6ht1C56JGofPRp1iB6LOkaPR52iJy7vLxb8/Gn6V/uToj6R/uUJ2T16cXxJfGn83fiy+Hvxxt1+fjU1viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Nb4t7n2NzOAw/UYYjAtcJpfZJbgsLtFd5bK6bC67y+Fi7mqX013jcrlrXW6Xx+V1+Vx+V8AVdKEjZx27yBVyhV3cXeeKuOtdUVfMFXclnHMlXSnX0rVyrVxr97Br49q6du4R94h71D3qHkv4pXDX2T3purinXFf3tHvaPeO6u2ddD/ec6+med71cb5fkklxf19f1c/3cADfADXKD3GA32A1xQ9xQN9QNd8PdCDfCjXQj3Sg3yo1xY9xYN9aNd+PdRDfRJbtkN9lNdlPcFDfVTXXT3XQ30810s91sN8fNcfPcPDffzXcL3UK32C12S91St8wtcykuxS13y12qS3Ur3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1waS7NHXQH3SF3yB12n7sj7gt31H3pjrmv3HH3tTvhvnEn3Sl32nl9xn3nzrpz7rz73l1wP7iL7kd3yXmXHHsjNjn2ZmxK7K3Y1Ni02PTYjNjM2KzY7NjbsTmxubF5sXdi82MLYgtji2KLY0tiS2PvxpbF3oulxN6PLY99EEuNrYitjK2KrY6tiXlfYEfkC/nCPu6v80X89b6oL+aL+xLe+ZK+lL/Bl/Y3+jL+Jl/W3+zL+Vt8eV/BV/RNfTPf3LfwLX0r/5Bv7R/2bXxb384/4tv7R30H/5jv6B/3nfwTvrN/0nfxT/mu/mnfzT+z4Jcu+57+ed/L9/ZJvo/v61/w/Xx/P8AP9IP8i36wf8kP8S/7oX6YH+5f8SP8q36kf82P8qP9GP+6H+vH+fF+gp/oJ/lk/4af7N/0U/xbfqqf5qf7GX6mn+Vn+7f9HD/Xz/Pv+Pl+gV/oF/nFfolf6t/1y/x7PsW/75f7D3yqX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u//Q7/A7/S6/2+/xe/0+/5Hf7z/2B/wnPs1/6g/6v/hD/jN/2H/uj/gv/FH/pT/mv/LH/df+hP/Gn/Sn/Gn/rT/jv/Nn/Tl/3n/vL/gf/EX/o78k/7MmhBBCCPFP0b+zv8/feU39sqXrCwDZduY78tdzbs7987i/2t8pBgCP9+7W4NetQYOkpKRfjk3VEBReBACxy/k/ff/AL/EKaAePQkdoC6X/bn39VcWfrvv+u/njNwMkAmT5NSf99igR/nr+G//B/E3f5d+bfxFA0cKXc9JP9Gt8ef4y/2D+ve1/Z/4snyUDtPkvOVnhcnx5/lLwMDwBHX9zpBBCCCGEEEII8bP+6kL337u/Tb8/z28u52SGy/Hv3Z//jsp/xBqEEEIIIYQQQgjx33vq2R6PPdSxY9su/8mDzH+OMv4EAwSAP0EZMvjzD670XyYhhBBCCCHEH+3yRf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi4/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfZ/AgAA///M7VMc") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x200) 2m15.61768479s ago: executing program 2 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x2, &(0x7f0000000240)=@raw=[@generic={0x6, 0x3, 0x5, 0x5, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local, 0xfffffffe}, 0x0, {[0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2704b295]}}, 0x5c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xc0c00) listen(0xffffffffffffffff, 0x0) 2m12.641585996s ago: executing program 2 (id=254): syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x208008de, &(0x7f0000000380)=ANY=[], 0x2, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh") sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000100)='./control\x00', 0x184) utimes(&(0x7f0000000180)='./control\x00', &(0x7f00000003c0)) 2m12.258490151s ago: executing program 2 (id=256): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000020000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) 1m56.152292784s ago: executing program 33 (id=256): syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000020000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006"], 0xac}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) 35.202451385s ago: executing program 4 (id=508): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) uname(0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file2\x00', 0x800084, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16], 0x6, 0x2d7, &(0x7f0000000a40)="$eJzs3b1rJGUcB/DfbGZf1GK3sBLBAS2sjsu1NhvkDsRUHlucFhq8O5DsIlwg4ut6ldjZWPoXCIJ/iI2dpWAr2HnCwci8ZXdzk80q2YiXz6dInszzfGd+85Jkmvzy3ouzw7tZ3H/42a8xGCTRGfcjHiUxik40vowV428CAPg/e5Tn8UdeaZn+5es12cEW6wIAtuec3/+1tPx4p1jx4+XVBgBsx+07b7+5t79/860sG8St2VfHkyQiis/V/N79+CCmcS+uxzAeR5QvCt0o3xaK4a08z+dpVhjFK7P58aRIzt79qd7/3u8RZX43hjEqN528bZT5N/Zv7maVpfy8qOPZ+vjjIn8jhvH8SXglf6MlH5NevPryUv3XYhg/vx8fxjTulkUs8l/sZtnr+bd/fvpOUV6RT+bHk365biHfaQ4+v+R7BAAAAAAAAAAAAAAAAAAAAADA0+da3TunH2X/nmJT3X9n53HxRTeyxmi1P0+VT5odLfoDRSfP83ke3zX9da5nWZYnVRvBRT6NF9K6sSAAAAAAAAAAAAAAAAAAAABccUcff3J4MJ3ee3Ahg6YbQBoRf92O+Lf7GS9teSnWL+7XxzyYTjv1cHVNurwldpo1ScTaMoqTuKDLct7gmSdqrgff/9CaKs7oKI22qcH5B+22H+vswedtUx91q+vYmmqersODpP0a9k+KHxQ3Lk7fuF6019ONU1t6ZxXfPIqbnWmvdWr4j29l77lyMF+zJpJ13xev/VaVvXQW5aB5ynvlVW2Nd+vBUvzUs7HR8xyDKv7kz4pEtw4AAAAAAAAAAAAAAAAAANiqxV//tkw+XBvt5P2tlQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl2rx//83GaSr4Q1SvXhw9F+dGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfH3wEAAP//f/xSgA==") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) 31.644505009s ago: executing program 4 (id=513): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.108681631s ago: executing program 4 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffff7e, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 28.994317908s ago: executing program 4 (id=521): r0 = socket(0x6, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x0) unshare(0x22020400) fallocate(r0, 0x2a, 0x2, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd701020301"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x80000}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000200)={r3}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000a9c1584155977d7f726fa4d4280d51141838f0b9059ea12dd61f9946ac0320c2491f6031f44f9a1cbc5b2cb3664880500179d81a9d27f6c1ba8d72806b4b1471afa42e271accdc79b1c636bc88d46202027c"], 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r6], 0x14}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000001380)={"dd9a64b425b1c69f4e76bb0761597e60", r9, r10, {0x6, 0x80000000}, {0x2, 0x72be}, 0x1, [0x5, 0x99, 0x2, 0x10, 0x961, 0x4, 0x7c80000, 0x3, 0x5, 0x9, 0xf6a5, 0x9, 0x5, 0x4, 0x6, 0xc]}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 26.19449749s ago: executing program 4 (id=525): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) 26.066720312s ago: executing program 4 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) 18.78709256s ago: executing program 6 (id=543): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.463300199s ago: executing program 6 (id=546): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf00}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x2000001, 0x0, 0xfe, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno', @ANYRESHEX=r1]) close(r2) sync_file_range(r0, 0x0, 0x0, 0x0) 12.686657621s ago: executing program 0 (id=557): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 12.620925232s ago: executing program 0 (id=558): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rtc_irq_set_freq\x00', r4, 0x0, 0x5}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000046c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}]}}}]}, 0x40}}, 0x0) 12.222605648s ago: executing program 6 (id=559): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$eJzs3d9rXFkdAPDvnSRt2qZNqj7UgrVoJS3amaSxbfChRhB9Kljre4zJJIRMMiEzaZtQJMU/QBB/oU8+6YPgswjSP0GEgr6LLLuU3bbLsg+7O8tM7mzT2ZlkQpNMmvl84PTec+7N/Z4z0zkz557LvQF0rYsRMRERPRFxJSIG0/JMmmJjM1X3e/7s4XQ1JVGp3H03iSQtqx8rSZen0j/rj4gf/zDiZ8nn45bW1hemCoX8SprPlReXc6W19avzi1Nz+bn80sTY6I3xm+PXx0f2rK23vv/Wb3/55x/c+ue37v9v8p3LP69WayDdtrUd7dhoc7/NpvfVXou63ohY2U2wQ6wnbU9fpysCAEBbqr/xvxARX4uIF39o3OpXHQAAABwFle8OxEdJRKVSqZyplwEAAABHSqZ2DWySyabXAgxEJpPNbl7D+6U4mSkUS+VvzhZXl2Y2r5Udir7M7HwhP5JeKzwUfUk1P1pbf5m/1pAfi4izEfHrwRO1fHa6WJjp8LkPAAAA6BanGsb/7w9ujv8BAACAI2ao0xUAAAAA9p3xPwAAABx9Lcf/Se/BVgQAAADYDz+6fbuaKvXnX8/cW1tdKN67OpMvLWQXV6ez08WV5excsThXu2ff4k7HKxSLy9+OpdUHuXK+VM6V1tYnF4urS+XJ2nO9J/OeKAgAAAAH7+xXH/83iYiN75yopapj6bY2xuoT+1s7YD9ldrd7sl/1AA5eT6crAHSMC3yhe5mPB3YY2P+mIb/L0wYAAMBhMPzl15r/Nx8IbzADeehe5v+he5n/h+5l/h+63PGdd+lvteFfbRzfWUIAADgUBmopyWTTucCByGSy2YjTtccC9CWz84X8SESciYj/DPYdr+ZHO11pAAAAAAAAAAAAAAAAAAAAAAAAAHjDVCpJVAAAAIAjLSLzdpI+omt48NJA4/mBY8mHg7VlRNz/493fPZgql1dGq+XvfVZe/n1afq0TZzAAAACARvVxen0cDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76fmzh9P1dJBxn34vIoaaxe+N/tqy/++DEXHyRRK9W/4uiYiePYi/8SgizjWLn1SrFUMfbNaiMX4mIk4cRPxoHf/UHsSHbva42v9MNPv8ZeJibdn889ebptf19GKr/i9T7/9q/Vyz/u90mzHOP/lbrmX8RxHne5v3P/X4yWv2vz/9yfp6q22VP0UMN/3+SV6JlSsvLudKa+tX5xen5vJz+aWxsdEb4zfHr4+P5GbnC/n036YxfvWVf3yyXftPtog/tEP7L7XZ/o+fPHj2xW3iX/568/f/3Dbxq6/9N9Lvger24fr6xub6Vhf++u8LDUXHtsafadH+nd7/y222/8qdX/y/zV0BgANQWltfmCoU8itWjuxK7wHEqv9/OiRN7uqVv2wtuZO+Mbs+Tuf6JAAAYH+8/NHf6ZoAAAAAAAAAAAAAAAAAAABA93rlpl89EbHXdyM7/uqdBfo711QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG19GgAA//9UPsbW") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000100)={0x8003, 0x1000, 0x2000, 0x0, 0x0, 0x0, 0x2401}) 12.11558291s ago: executing program 6 (id=560): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='io_uring_defer\x00', r3}, 0x18) fdatasync(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)=ANY=[@ANYBLOB="98020000", @ANYRES16=r5, @ANYBLOB="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"], 0x298}, 0x1, 0x0, 0x0, 0x4004011}, 0x40000) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0x7e, 0x5, '\x00', 0xc74}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @ioapic={0x0, 0x59a35420, 0x20002, 0xfffffff9, 0x0, [{}, {}, {0x0, 0x3}, {0x1, 0x35, 0x9}, {0x34, 0x6}, {0x0, 0x0, 0x6, '\x00', 0xfc}, {0x0, 0xfe}, {0x2, 0x6}, {}, {0x73, 0x1, 0x2}, {0x0, 0x4, 0xfc}, {}, {}, {0x4}, {0x7, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa, '\x00', 0xf0}, {0x4}, {}, {0x2d, 0x0, 0x7, '\x00', 0x1}, {0x0, 0x5, 0x3}, {0x3, 0x5, 0x0, '\x00', 0xfc}, {0x0, 0x0, 0x0, '\x00', 0x9}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.846582909s ago: executing program 34 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000018000000080000004000000042000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) 8.857422038s ago: executing program 3 (id=565): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x20000, &(0x7f00000003c0)={[], [{@dont_hash}, {@flag='ro'}, {@dont_measure}, {@dont_measure}]}, 0x43, 0x7ce, &(0x7f0000001180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000640)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000004c0)={0x1f, 0xffff}, 0x6) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r5, 0x851, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d6163736563000044fe028008000500", @ANYRES32=r6, @ANYBLOB="23dde648bd966fd04463b73e7d3144731ba43bbd2c8bcabdb588f1baf5e5a22b51b0c8ec2dba7c012b78f7d55628326a74f895231cb067e8d4a1ae3a2400f1ce5bae61203c1febdc607b35169e2db39fb7461555615ef0cf16086183880028e61f81324af9a147d63d0264728a671b4cdb4eccafecb637d6a7c01920f87c9d7c49af03ae9312c62936dda5b23475daa9caaf75d75794c02a445020aeed222d5866a706c607514bb8a622d97966da70287bddebae05", @ANYRES64=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 6.03808984s ago: executing program 5 (id=568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x2, &(0x7f0000000240)=@raw=[@generic={0x6, 0x3, 0x5, 0x5, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$tipc(0x1e, 0x5, 0x0) fcntl$setstatus(r6, 0x4, 0xc0c00) listen(r6, 0x0) 4.629734631s ago: executing program 5 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000280)={[{@usrquota}, {}, {@nobh}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0xffff, 0x100000001, 0x4}) 4.471473923s ago: executing program 0 (id=570): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff83000040"]) 4.470864493s ago: executing program 6 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) 4.115008009s ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000001040)='./file0/../file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.859886373s ago: executing program 0 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x29) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) setresgid(0x0, 0x0, 0x0) 3.090208414s ago: executing program 6 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) select(0x40, &(0x7f00000002c0)={0xf, 0x8001, 0xe, 0x7, 0x4, 0x9, 0x4, 0x1000}, 0x0, 0x0, 0x0) 2.763836179s ago: executing program 0 (id=575): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200, 0x80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x1, &(0x7f00000004c0)={[{@inlinecrypt}, {@jqfmt_vfsold}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@minixdf}, {@dax_never}, {@nombcache}, {}], [{@audit}]}, 0x43, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x0, 0x0) syz_socket_connect_nvme_tcp() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}]}}}]}, 0x4c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16, @ANYBLOB="0100000000000000000001000000060006000300000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"], 0x1c8}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 1.932272641s ago: executing program 3 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.931842082s ago: executing program 5 (id=577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009c000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.444862309s ago: executing program 0 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r5, r4}, 0xc) 1.441058619s ago: executing program 3 (id=579): rt_sigprocmask(0x0, &(0x7f0000000180), 0xffffffffffffffff, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r1, 0x0, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.3293483s ago: executing program 5 (id=580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.002522425s ago: executing program 5 (id=581): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$eJzs3Au0TlX3MPA511qb4+TyJLnvuebmSS6LJAklySVJkpA7CUmSJEnikFsSkpDrSXIPuaeTjvv9knvSyStJkpCQZH3jdPn8ey//3vf99//0vWf+xtjjrPnsPdee68zxnGfvPcZ5vuo2vHqjGlXqMzP8O/SvA/z5RxIAJADAIADIAQABAJTNWTZn+v4sGpP+rZOI/yUNZl7pCsSVJP3P2KT/GZv0P2OT/mds0v+MTfqfsUn/MzbpvxAZ2ux8V8uWcTd5/v//OfU/SZbP/wwB/9EO6f9/Gv0vHS39z9ik/xmb9D9jk/5nZMGVLkBcYfL+z9ik/0JkaH/4M+WN56/0M23Z/oVNCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYT4f+C8v8wAwK/jK12XEEIIIYQQQggh/jj+nStdgRBCCCGEEEIIIf73ISjQYCCATJAZEiALJMJVkBWyQXbIATG4GnLCNZALroXckAfyQj7IDwWgIIRAYIEhgkJQGOJwHRSB66EoFIPiUAIclIRScAOUhhuhDNwEZeFmKAe3QHmo8NM5090OleEOqAJ3QlWoBtWhBtwFNeFuqAX3QG24F+rAfVAX7od68ADUhwbQEB6ERtAYmkBTaAbNoQW0hFa/k5+c4+/lPwc94XnoBb0hCfpAX3gB+kF/GAADYRC8CIPhJRgCL8NQGAbD4RUYAa/CSHgNRsFoGAOvw1gYB+NhAkyESZAMb8BkeBOmwFuNs8E0mA4zYCbMgtnwNsyBuTAP3oH5sAAWQnKWxbAElsK7sAzegxR4H5bDB5AKK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A4fwg7YCbtgN+yBvbAPPoL98DEcgE8gDT/9F/PP/TYfuiMgoEKFBg1mwkyYgAmYiImYFbNidsyOMYxhTsyJuTAX5sbcmBfzYhLmx4JYEAkJGRkLYSGMYxyLYBEsikWxOBZHhw5LYSksjTdiGSyDZbEslsNyWB4rYAW8FW/FSlgJK2NlrIJVsCpWxepYHe/Cu/BurIW1sDbWxjpYB+tiXayH9bA+1seG2BAbYSNsgk2wGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHbAjdsRO2Ak7Y2fsgl2wK3bFbtgNu+Oz+Cw+h8/h8/g89saqqg/2xb7YD/vhAByIA/FFHIwv4Uv4Mg7FYTgcX8FX8FUciWdxFI7GMTgGK6lxOB4nIKtJmIzJmBkm4xScglNxGk7DGTgTZ+FsnI1zcC7OxXdwPi7ABbgIF+ESXIpLcRm+hymYgsvxHKbiClyJq3A1rsHVuA7X4zrciJtwI27BLbgNt+GH+CHuxJ24G3fjXtyLH+FH+DF+jEMxDdPwIB7EQ3gID+NhPIJH8CgexWN4DI/jcTyBJ/AknsLTeArP4Bk8i+fwPABcwAt4ES/iJbyU/uZX6YwyKpPKpBJUgkpUiSqryqqyq+wqpmIqp8qpcqlcKrfKrfKqvCq/yq8KqoKKFClWkSqkCqm4iqsiqogqqoqq4qq4csqpUqqUKq1KqzKqjCqrblbl1C2qvKqg2rpb1a2qkmrnKqs7VBVVRVVV1VR1VUPVUDVVTVVL1VK1VW1VR9VRddX9qp7qgwOwgUrvTCM1DJuo4dhMNVctVEv1Kj6kWquR2Ea1Ve3UI2o0jsIOqrXrqB5XndR47KyeVBPwKdVVTcJu6hnVXT2reqjnVE/VxvVSvdVU7KP6qhnYT/VXA9RANQerqfSOVVcvq+cyD1PD1StqCb6qRqrX1Cg1Wo1Rr6uxapwaryaoiWqSSlZvqMnqTTVFvaWmqmlqupqhZqpZarZ6W81Rc9U89Y6arxaohWqRWqyWqKXqXbVMvadS1PtqufpApaoVaqVapVarNWqtWqfWqw1qo9qkNqstaqvaprarD9UOtVPtUrvVHrVX7VMfqf3qY3VAfaLS1KfqoPqLOqQ+U4fV5+qI+kIdVV+qY+ordVx9rU6ob9RJdUqdVt+qM+o7dVadU+fV9+qC+kFdVD+qS8or0KiV1troQGfSmXWCzqIT9VU6q86ms+scOqav1jn1NTqXvlbn1nl0XpNP59cFdEEdatJWs450IV1Yx/V1uoi+XhfVxXRxXUI7XVKX0jfo0vpGXUbfpMvqm3U5fYsuryvoih70bbqSvl1X1nfoKvpOXVVX09V1DX2Xrqnv1rX0Pbq2vlfX0ffpuvp+XU8/oOvrBrqhflA30o11E91UN9PNdQvdUrfSD+nW+mHdRrfV7fQjur1+VHfQj+mO+nHdST+hO+sndRf9lO6qn9bd9DO6u35W99A/6kva6166t07SfXRf/YLup/vrAXqgHqRf1IP1S3qIflkP1cP0cP2KHqFf1SP1a3qUHq3H6Nf1WD1Oj9cT9EQ9SSfrN/Rk/aaeot/SU/U0PV3P0DP1LD3gl5nm/RP5b/6d/CE/nX2b3q4/1Dv0Tr1L79Z79F69T+/T+/V+fUAf0Gk6TR/UB/UhfUgf1of1EX1EH9VH9TF9TB/Xx/UJfUKf1Kf09/pbfUZ/p8/qc/qc/l5f0Bf0xV9+B2DQKKONMYHJZDKbBJPFJJqrTFaTzWQ3OUzMXG1ymmtMLnOtyW3ymLwmn8lvCpiCJjRkrGETmUKmsImb60wRc70paoqZ4qaEcaakKWVu+B/n/159rUwr09q0Nm1MG9POtDPtTXvTwXQwHU1H08l0Mp1NZ9PFdDFdTVfTzXQz3U1308P0MD1NT9PL9DJJJsn0NS+Yfqa/GWAGmkHmRTPYDDZDzBAz1Aw1w81wM8KMMCPNSDPKjDJjzBgz1ow14814M9FMNMk+h5lsJpspZoqZaqaa6YNymJlmppltZps5Zo6ZZ+aZ+Wa+WWgWmsVmsVlqlpplZplJMSlmuVluUs0Ks8KsMqvMGrPGrDPrzAazwWwym8wWs8Wkmu1mu9lhdphdZpfZY/aYfWaf2W/2mwPmgEkzaeagOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmpDlpTpvT5ow5Y86as+a8OW8umAvmorloLplL6Zd9gQpUYAITZAoyBQlBQpAYJAZZg6xB9iB7EAtiQc4gZ5AruDbIHeQJ8gb5gvxBgaBgEAYU2ICDKCgUFA7iwXVBkeD6oGhQLCgelAhcUDIoFdwQlA5uDMoENwVlg5uDcsEtQfmgQlAxuDW4LagU3B5UDu4IqgR3BlWDakH1oEZwV1AzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf2gQdAweDBoFDQOmgRNg2ZB86BF0DJo9YfO7/3ZPA+7XmHvMCnsE/YNXwj7hf3DAeHAcFD4Yjg4fCkcEr4cDg2HhcPDV8IR4avhyPC1cFQ4OhwTvh6ODceF48MJ4cRwUpgcvhFODt8Mp4RvhVPDaeH0YEY4M5wVzg7fDueEc8N54Tvh/HBBuDBcFC4Ol4T48yUxpITvh8vDD8LUcEW4MlwVrg7XhGvDdeH6cEO4MdwUbg63lB3886HhjnBnuCvcHe4J94b7wo/C/eHH4YHwkzAt/DQ8GP4lPBR+Fh4OPw+PhF+ER8Mvw2PhV+Hx8OvwRPhNeDI8FZ4Ovw3PhN+FZ8Nz4fnw+/BC+EN4MfwxvBT69Iv79I93MmQoE2WiBEqgREqkrJSVslN2ilGMclJOykW5KDflpryUl/JTfipIBSkdE1MhKkRxilMRKkJFqSgVp+LkyFEpKkWlqTSVoTJUlspSOSpH5ak8VaSKdBvdRrfT7XQH3UF30p1UjapRDapBNakm1aJaVJtqUx2qQ3WpLtWjelSf6lNDakiNqBE1oSbUjJpRC2pBragVtabW1IbaUDtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak79aAe1JN6Ui/qRUmURH2pL/WjfjSABtAgGkSDaTANoSE0lIbScBpOI2gEjaSRNIpG0xh6ncbSOBpPE2giTaJkSqbJNJmm0BSaSlNpOk2nmTSTZtNsmkNzaB7No/k0nxbSQlpMi2kpLaVltIxSKIWW03JKpVRaSStpNa2mtbSW1tN62kgbaTNtpq20lbbTdtpBO2gX7aI9tIf20T7aT/vpAB2gNEqjg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaCTdJJO02k6Q2foLJ2l83SeLtAPdJF+pEvkKcFmsYn2KpvVZrPZbQ7713Fem8/mtwVsQRva3DbPb2Ky1ha1xWxxW8I6W9KWsjf8TVzeVrAV7a32NlvJ3m4r2/I2C/zXuKa929ay99ja9l5bw971m7iOvc/WtY1tPdvU1rfNbUPb0jayjW0T29Q2s81tC9vStreP2g72MdvRPm472Sf+Jl5m37Pr7Qa70W6y++3H9rz93h6zX9kL9gfby/a2g+yLdrB9yQ6xL9uhdthvYwA7xr5ux9pxdrydYCfaSX8TT7cz7Ew7y862b9s5du7fxEvtu3a+TbEL7SK72C75KU6vKcW+b5fbD2yqXWFX2lV2tV1j19p1/7fWVXaL3Wq32X32I7vD7rS77G67x+79KU5fxwH7iU2zn9qj9kt7yH5mD9vj9oj94qc4fX3H7df2hP3GnrSn7Gn7rT1jv7Nn7bmf1p++9m/tj/aS9RYYWbFmwwFn4sycwFk4ka/irJyNs3MOjvHVnJOv4Vx8LefmPJyX83F+LsAFOWRiy8wRF+LCHOfruAhfz0W5GBfnEuy4JJfiG7g038hl+CYuyzdzOb6Fy3MFrsi38m1ciW/nynwHV+E7uSpX4+pcg+/imnw31+J7uDbfy3X4Pq7L93M9foDrcwNuyA9yI27MTbgpN+Pm3IJbcit+iFvzw9yG23I7foTb86PcgR/jjvw4d+InuDM/yV34Ke7KT3M3foa787Pcg5/jnvw89+LenMR9uC+/wP24Pw/ggTyIX+TB/BIP4Zd5KA/j4fwKj+BXeSS/xqN4NI/h13ksj+PxPIEn8iRO5jd4Mr/JU/gtnsrTeDrP4Jk8i2fz2zyH5/I8fofn8wJeyIt4MS/hpfwuL+P3OIXf5+X8AafyCl7Jq3g1r+G1vI7X8wbeyJt4M2/hrbyNt/OHvIN38i7ezXt4L+/jj3g/f8wH+BNO40/5IP+FD/FnfJg/5yP8BR/lL/kYf8XH+Ws+wd/wST7Fp/lbPsPf8Vk+x+f5e77AP/BF/pEvsWeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ixlGTqGnULGoetYhaRq2ih6LW0cNRm6ht1C56JGofPRp1iB6LOkaPR52iJy7vLxb8/Gn6V/uToj6R/uUJ2T16cXxJfGn83fiy+Hvxxt1+fjU1viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viW+Nb4t7n2NzOAw/UYYjAtcJpfZJbgsLtFd5bK6bC67y+Fi7mqX013jcrlrXW6Xx+V1+Vx+V8AVdKEjZx27yBVyhV3cXeeKuOtdUVfMFXclnHMlXSnX0rVyrVxr97Br49q6du4R94h71D3qHkv4pXDX2T3purinXFf3tHvaPeO6u2ddD/ec6+med71cb5fkklxf19f1c/3cADfADXKD3GA32A1xQ9xQN9QNd8PdCDfCjXQj3Sg3yo1xY9xYN9aNd+PdRDfRJbtkN9lNdlPcFDfVTXXT3XQ30810s91sN8fNcfPcPDffzXcL3UK32C12S91St8wtcykuxS13y12qS3Ur3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1waS7NHXQH3SF3yB12n7sj7gt31H3pjrmv3HH3tTvhvnEn3Sl32nl9xn3nzrpz7rz73l1wP7iL7kd3yXmXHHsjNjn2ZmxK7K3Y1Ni02PTYjNjM2KzY7NjbsTmxubF5sXdi82MLYgtji2KLY0tiS2PvxpbF3oulxN6PLY99EEuNrYitjK2KrY6tiXlfYEfkC/nCPu6v80X89b6oL+aL+xLe+ZK+lL/Bl/Y3+jL+Jl/W3+zL+Vt8eV/BV/RNfTPf3LfwLX0r/5Bv7R/2bXxb384/4tv7R30H/5jv6B/3nfwTvrN/0nfxT/mu/mnfzT+z4Jcu+57+ed/L9/ZJvo/v61/w/Xx/P8AP9IP8i36wf8kP8S/7oX6YH+5f8SP8q36kf82P8qP9GP+6H+vH+fF+gp/oJ/lk/4af7N/0U/xbfqqf5qf7GX6mn+Vn+7f9HD/Xz/Pv+Pl+gV/oF/nFfolf6t/1y/x7PsW/75f7D3yqX+FX+lV+tV/j1/p1fr3f4Df6TX6z3+K3+m1+u//Q7/A7/S6/2+/xe/0+/5Hf7z/2B/wnPs1/6g/6v/hD/jN/2H/uj/gv/FH/pT/mv/LH/df+hP/Gn/Sn/Gn/rT/jv/Nn/Tl/3n/vL/gf/EX/o78k/7MmhBBCCPFP0b+zv8/feU39sqXrCwDZduY78tdzbs7987i/2t8pBgCP9+7W4NetQYOkpKRfjk3VEBReBACxy/k/ff/AL/EKaAePQkdoC6X/bn39VcWfrvv+u/njNwMkAmT5NSf99igR/nr+G//B/E3f5d+bfxFA0cKXc9JP9Gt8ef4y/2D+ve1/Z/4snyUDtPkvOVnhcnx5/lLwMDwBHX9zpBBCCCGEEEII8bP+6kL337u/Tb8/z28u52SGy/Hv3Z//jsp/xBqEEEIIIYQQQgjx33vq2R6PPdSxY9su/8mDzH+OMv4EAwSAP0EZMvjzD670XyYhhBBCCCHEH+3yRf+VrkQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMi4/v1vCFP/9MFXeo1CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHElfZ/AgAA///M7VMc") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) keyctl$clear(0x3, 0xfffffffffffffffd) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x200) 510.415892ms ago: executing program 3 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) chroot(&(0x7f0000000000)='./bus\x00') 355.054055ms ago: executing program 3 (id=583): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0x0, @private0, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) recvmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f00000000c0)}, 0x8}], 0x1, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) 0s ago: executing program 5 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) kernel console output (not intermixed with test programs): ce hsr_slave_1 entered promiscuous mode [ 72.534357][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.542835][ T4179] Cannot create hsr debugfs directory [ 72.553236][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.560487][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.586698][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.603203][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.610285][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.626140][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 72.636533][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.659996][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.667535][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.694006][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.705233][ T1110] Bluetooth: hci3: command 0x0409 tx timeout [ 72.712049][ T1110] Bluetooth: hci2: command 0x0409 tx timeout [ 72.724530][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 72.785902][ T1110] Bluetooth: hci4: command 0x0409 tx timeout [ 72.786358][ T4169] device hsr_slave_0 entered promiscuous mode [ 72.809906][ T4169] device hsr_slave_1 entered promiscuous mode [ 72.817072][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.824663][ T4169] Cannot create hsr debugfs directory [ 72.852432][ T4177] device hsr_slave_0 entered promiscuous mode [ 72.860013][ T4177] device hsr_slave_1 entered promiscuous mode [ 72.867439][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.875200][ T4177] Cannot create hsr debugfs directory [ 72.936527][ T4172] device hsr_slave_0 entered promiscuous mode [ 72.943975][ T4172] device hsr_slave_1 entered promiscuous mode [ 72.951657][ T4172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.959730][ T4172] Cannot create hsr debugfs directory [ 73.160675][ T4178] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.197294][ T4178] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.213019][ T4178] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.224540][ T4178] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.261365][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.278874][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.288423][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.303055][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.385042][ T4177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.394401][ T4177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.419276][ T4177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.429063][ T4177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.442025][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.487425][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.499161][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.514793][ T4169] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.526817][ T4169] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.538271][ T4169] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.562334][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.570511][ T4169] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.610058][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.620494][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.630395][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.637885][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.647043][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.683549][ T4172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.694477][ T4172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.708408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.717773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.727139][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.734347][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.758704][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.768671][ T4172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.779575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.788783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.797994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.810583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.819733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.833887][ T4172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.854483][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.861691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.871028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.881414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.889653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.918519][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.930061][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.955656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.966177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.975608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.984216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.993088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.002171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.011247][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.018392][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.028588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.037372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.047739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.056925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.067388][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.074484][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.111621][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.137762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.173767][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.182306][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.217868][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.244216][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.258542][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.268410][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.278402][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.287752][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.301452][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.318042][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.326735][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.335947][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.353219][ T4179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.364842][ T4179] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.390603][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.403536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.414128][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.423164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.431044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.438969][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.447913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.456953][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.464598][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.472988][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.482179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.490856][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.498517][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.507174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.517539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.526724][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.534457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.542589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.558987][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.578754][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.594214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.610479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.623923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.634183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.643654][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.650806][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.659478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.667858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.687626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.696737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.705596][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.707552][ T4208] Bluetooth: hci0: command 0x041b tx timeout [ 74.712679][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.728180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.738973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.771057][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.782767][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.785481][ T4208] Bluetooth: hci1: command 0x041b tx timeout [ 74.804707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.814322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.823674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.828264][ T4208] Bluetooth: hci2: command 0x041b tx timeout [ 74.837177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.849240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.858032][ T4208] Bluetooth: hci3: command 0x041b tx timeout [ 74.858903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.873360][ T4209] Bluetooth: hci4: command 0x041b tx timeout [ 74.874691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.889089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.899987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.910719][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.923809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.940427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.980604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.993131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.003278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.012496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.021484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.030235][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.037361][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.048207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.057041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.065744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.074171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.084034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.100857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.110356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.119332][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.126451][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.135536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.161954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.170855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.196250][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.214275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.222556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.230236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.239607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.249114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.267037][ T4178] device veth0_vlan entered promiscuous mode [ 75.290067][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.348881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.363281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.374257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.385510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.394304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.408046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.418237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.433201][ T4178] device veth1_vlan entered promiscuous mode [ 75.448245][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.456372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.472565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.483024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.516709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.552581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.561816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.571355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.580451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.598404][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.648282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.683012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.699500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.714277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.731125][ T4178] device veth0_macvtap entered promiscuous mode [ 75.748178][ T4177] device veth0_vlan entered promiscuous mode [ 75.765676][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.772973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.785328][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.793898][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.802599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.820540][ T4177] device veth1_vlan entered promiscuous mode [ 75.862446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.873179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.887094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.896140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.904486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.914562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.924755][ T4178] device veth1_macvtap entered promiscuous mode [ 75.964163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.972609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.982265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.995053][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.003998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.011899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.034673][ T4169] device veth0_vlan entered promiscuous mode [ 76.050926][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.065731][ T4177] device veth0_macvtap entered promiscuous mode [ 76.073339][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.082641][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.091681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.102419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.111653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.120760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.129987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.138157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.148107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.160915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.169621][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.181808][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.198003][ T4177] device veth1_macvtap entered promiscuous mode [ 76.206933][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.214870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.227755][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.244463][ T4179] device veth0_vlan entered promiscuous mode [ 76.251366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.260591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.272436][ T4169] device veth1_vlan entered promiscuous mode [ 76.285341][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.294258][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.303346][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.318762][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.346748][ T4179] device veth1_vlan entered promiscuous mode [ 76.366631][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.375771][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.384441][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.424856][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.436886][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.450243][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.459876][ T4172] device veth0_vlan entered promiscuous mode [ 76.468318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.476661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.485100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.493748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.502959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.511537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.528979][ T4169] device veth0_macvtap entered promiscuous mode [ 76.539292][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.553140][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.564841][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.579161][ T4172] device veth1_vlan entered promiscuous mode [ 76.594223][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.604689][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.613308][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.622840][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.632055][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.641216][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.651254][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.664075][ T4177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.673610][ T4177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.682690][ T4177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.691505][ T4177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.718092][ T4169] device veth1_macvtap entered promiscuous mode [ 76.776917][ T4179] device veth0_macvtap entered promiscuous mode [ 76.787988][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 76.788216][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.805705][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.809440][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.813738][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.828185][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.845637][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.853914][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.866042][ T4209] Bluetooth: hci3: command 0x040f tx timeout [ 76.868747][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.872238][ T4209] Bluetooth: hci2: command 0x040f tx timeout [ 76.881094][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.887248][ T4209] Bluetooth: hci1: command 0x040f tx timeout [ 76.898791][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.915634][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.932956][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.943502][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.945855][ T4213] Bluetooth: hci4: command 0x040f tx timeout [ 76.960919][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.974265][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.983680][ T4179] device veth1_macvtap entered promiscuous mode [ 77.015649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.023938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.034037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.044821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.053940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.072234][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.083149][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.093531][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.104086][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.116226][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.126889][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.138167][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.149058][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.158647][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.175562][ T4172] device veth0_macvtap entered promiscuous mode [ 77.182936][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.193886][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.204536][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.215673][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.228380][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.239493][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.249365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.261337][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.271260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.281058][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.290013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.301213][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.312430][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.323342][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.333857][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.343896][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.355594][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.368222][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.382006][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393902][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.403026][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.411852][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.426122][ T4172] device veth1_macvtap entered promiscuous mode [ 77.436471][ T4169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.445377][ T4169] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.454097][ T4169] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.463998][ T4169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.474677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.485241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.512825][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.527472][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.596060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.629775][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.647397][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.667397][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.692825][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.712298][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.730027][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.750774][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.777580][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.801550][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.843146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.910482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.956887][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.969054][ T4243] loop3: detected capacity change from 0 to 256 [ 77.991657][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.008511][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.041910][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.055676][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.074445][ T4243] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 78.086466][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.125818][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.139821][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.153718][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.248304][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.283149][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.316805][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.335426][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.344435][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.876439][ T4209] Bluetooth: hci0: command 0x0419 tx timeout [ 78.948072][ T4209] Bluetooth: hci1: command 0x0419 tx timeout [ 78.971592][ T4209] Bluetooth: hci2: command 0x0419 tx timeout [ 78.988345][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 79.032029][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.042918][ T4172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.061567][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.072003][ T1110] Bluetooth: hci4: command 0x0419 tx timeout [ 79.072256][ T4172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.087439][ T4172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.096512][ T4172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.116848][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.188811][ T4252] loop1: detected capacity change from 0 to 512 [ 79.235993][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.244011][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.266474][ T4252] ======================================================= [ 79.266474][ T4252] WARNING: The mand mount option has been deprecated and [ 79.266474][ T4252] and is ignored by this kernel. Remove the mand [ 79.266474][ T4252] option from the mount to silence this warning. [ 79.266474][ T4252] ======================================================= [ 79.494638][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.541396][ T4252] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.645614][ T4260] xt_nfacct: accounting object `syz1' does not exists [ 80.264219][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.299000][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.307315][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.307333][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.307379][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.336563][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.348957][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.371127][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.373871][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.413881][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.459101][ T4252] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 80.521062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.552024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.563526][ T4252] Quota error (device loop1): write_blk: dquota write failed [ 80.635006][ T4252] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 80.645538][ T4252] EXT4-fs error (device loop1): ext4_acquire_dquot:6204: comm syz.1.2: Failed to acquire dquot type 1 [ 81.410913][ T4252] EXT4-fs (loop1): 1 truncate cleaned up [ 81.505972][ T4252] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 81.827764][ T4275] loop3: detected capacity change from 0 to 2048 [ 83.716508][ T4275] EXT4-fs (loop3): inline encryption not supported [ 83.723130][ T4275] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 83.740297][ T4285] Zero length message leads to an empty skb [ 83.765512][ T4275] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 85.090762][ T4286] sched: RT throttling activated [ 87.595742][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 87.855860][ T4323] loop0: detected capacity change from 0 to 256 [ 87.986291][ T4323] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 88.005352][ T4212] usb 3-1: config 0 has no interfaces? [ 88.315296][ T4212] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 88.344822][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.408630][ T4212] usb 3-1: Product: syz [ 88.442772][ T4212] usb 3-1: Manufacturer: syz [ 88.451268][ T4212] usb 3-1: SerialNumber: syz [ 89.187906][ T4212] usb 3-1: config 0 descriptor?? [ 89.544909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.553929][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.562852][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.571829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.580720][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.589709][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.598605][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.607589][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.616473][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 89.625459][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 91.415034][ T4160] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.894966][ T4160] usb 5-1: Using ep0 maxpacket: 16 [ 92.755197][ T4160] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.800681][ T2273] usb 3-1: USB disconnect, device number 2 [ 92.831243][ T1108] cfg80211: failed to load regulatory.db [ 92.850445][ T4160] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.902981][ T4160] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.936451][ T4160] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 92.964963][ T4160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.003432][ T4160] usb 5-1: config 0 descriptor?? [ 93.355692][ T4363] loop0: detected capacity change from 0 to 256 [ 93.395083][ T4160] usbhid 5-1:0.0: can't add hid device: -71 [ 93.412174][ T4160] usbhid: probe of 5-1:0.0 failed with error -71 [ 93.452585][ T4363] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 93.470622][ T4160] usb 5-1: USB disconnect, device number 2 [ 94.257487][ T4160] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.695127][ T4160] usb 5-1: config 0 has no interfaces? [ 94.925698][ T4160] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 94.951482][ T4160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.990150][ T4160] usb 5-1: Product: syz [ 95.011051][ T4160] usb 5-1: Manufacturer: syz [ 95.025189][ T4160] usb 5-1: SerialNumber: syz [ 95.066024][ T4160] usb 5-1: config 0 descriptor?? [ 95.948974][ T4379] chnl_net:caif_netlink_parms(): no params data found [ 96.428602][ T4263] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.454195][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.467630][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.620431][ T4379] device bridge_slave_0 entered promiscuous mode [ 96.643312][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.658482][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.443592][ T2273] Bluetooth: hci5: command 0x0409 tx timeout [ 97.636142][ T4379] device bridge_slave_1 entered promiscuous mode [ 100.151034][ T4212] Bluetooth: hci5: command 0x041b tx timeout [ 100.263710][ T4263] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.384187][ T4263] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.514835][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.592430][ T4263] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.828785][ T4212] usb 5-1: USB disconnect, device number 3 [ 100.853052][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.875091][ T2273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.895205][ T4215] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.207242][ T4215] usb 3-1: Using ep0 maxpacket: 16 [ 102.430285][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 102.640452][ T4379] team0: Port device team_slave_0 added [ 102.675136][ T4215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.695432][ T2273] usb 4-1: config 0 has no interfaces? [ 102.804072][ T4379] team0: Port device team_slave_1 added [ 102.804943][ T4215] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.848490][ T4426] loop4: detected capacity change from 0 to 256 [ 102.888663][ T4215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.901428][ T4215] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 102.935251][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.935403][ T2273] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 102.954775][ T4215] usb 3-1: config 0 descriptor?? [ 102.973621][ T4426] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 103.015737][ T2273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.155357][ T2273] usb 4-1: Product: syz [ 103.169433][ T2273] usb 4-1: Manufacturer: syz [ 103.174047][ T2273] usb 4-1: SerialNumber: syz [ 103.191222][ T2273] usb 4-1: config 0 descriptor?? [ 103.234364][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.241970][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.357947][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.361289][ T2273] usb 4-1: USB disconnect, device number 2 [ 103.591994][ T4416] xt_SECMARK: invalid mode: 2 [ 103.601997][ T4416] udc-core: couldn't find an available UDC or it's busy [ 103.882086][ T4416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 104.180309][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.222035][ T4215] hid (null): invalid report_size 269229724 [ 104.355103][ T4215] hid (null): unknown global tag 0xc [ 104.360512][ T4215] hid (null): invalid report_count 21039 [ 104.372254][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.607714][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.205896][ T4215] hid (null): invalid report_count 37355 [ 105.212093][ T4215] hid (null): unknown global tag 0x17 [ 105.238733][ T4246] Bluetooth: hci5: command 0x0419 tx timeout [ 105.246415][ T4215] usb 3-1: USB disconnect, device number 3 [ 106.178306][ T4379] device hsr_slave_0 entered promiscuous mode [ 106.345412][ T4379] device hsr_slave_1 entered promiscuous mode [ 106.361191][ T4379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.462063][ T4379] Cannot create hsr debugfs directory [ 107.841272][ T4379] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.861947][ T4379] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.012637][ T4379] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.270096][ T4379] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.542183][ T4493] xt_nfacct: accounting object `syz1' does not exists [ 111.328912][ T4499] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.460399][ T4509] loop0: detected capacity change from 0 to 512 [ 112.559617][ T4509] EXT4-fs (loop0): Test dummy encryption mode enabled [ 112.575530][ T4509] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.608516][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.633363][ T4509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.687120][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.698222][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.722532][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.762582][ T4509] EXT4-fs (loop0): 1 truncate cleaned up [ 112.832302][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.845127][ T4509] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 112.877089][ T4515] loop3: detected capacity change from 0 to 2048 [ 112.885735][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.925652][ T4515] EXT4-fs (loop3): inline encryption not supported [ 112.935061][ T4515] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 112.963479][ T4229] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.970625][ T4229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.999140][ T4515] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 113.015636][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.159691][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.325944][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.955695][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.962795][ T4508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.249528][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.628725][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.794111][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.804247][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.824135][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.028569][ T4545] loop2: detected capacity change from 0 to 128 [ 115.230632][ T4263] device hsr_slave_0 left promiscuous mode [ 115.538598][ T4545] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.550177][ T4545] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.663765][ T4545] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 115.683215][ T4263] device hsr_slave_1 left promiscuous mode [ 115.698434][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.715066][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.738224][ T4263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.746032][ T4263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.753988][ T4263] device bridge_slave_1 left promiscuous mode [ 115.763012][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.815623][ T4263] device bridge_slave_0 left promiscuous mode [ 115.868368][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.997375][ T4263] device veth1_macvtap left promiscuous mode [ 116.015623][ T4263] device veth0_macvtap left promiscuous mode [ 116.022380][ T4263] device veth1_vlan left promiscuous mode [ 116.070001][ T4263] device veth0_vlan left promiscuous mode [ 116.719965][ T4554] loop0: detected capacity change from 0 to 256 [ 116.782005][ T4554] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 117.310962][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 117.339954][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 117.397608][ T4263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.429576][ T4263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.212178][ T4263] bond0 (unregistering): Released all slaves [ 118.363321][ T4379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.381114][ T4379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.402744][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.411907][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.420429][ T4543] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.478308][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 118.498702][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 118.574250][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 118.634022][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 118.697333][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.711468][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.723703][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 118.975338][ T4574] xt_nfacct: accounting object `syz1' does not exists [ 119.035517][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.250256][ T4581] loop0: detected capacity change from 0 to 2048 [ 119.333288][ T4589] loop4: detected capacity change from 0 to 256 [ 119.344824][ T4581] EXT4-fs (loop0): inline encryption not supported [ 119.363873][ T4581] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 119.395323][ T4581] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 119.714925][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.421715][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.461034][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.593606][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.603119][ T4212] usb 4-1: config 0 has no interfaces? [ 121.625803][ T4212] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 121.666334][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.674368][ T4212] usb 4-1: Product: syz [ 121.835119][ T4208] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.855122][ T4212] usb 4-1: Manufacturer: syz [ 121.859867][ T4212] usb 4-1: SerialNumber: syz [ 121.951391][ T4212] usb 4-1: config 0 descriptor?? [ 122.108772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 122.136076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 122.195078][ T4208] usb 1-1: config 0 has no interfaces? [ 122.221699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 122.289727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 122.331101][ T4379] device veth0_vlan entered promiscuous mode [ 122.344234][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 122.355170][ T4208] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.382424][ T4208] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.392927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 122.411173][ T4208] usb 1-1: Product: syz [ 122.425364][ T4379] device veth1_vlan entered promiscuous mode [ 122.447669][ T4208] usb 1-1: Manufacturer: syz [ 122.472776][ T4208] usb 1-1: SerialNumber: syz [ 122.503735][ T4208] usb 1-1: config 0 descriptor?? [ 122.529578][ T4379] device veth0_macvtap entered promiscuous mode [ 122.571018][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 122.597205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.620211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.662768][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.718891][ T4379] device veth1_macvtap entered promiscuous mode [ 122.765148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.783603][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.864109][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.970784][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.019841][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.072743][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.138676][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.213373][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.258392][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.298832][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.347126][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.425860][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.455772][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.496852][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.538290][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.591208][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.651707][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.718530][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.791597][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.815709][ T4379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.889281][ T4379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.960200][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.035690][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.055396][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 124.116118][ T4379] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.152050][ T4379] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.185114][ T4212] usb 4-1: can't set config #0, error -71 [ 124.200951][ T4212] usb 4-1: USB disconnect, device number 3 [ 124.235822][ T4379] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.276611][ T4643] loop2: detected capacity change from 0 to 256 [ 124.279461][ T4379] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.338903][ T4643] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 124.363737][ T4645] loop3: detected capacity change from 0 to 512 [ 124.531115][ T4209] usb 1-1: USB disconnect, device number 2 [ 124.561589][ T4645] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.575499][ T4399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.683728][ T4399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.691567][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.725283][ T4645] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.745504][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.777606][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.796687][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.182966][ T4209] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.085056][ T4209] usb 4-1: Using ep0 maxpacket: 16 [ 126.215084][ T4209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.354830][ T4209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.175162][ T4209] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.205093][ T4209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.276056][ T4209] usb 4-1: config 0 descriptor?? [ 127.495190][ T4209] usb 4-1: can't set config #0, error -71 [ 127.603126][ T4669] xt_nfacct: accounting object `syz1' does not exists [ 128.307329][ T4209] usb 4-1: USB disconnect, device number 4 [ 128.547859][ T4675] loop0: detected capacity change from 0 to 2048 [ 128.608798][ T4675] EXT4-fs (loop0): inline encryption not supported [ 128.651867][ T4675] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 128.695004][ T4675] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 128.879975][ T4685] syz.4.85 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.574983][ T4160] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.095147][ T4160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.154425][ T4160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.173039][ T4160] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.356284][ T4160] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.365404][ T4160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.383268][ T4160] usb 6-1: config 0 descriptor?? [ 131.895715][ T4160] usb 6-1: can't set config #0, error -71 [ 131.902781][ T4160] usb 6-1: USB disconnect, device number 2 [ 134.226217][ T4735] xt_nfacct: accounting object `syz1' does not exists [ 136.462216][ T4761] loop5: detected capacity change from 0 to 2048 [ 137.142027][ T4761] EXT4-fs (loop5): inline encryption not supported [ 137.159374][ T4761] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 137.343525][ T4761] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value [ 138.316078][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.324291][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.339927][ T4778] loop3: detected capacity change from 0 to 256 [ 139.389604][ T4789] loop4: detected capacity change from 0 to 512 [ 139.413994][ T4792] loop5: detected capacity change from 0 to 256 [ 139.500545][ T4789] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.555502][ T4792] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 139.645561][ T4789] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 139.772265][ T4789] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 139.781459][ T4789] System zones: 0-2, 18-18, 34-34 [ 139.829040][ T4789] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 139.921583][ T4789] EXT4-fs (loop4): 1 truncate cleaned up [ 140.085530][ T4789] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000003,usrquota,. Quota mode: writeback. [ 140.197642][ T4802] xt_nfacct: accounting object `syz1' does not exists [ 140.960482][ T26] audit: type=1800 audit(1749393060.769:2): pid=4806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.106" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 140.988424][ T4789] EXT4-fs error (device loop4): ext4_generic_delete_entry:2729: inode #2: block 3: comm syz.4.106: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 141.113451][ T4789] EXT4-fs (loop4): Remounting filesystem read-only [ 141.369282][ T4789] EXT4-fs error (device loop4) in ext4_delete_entry:2800: Corrupt filesystem [ 141.390184][ T4789] EXT4-fs (loop4): Remounting filesystem read-only [ 141.404700][ T4789] EXT4-fs warning (device loop4): ext4_rename_delete:3792: inode #2: comm syz.4.106: Deleting old file: nlink 4, error=-117 [ 141.732505][ T4212] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.077507][ T4820] device pim6reg1 entered promiscuous mode [ 143.443016][ T4212] usb 4-1: config 0 has no interfaces? [ 144.234604][ T4845] process 'syz.0.118' launched '/dev/fd/3' with NULL argv: empty string added [ 144.389989][ T4847] loop4: detected capacity change from 0 to 2048 [ 145.181261][ T4847] EXT4-fs (loop4): inline encryption not supported [ 145.214994][ T4847] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 145.245837][ T4847] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value [ 145.595412][ T4865] xt_nfacct: accounting object `syz1' does not exists [ 147.335901][ T4877] loop4: detected capacity change from 0 to 256 [ 147.469869][ T4877] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 147.985066][ T4212] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 148.005328][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.134166][ T4212] usb 4-1: config 0 descriptor?? [ 148.186351][ T4212] usb 4-1: can't set config #0, error -71 [ 148.251389][ T4212] usb 4-1: USB disconnect, device number 5 [ 150.822089][ T4914] loop2: detected capacity change from 0 to 2048 [ 152.212855][ T4163] loop2: p1 < > p3 [ 152.231761][ T4163] loop2: p3 size 134217728 extends beyond EOD, truncated [ 152.283038][ T4914] loop2: p1 < > p3 [ 152.289165][ T4914] loop2: p3 size 134217728 extends beyond EOD, truncated [ 152.330438][ T3547] loop2: p1 < > p3 [ 152.417035][ T3547] loop2: p3 size 134217728 extends beyond EOD, truncated [ 152.762892][ T4923] xt_nfacct: accounting object `syz1' does not exists [ 153.569279][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 153.583122][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 153.851104][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 153.907770][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.129800][ T4163] udevd[4163]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 154.718327][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 156.119677][ T4951] loop3: detected capacity change from 0 to 2048 [ 156.789149][ T4951] EXT4-fs (loop3): inline encryption not supported [ 156.914400][ T4951] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 156.969307][ T4951] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 157.261504][ T4974] syz.5.144[4974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.261715][ T4974] syz.5.144[4974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.828194][ T5000] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 164.121707][ T5030] loop2: detected capacity change from 0 to 256 [ 164.700653][ T5040] fuse: Bad value for 'fd' [ 165.182610][ T5030] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 165.619168][ T5050] loop3: detected capacity change from 0 to 2048 [ 165.644625][ T5050] EXT4-fs (loop3): inline encryption not supported [ 165.946195][ T5050] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 166.465408][ T5050] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 168.136853][ T5072] xt_nfacct: accounting object `syz1' does not exists [ 170.876662][ T5097] loop0: detected capacity change from 0 to 512 [ 171.609323][ T4160] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.804407][ T5097] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 171.841430][ T5102] loop4: detected capacity change from 0 to 2048 [ 171.849680][ T5097] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.914325][ T5102] EXT4-fs (loop4): inline encryption not supported [ 171.921269][ T5102] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 171.929098][ T5102] EXT4-fs (loop4): Unrecognized mount option "audit" or missing value [ 172.195415][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.506583][ T21] usb 6-1: Using ep0 maxpacket: 16 [ 172.935043][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.967226][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.989848][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.015652][ T21] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.203222][ T21] usb 6-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 173.314229][ T5122] xt_nfacct: accounting object `syz1' does not exists [ 173.639528][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.068919][ T21] usb 6-1: config 0 descriptor?? [ 174.719044][ T5128] loop0: detected capacity change from 0 to 256 [ 175.236265][ T5128] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 175.345456][ T21] usbhid 6-1:0.0: can't add hid device: -71 [ 175.351479][ T21] usbhid: probe of 6-1:0.0 failed with error -71 [ 175.511755][ T21] usb 6-1: USB disconnect, device number 3 [ 177.666190][ T4160] usb 4-1: unable to read config index 0 descriptor/start: -110 [ 177.686418][ T4160] usb 4-1: can't read configurations, error -110 [ 177.815771][ T5156] loop2: detected capacity change from 0 to 2048 [ 177.854957][ T4160] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.024931][ T4160] usb 4-1: device descriptor read/64, error -32 [ 178.032489][ T5161] tipc: Failed to remove unknown binding: 66,1,1/0:1212791163/1212791165 [ 178.052536][ T5161] tipc: Failed to remove unknown binding: 66,1,1/0:1212791163/1212791165 [ 178.167577][ T4160] usb usb4-port1: attempt power cycle [ 178.203029][ T5156] EXT4-fs (loop2): inline encryption not supported [ 178.213298][ T5156] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 178.225174][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.252063][ T5156] EXT4-fs (loop2): Unrecognized mount option "audit" or missing value [ 178.569057][ T5171] xt_nfacct: accounting object `syz1' does not exists [ 178.655130][ T21] usb 6-1: device descriptor read/64, error -71 [ 178.965114][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 180.542187][ T5179] loop4: detected capacity change from 0 to 512 [ 180.850647][ T5179] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 180.908790][ T5179] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 180.965097][ T5179] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.171190][ T5179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 56 vs 41 free clusters [ 181.196713][ T5179] EXT4-fs (loop4): Remounting filesystem read-only [ 181.203735][ T5179] Quota error (device loop4): write_blk: dquota write failed [ 181.243995][ T5179] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 182.022401][ T5179] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.190: Failed to acquire dquot type 0 [ 182.109188][ T5179] EXT4-fs (loop4): Remounting filesystem read-only [ 183.035400][ T5179] Quota error (device loop4): write_blk: dquota write failed [ 183.085156][ T5179] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 183.211484][ T5179] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.190: Failed to acquire dquot type 0 [ 183.287087][ T5179] EXT4-fs (loop4): Remounting filesystem read-only [ 183.372035][ T5179] Quota error (device loop4): write_blk: dquota write failed [ 183.574677][ T5179] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 183.605360][ T5179] EXT4-fs error (device loop4): ext4_acquire_dquot:6204: comm syz.4.190: Failed to acquire dquot type 0 [ 183.639078][ T5179] EXT4-fs (loop4): Remounting filesystem read-only [ 184.495981][ T5179] EXT4-fs (loop4): 1 orphan inode deleted [ 184.501778][ T5179] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,noblock_validity,mblk_io_submit,barrier=0x0000000000000003,errors=remount-ro,acl,noauto_da_alloc,max_batch_time=0x0000000000000006,grpjquota=2defcontext=sysadm_u,. Quota mode: writeback. [ 185.498452][ T5228] xt_nfacct: accounting object `syz1' does not exists [ 186.230861][ T5230] loop2: detected capacity change from 0 to 2048 [ 187.007431][ T5230] EXT4-fs (loop2): inline encryption not supported [ 187.015034][ T5230] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 187.101591][ T5230] EXT4-fs (loop2): Unrecognized mount option "audit" or missing value [ 191.689055][ T5280] loop4: detected capacity change from 0 to 256 [ 191.877372][ T5269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 191.996248][ T5280] FAT-fs (loop4): Unrecognized mount option "18446744073709551615" or missing value [ 193.237761][ T5293] xt_nfacct: accounting object `syz1' does not exists [ 196.763419][ T4244] Bluetooth: hci0: command 0x0406 tx timeout [ 196.774171][ T4244] Bluetooth: hci1: command 0x0406 tx timeout [ 196.784939][ T4244] Bluetooth: hci2: command 0x0406 tx timeout [ 196.791082][ T4244] Bluetooth: hci4: command 0x0406 tx timeout [ 197.537181][ T5333] netlink: 24 bytes leftover after parsing attributes in process `syz.5.222'. [ 199.515269][ T5347] xt_nfacct: accounting object `syz1' does not exists [ 200.615918][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.622303][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.196873][ T5351] loop0: detected capacity change from 0 to 128 [ 201.434440][ T5351] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nouid32,,errors=continue. Quota mode: none. [ 201.455381][ T5351] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 203.471998][ T5386] device pim6reg1 entered promiscuous mode [ 203.771274][ T5398] xt_nfacct: accounting object `syz1' does not exists [ 204.721508][ T5403] loop2: detected capacity change from 0 to 256 [ 204.795004][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 204.813994][ T5403] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 204.826320][ T4244] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 205.167302][ T21] usb 1-1: config 0 has no interfaces? [ 205.195257][ T4244] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 205.223852][ T4244] usb 4-1: config 0 has no interface number 0 [ 205.271103][ T4244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.302527][ T4244] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.328655][ T4244] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 205.342826][ T21] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 205.375010][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.434929][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.455245][ T4244] usb 4-1: config 0 descriptor?? [ 205.473700][ T21] usb 1-1: Product: syz [ 205.481110][ T21] usb 1-1: Manufacturer: syz [ 205.503595][ T21] usb 1-1: SerialNumber: syz [ 205.530159][ T21] usb 1-1: config 0 descriptor?? [ 206.053910][ T5424] loop5: detected capacity change from 0 to 2048 [ 206.075197][ T4244] usbhid 4-1:0.1: can't add hid device: -71 [ 206.119709][ T4244] usbhid: probe of 4-1:0.1 failed with error -71 [ 206.143638][ T5424] EXT4-fs (loop5): inline encryption not supported [ 206.176976][ T4244] usb 4-1: USB disconnect, device number 9 [ 206.186612][ T5424] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 206.247407][ T5424] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value [ 207.300196][ T5443] loop3: detected capacity change from 0 to 128 [ 207.387626][ T5443] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.425201][ T4160] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 207.425249][ T5443] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 207.844995][ T4160] usb 6-1: Using ep0 maxpacket: 16 [ 207.965395][ T4160] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 207.987760][ T4160] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 208.584905][ T4160] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 208.631712][ T4160] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 208.692156][ T5461] tipc: Failed to remove unknown binding: 66,1,1/0:3509664317/3509664319 [ 208.709510][ T5461] tipc: Failed to remove unknown binding: 66,1,1/0:3509664317/3509664319 [ 208.724933][ T4160] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 208.754963][ T4160] usb 6-1: config 1 interface 0 has no altsetting 0 [ 208.804907][ T4160] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 208.868622][ T4160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.869196][ T5465] loop4: detected capacity change from 0 to 512 [ 208.957535][ T5465] EXT4-fs (loop4): Ignoring removed bh option [ 208.963978][ T5465] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 208.967554][ T4160] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 209.054382][ T5465] EXT4-fs (loop4): 1 truncate cleaned up [ 209.075084][ T5465] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 209.180814][ T4160] scsi host1: usb-storage 6-1:1.0 [ 209.940158][ T21] usb 1-1: USB disconnect, device number 3 [ 209.946600][ T4244] usb 6-1: USB disconnect, device number 6 [ 210.381286][ T5495] loop0: detected capacity change from 0 to 2048 [ 210.606556][ T5495] EXT4-fs (loop0): inline encryption not supported [ 210.633750][ T5495] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 212.138095][ T5503] loop2: detected capacity change from 0 to 256 [ 212.143553][ T5495] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 212.220013][ T5503] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 212.312185][ T5506] loop4: detected capacity change from 0 to 256 [ 212.479218][ T5506] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 212.665353][ T21] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 213.265535][ T5518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'. [ 213.276169][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.299111][ T5518] loop2: detected capacity change from 0 to 16 [ 213.316186][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.341518][ T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.385966][ T5518] erofs: (device loop2): mounted with root inode @ nid 36. [ 213.409178][ T5520] loop0: detected capacity change from 0 to 512 [ 213.435346][ T21] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.474003][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.496603][ T5520] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.527622][ T21] usb 4-1: config 0 descriptor?? [ 213.550182][ T5520] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.259: bg 0: block 248: padding at end of block bitmap is not set [ 213.575060][ T5520] Quota error (device loop0): write_blk: dquota write failed [ 213.582539][ T5520] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 213.614990][ T5520] EXT4-fs error (device loop0): ext4_acquire_dquot:6204: comm syz.0.259: Failed to acquire dquot type 1 [ 213.615142][ T21] usb 4-1: can't set config #0, error -71 [ 213.643757][ T5520] EXT4-fs (loop0): 1 truncate cleaned up [ 213.683059][ T5520] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 213.725668][ T21] usb 4-1: USB disconnect, device number 10 [ 213.834699][ T5520] user requested TSC rate below hardware speed [ 213.857653][ T5520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=926752543 (1853505086 ns) > initial count (336460 ns). Using initial count to start timer. [ 214.464971][ T4244] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 214.724972][ T4244] usb 4-1: Using ep0 maxpacket: 32 [ 215.014254][ T26] audit: type=1326 audit(1749393134.819:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.017681][ T4244] usb 4-1: config 0 has an invalid interface number: 245 but max is 0 [ 215.048296][ T4244] usb 4-1: config 0 has no interface number 0 [ 215.054576][ T4244] usb 4-1: config 0 interface 245 has no altsetting 0 [ 215.161351][ T26] audit: type=1326 audit(1749393134.819:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.251942][ T26] audit: type=1326 audit(1749393134.819:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.283409][ T26] audit: type=1326 audit(1749393134.819:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.306691][ T26] audit: type=1326 audit(1749393134.819:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.338760][ T26] audit: type=1326 audit(1749393134.819:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 215.445959][ T4244] usb 4-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 1.00 [ 215.523935][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.620907][ T4244] usb 4-1: Product: syz [ 216.134284][ T26] audit: type=1326 audit(1749393134.819:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 216.157129][ T4244] usb 4-1: Manufacturer: syz [ 216.161758][ T4244] usb 4-1: SerialNumber: syz [ 216.169473][ T4244] usb 4-1: config 0 descriptor?? [ 216.338583][ T26] audit: type=1326 audit(1749393134.819:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5531 comm="syz.0.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52c42f1929 code=0x7fc00000 [ 216.733522][ T4244] usb 4-1: Found UVC 0.00 device syz (19ab:1000) [ 216.838226][ T4244] usb 4-1: No valid video chain found. [ 217.154874][ T4244] usb 4-1: USB disconnect, device number 11 [ 217.386824][ T5552] loop0: detected capacity change from 0 to 2048 [ 217.504265][ T5552] EXT4-fs (loop0): inline encryption not supported [ 217.513520][ T5552] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 217.594631][ T5552] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 218.823090][ T5546] loop5: detected capacity change from 0 to 40427 [ 219.630264][ T5546] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 219.675074][ T5546] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 219.783362][ T5546] F2FS-fs (loop5): Failed to start F2FS issue_checkpoint_thread (-12) [ 220.344576][ T5583] loop4: detected capacity change from 0 to 256 [ 222.483894][ T4213] Bluetooth: hci5: command 0x0406 tx timeout [ 223.486468][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 223.486483][ T26] audit: type=1326 audit(1749393143.299:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 223.612027][ T26] audit: type=1326 audit(1749393143.339:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 223.731124][ T26] audit: type=1326 audit(1749393143.339:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 223.842398][ T26] audit: type=1326 audit(1749393143.339:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 223.952596][ T26] audit: type=1326 audit(1749393143.339:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 224.053046][ T26] audit: type=1326 audit(1749393143.339:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 224.135741][ T26] audit: type=1326 audit(1749393143.349:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c3cb323df code=0x7ffc0000 [ 224.255554][ T26] audit: type=1326 audit(1749393143.349:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 224.325004][ T26] audit: type=1326 audit(1749393143.369:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5591 comm="syz.4.279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 228.696134][ T5628] tipc: Failed to remove unknown binding: 66,1,1/0:1756045701/1756045703 [ 228.885065][ T5628] tipc: Failed to remove unknown binding: 66,1,1/0:1756045701/1756045703 [ 229.852013][ T5636] loop0: detected capacity change from 0 to 256 [ 229.956005][ T5636] exfat: Deprecated parameter 'namecase' [ 229.993842][ T5636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 232.268715][ T5639] chnl_net:caif_netlink_parms(): no params data found [ 233.288913][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 233.484121][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.545077][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.553482][ T5639] device bridge_slave_0 entered promiscuous mode [ 233.611527][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.635649][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.661205][ T5639] device bridge_slave_1 entered promiscuous mode [ 233.860669][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.889472][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.002423][ T5639] team0: Port device team_slave_0 added [ 234.055503][ T5639] team0: Port device team_slave_1 added [ 234.196931][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.203924][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.422614][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.345117][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.352112][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.430169][ T4213] Bluetooth: hci3: command 0x041b tx timeout [ 235.471969][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.870797][ T5693] loop0: detected capacity change from 0 to 256 [ 235.909802][ T5639] device hsr_slave_0 entered promiscuous mode [ 236.157358][ T5639] device hsr_slave_1 entered promiscuous mode [ 236.188274][ T5692] loop3: detected capacity change from 0 to 2048 [ 236.206991][ T5639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.214595][ T5639] Cannot create hsr debugfs directory [ 236.228608][ T5693] exfat: Deprecated parameter 'namecase' [ 236.301992][ T5693] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 236.328446][ T5487] loop3: p1 < > p3 [ 236.335914][ T5487] loop3: p3 size 134217728 extends beyond EOD, truncated [ 237.140808][ T5639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.186789][ T5639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.255177][ T5639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.298580][ T5639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.559384][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 237.567666][ T5692] loop3: p1 < > p3 [ 237.593063][ T5692] loop3: p3 size 134217728 extends beyond EOD, truncated [ 237.689598][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.714295][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.735954][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.823786][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.404688][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.538961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.865949][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.873088][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.915278][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.931287][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.949387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.968227][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.975363][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.003386][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.044434][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 239.055935][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.070689][ T5487] udevd[5487]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 239.082014][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.152874][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.190275][ T5487] udevd[5487]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 239.217285][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 239.231222][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.253455][ T5721] mmap: syz.0.318 (5721) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 239.276196][ T5724] syz.4.312[5724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.276288][ T5724] syz.4.312[5724] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.306898][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.327592][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.336788][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.347336][ T5487] udevd[5487]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 239.361669][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.402748][ T5639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.410445][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 239.446934][ T5639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.476324][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.493197][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.584144][ T5730] loop3: detected capacity change from 0 to 2048 [ 239.585035][ T4209] Bluetooth: hci3: command 0x0419 tx timeout [ 239.740475][ T5730] EXT4-fs (loop3): inline encryption not supported [ 239.755240][ T5730] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 239.764413][ T5730] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 239.774279][ T5730] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 239.835156][ T4213] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 240.195647][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 240.229386][ T5736] device bridge0 entered promiscuous mode [ 240.240573][ T5736] bridge0: port 3(macsec1) entered blocking state [ 240.247287][ T5736] bridge0: port 3(macsec1) entered disabled state [ 240.907016][ T5736] device bridge0 left promiscuous mode [ 240.968008][ T5739] loop4: detected capacity change from 0 to 1024 [ 241.055027][ T4213] usb 1-1: config 0 has no interfaces? [ 241.183938][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.240337][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.253669][ T5739] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.258623][ T5743] loop3: detected capacity change from 0 to 2048 [ 241.275218][ T4213] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 241.284295][ T4213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.327854][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.337100][ T5470] loop3: p1 < > p3 [ 241.343878][ T5470] loop3: p3 size 134217728 extends beyond EOD, truncated [ 241.384909][ T4213] usb 1-1: Product: syz [ 241.394473][ T4213] usb 1-1: Manufacturer: syz [ 241.445047][ T4213] usb 1-1: SerialNumber: syz [ 241.918341][ T4213] usb 1-1: config 0 descriptor?? [ 241.948753][ T5743] loop3: p1 < > p3 [ 241.978334][ T5743] loop3: p3 size 134217728 extends beyond EOD, truncated [ 242.512047][ T5487] udevd[5487]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 242.517569][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 242.656165][ T5487] udevd[5487]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 242.700494][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 242.962008][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.000274][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.144341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 243.167895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 243.209638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 243.239259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 243.296234][ T5639] device veth0_vlan entered promiscuous mode [ 243.332724][ T5766] loop3: detected capacity change from 0 to 16 [ 243.361335][ T5639] device veth1_vlan entered promiscuous mode [ 243.403286][ T5766] erofs: (device loop3): mounted with root inode @ nid 36. [ 243.553964][ T5770] loop5: detected capacity change from 0 to 512 [ 243.626517][ T5639] device veth0_macvtap entered promiscuous mode [ 243.660784][ T5770] EXT4-fs (loop5): orphan cleanup on readonly fs [ 243.694053][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 243.704464][ T5770] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.329: bg 0: block 248: padding at end of block bitmap is not set [ 243.739470][ T5770] Quota error (device loop5): write_blk: dquota write failed [ 243.753278][ T5770] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 243.754338][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 243.763918][ T5770] EXT4-fs error (device loop5): ext4_acquire_dquot:6204: comm syz.5.329: Failed to acquire dquot type 1 [ 243.796816][ T5770] EXT4-fs (loop5): 1 truncate cleaned up [ 243.825455][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 243.845352][ T5770] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 243.860590][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 243.909417][ T5639] device veth1_macvtap entered promiscuous mode [ 243.935917][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.965765][ T142] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.029160][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.069330][ T5770] user requested TSC rate below hardware speed [ 244.097217][ T5770] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=926752543 (1853505086 ns) > initial count (336460 ns). Using initial count to start timer. [ 244.114274][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.153930][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.203820][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.244895][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.289153][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.315997][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.353186][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.373501][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.403950][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.437775][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.465898][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.525440][ T4244] usb 1-1: USB disconnect, device number 4 [ 244.545984][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.574500][ T5782] loop5: detected capacity change from 0 to 2048 [ 244.585047][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.599248][ T5784] loop0: detected capacity change from 0 to 1024 [ 244.607860][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.620990][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.631766][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.662260][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.683170][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.694801][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.705769][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.715759][ T5784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.717333][ T5639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.727485][ T4208] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 244.752052][ T5639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.771258][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.789734][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.798270][ T5782] EXT4-fs (loop5): inline encryption not supported [ 245.049411][ T5782] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 245.094527][ T5782] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 245.161383][ T5782] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value [ 245.180085][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 245.296325][ T5639] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.336104][ T5639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.365346][ T4208] usb 4-1: too many configurations: 23, using maximum allowed: 8 [ 245.433229][ T5639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.452482][ T5639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.475207][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.491745][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 245.556385][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.841905][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.332'. [ 245.876401][ T5792] device bridge0 entered promiscuous mode [ 245.888340][ T5792] bridge0: port 3(macsec1) entered blocking state [ 245.895015][ T5792] bridge0: port 3(macsec1) entered disabled state [ 246.390061][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.441436][ T5792] device bridge0 left promiscuous mode [ 246.446173][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.571445][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.589578][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.709659][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.735570][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.752426][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.863579][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.925349][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.944227][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.969275][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 246.988699][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.012793][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.034473][ T5748] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.038530][ T4399] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.051922][ T5748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.065359][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.073602][ T5748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.084648][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.185539][ T4208] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.216821][ T4208] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 247.509351][ T4208] usb 4-1: unable to read config index 7 descriptor/all [ 247.523661][ T4208] usb 4-1: can't read configurations, error -71 [ 249.193580][ T5843] loop0: detected capacity change from 0 to 2048 [ 249.794322][ T5843] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 250.277106][ T5845] binder: 5841:5845 ioctl c0306201 0 returned -14 [ 252.829987][ T5865] loop0: detected capacity change from 0 to 2048 [ 253.509006][ T5865] EXT4-fs (loop0): inline encryption not supported [ 253.535088][ T5865] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 253.542299][ T5865] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 254.431409][ T154] device hsr_slave_0 left promiscuous mode [ 254.475343][ T154] device hsr_slave_1 left promiscuous mode [ 254.529318][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.555183][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.685239][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.693549][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.760179][ T154] device bridge_slave_1 left promiscuous mode [ 254.772968][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.819595][ T154] device bridge_slave_0 left promiscuous mode [ 254.828114][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.004076][ T154] device veth1_macvtap left promiscuous mode [ 255.015630][ T154] device veth0_macvtap left promiscuous mode [ 255.022276][ T154] device veth1_vlan left promiscuous mode [ 255.034939][ T154] device veth0_vlan left promiscuous mode [ 255.954534][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.356'. [ 256.046188][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.356'. [ 256.311733][ T5910] loop0: detected capacity change from 0 to 512 [ 258.903177][ T154] team0 (unregistering): Port device team_slave_1 removed [ 259.033179][ T154] team0 (unregistering): Port device team_slave_0 removed [ 259.063007][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.103511][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.171383][ T5935] loop6: detected capacity change from 0 to 256 [ 260.257615][ T5935] exfat: Deprecated parameter 'utf8' [ 260.263000][ T5935] exfat: Deprecated parameter 'utf8' [ 260.363400][ T5935] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 260.657081][ T154] bond0 (unregistering): Released all slaves [ 260.921122][ T5941] No such timeout policy "syz1" [ 261.136838][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.143183][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.150745][ T5941] tipc: Started in network mode [ 262.156360][ T5941] tipc: Node identity ac14140f, cluster identity 4711 [ 262.163818][ T5941] tipc: New replicast peer: 255.255.255.255 [ 262.170803][ T5941] tipc: Enabled bearer , priority 10 [ 263.286408][ T21] tipc: Node number set to 2886997007 [ 263.503949][ T5959] loop4: detected capacity change from 0 to 16 [ 263.605117][ T5959] erofs: (device loop4): mounted with root inode @ nid 36. [ 263.887525][ T5967] loop4: detected capacity change from 0 to 2048 [ 264.610205][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 266.360927][ T5990] loop5: detected capacity change from 0 to 512 [ 267.005119][ T4244] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 267.285163][ T4244] usb 5-1: Using ep0 maxpacket: 16 [ 267.405161][ T4244] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 267.557314][ T4244] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 267.764901][ T4244] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 267.811841][ T4244] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 267.881180][ T5990] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 267.948968][ T4244] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 268.075835][ T4244] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 268.195045][ T4244] usb 5-1: string descriptor 0 read error: -71 [ 268.221815][ T4244] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.281410][ T4244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.385428][ T4244] usb 5-1: can't set config #1, error -71 [ 268.450972][ T4244] usb 5-1: USB disconnect, device number 4 [ 269.435301][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 269.975172][ T7] usb 7-1: no configurations [ 269.980028][ T7] usb 7-1: can't read configurations, error -22 [ 270.164900][ T7] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 270.248124][ T6033] loop4: detected capacity change from 0 to 256 [ 270.453504][ T6033] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 270.495178][ T7] usb 7-1: no configurations [ 270.500537][ T7] usb 7-1: can't read configurations, error -22 [ 270.521468][ T7] usb usb7-port1: attempt power cycle [ 270.995373][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 271.135298][ T7] usb 7-1: no configurations [ 271.140034][ T7] usb 7-1: can't read configurations, error -22 [ 271.261519][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 271.340933][ T7] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 271.540855][ T7] usb 7-1: no configurations [ 271.545726][ T7] usb 7-1: can't read configurations, error -22 [ 271.566577][ T7] usb usb7-port1: unable to enumerate USB device [ 273.026634][ T6080] loop3: detected capacity change from 0 to 256 [ 273.261234][ T6080] FAT-fs (loop3): Directory bread(block 64) failed [ 273.279907][ T6080] FAT-fs (loop3): Directory bread(block 65) failed [ 273.314586][ T6080] FAT-fs (loop3): Directory bread(block 66) failed [ 273.345072][ T6080] FAT-fs (loop3): Directory bread(block 67) failed [ 273.365015][ T6080] FAT-fs (loop3): Directory bread(block 68) failed [ 273.371597][ T6080] FAT-fs (loop3): Directory bread(block 69) failed [ 273.425473][ T6080] FAT-fs (loop3): Directory bread(block 70) failed [ 273.452877][ T6080] FAT-fs (loop3): Directory bread(block 71) failed [ 273.483095][ T6080] FAT-fs (loop3): Directory bread(block 72) failed [ 273.513411][ T6080] FAT-fs (loop3): Directory bread(block 73) failed [ 273.587036][ T6095] loop5: detected capacity change from 0 to 128 [ 273.666275][ T6095] FAT-fs (loop5): Unrecognized mount option ">%"L܇H6g }KҝX|Q;x [ 273.666275][ T6095] #͓x Ө 3R'@拎&av98D\֎IĖBy.Iy@W9!%X'_nwᇜ4 [ 273.666275][ T6095] {5@YXeS|~ ik(U4/-A=h̷o;a-*I&B`N;})r" or missing value [ 273.781895][ T6100] devtmpfs: Bad value for 'nr_inodes' [ 274.031231][ T6111] loop5: detected capacity change from 0 to 16 [ 274.127297][ T6111] erofs: (device loop5): mounted with root inode @ nid 36. [ 274.501584][ T6121] xt_nfacct: accounting object `syz1' does not exists [ 274.633818][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 276.034591][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 276.446457][ T6146] loop6: detected capacity change from 0 to 256 [ 276.749162][ T6146] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 277.714598][ T6161] loop3: detected capacity change from 0 to 128 [ 277.767939][ T6161] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.815031][ T6161] EXT4-fs (loop3): Test dummy encryption mode enabled [ 277.874902][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 277.880263][ T6161] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 277.938477][ T6161] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.135023][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 278.280957][ T21] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 278.305360][ T21] usb 5-1: config 1 has no interface number 0 [ 278.334929][ T21] usb 5-1: config 1 interface 242 has no altsetting 0 [ 278.505294][ T21] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 278.518692][ T6161] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 278.570432][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.628007][ T21] usb 5-1: Product: syz [ 278.628998][ T6182] loop5: detected capacity change from 0 to 256 [ 278.632222][ T21] usb 5-1: Manufacturer: syz [ 278.816566][ T21] usb 5-1: SerialNumber: syz [ 278.825713][ T6182] exfat: Deprecated parameter 'utf8' [ 278.843058][ T6182] exfat: Deprecated parameter 'utf8' [ 278.868320][ T6182] exfat: Deprecated parameter 'utf8' [ 279.501710][ T6182] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 279.567945][ T6182] exFAT-fs (loop5): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 279.625160][ T6182] exFAT-fs (loop5): Filesystem has been set read-only [ 279.636824][ T21] aqc111: probe of 5-1:1.242 failed with error -22 [ 279.702757][ T21] usb 5-1: USB disconnect, device number 5 [ 279.852232][ T6196] xt_nfacct: accounting object `syz1' does not exists [ 279.893286][ T6192] 9pnet: Insufficient options for proto=fd [ 280.046655][ T6201] loop5: detected capacity change from 0 to 256 [ 282.015100][ T4208] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 282.270920][ T6238] loop3: detected capacity change from 0 to 128 [ 282.315105][ T4208] usb 5-1: no configurations [ 282.319793][ T4208] usb 5-1: can't read configurations, error -22 [ 282.335090][ T6238] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 283.234973][ T4208] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 283.854117][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 283.874980][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.5.427'. [ 284.065135][ T4208] usb 5-1: no configurations [ 284.069970][ T4208] usb 5-1: can't read configurations, error -22 [ 284.905075][ T4208] usb usb5-port1: attempt power cycle [ 285.544565][ T6282] overlayfs: overlapping lowerdir path [ 285.798919][ T6277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.438'. [ 285.932470][ T6289] loop5: detected capacity change from 0 to 1024 [ 286.007183][ T6289] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 286.054935][ T6289] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 287.121545][ T6294] loop5: detected capacity change from 0 to 16 [ 287.131770][ T6294] erofs: (device loop5): mounted with root inode @ nid 36. [ 287.147419][ T26] audit: type=1800 audit(1749393206.949:79): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.442" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 288.527597][ T6308] loop5: detected capacity change from 0 to 128 [ 289.992132][ T6331] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 291.209819][ T6349] xt_nfacct: accounting object `syz1' does not exists [ 297.434482][ T6430] loop4: detected capacity change from 0 to 2048 [ 297.588662][ T6430] loop4: p1 < > p3 [ 297.595744][ T6430] loop4: p3 size 134217728 extends beyond EOD, truncated [ 299.037492][ T5470] udevd[5470]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 299.399285][ T6466] loop3: detected capacity change from 0 to 2048 [ 300.908209][ T6466] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none. [ 303.027866][ T6490] loop4: detected capacity change from 0 to 128 [ 304.062511][ T6490] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 304.085201][ T6490] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 305.162374][ T6502] device pim6reg1 entered promiscuous mode [ 309.411762][ T6559] loop3: detected capacity change from 0 to 2048 [ 309.443555][ T6559] EXT4-fs (loop3): inline encryption not supported [ 309.481094][ T6559] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 309.498672][ T6559] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 309.711125][ T6559] EXT4-fs (loop3): Unrecognized mount option "audit" or missing value [ 309.932096][ T6568] loop4: detected capacity change from 0 to 256 [ 311.752328][ T26] audit: type=1326 audit(1749393229.679:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 313.075209][ T26] audit: type=1326 audit(1749393229.689:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 313.118219][ T26] audit: type=1326 audit(1749393229.699:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 313.166121][ T6575] fuse: Bad value for 'fd' [ 313.294984][ T26] audit: type=1326 audit(1749393229.699:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 314.433698][ T26] audit: type=1326 audit(1749393229.699:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 314.562570][ T26] audit: type=1326 audit(1749393229.709:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c3cb33929 code=0x7ffc0000 [ 314.615700][ T26] audit: type=1326 audit(1749393229.709:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c3cb33963 code=0x7ffc0000 [ 314.639855][ T26] audit: type=1326 audit(1749393229.719:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c3cb323df code=0x7ffc0000 [ 314.662304][ T26] audit: type=1326 audit(1749393229.729:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c3cb339b7 code=0x7ffc0000 [ 314.692958][ T26] audit: type=1326 audit(1749393229.729:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6562 comm="syz.4.508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c3cb32290 code=0x7ffc0000 [ 315.975122][ T1110] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 316.138925][ T6618] xt_nfacct: accounting object `syz1' does not exists [ 316.455232][ T1110] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.564889][ T1110] usb 4-1: config 0 has no interface number 0 [ 316.571241][ T1110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.582832][ T1110] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.593345][ T1110] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 316.602935][ T1110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.631295][ T1110] usb 4-1: config 0 descriptor?? [ 317.127420][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.165028][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.203662][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.253619][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.292783][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.334110][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.371538][ T1110] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 317.483115][ T1110] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 317.613959][ T1110] hid_prodikeys: hid-prodikeys: failed to find output report [ 317.613959][ T1110] [ 317.758283][ T1110] usb 4-1: USB disconnect, device number 15 [ 318.056304][ T6637] fido_id[6637]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 319.102026][ T6660] fuse: Bad value for 'fd' [ 320.397272][ T6676] loop5: detected capacity change from 0 to 512 [ 320.504748][ T6676] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 320.607865][ T6676] EXT4-fs (loop5): 1 orphan inode deleted [ 320.613817][ T6676] EXT4-fs (loop5): 1 truncate cleaned up [ 320.684423][ T6676] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,errors=remount-ro,nodelalloc,grpjquota=,. Quota mode: none. [ 322.546897][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.553742][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.370150][ T6735] xt_nfacct: accounting object `syz1' does not exists [ 328.465357][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 328.533587][ T6749] ipt_CLUSTERIP: Please specify destination IP [ 329.051067][ T6779] 9pnet: Insufficient options for proto=fd [ 329.537809][ T6789] tipc: Enabling of bearer rejected, already enabled [ 331.282849][ T6801] xt_nfacct: accounting object `syz1' does not exists [ 332.791039][ T6810] netlink: 'syz.6.560': attribute type 27 has an invalid length. [ 334.219459][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.228576][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.776217][ T6833] loop5: detected capacity change from 0 to 2048 [ 335.822664][ T6833] EXT4-fs (loop5): inline encryption not supported [ 335.848871][ T6833] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 335.856200][ T6833] EXT4-fs (loop5): Unrecognized mount option "audit" or missing value [ 335.918307][ T6835] loop3: detected capacity change from 0 to 2048 [ 338.200731][ T4160] Bluetooth: hci1: command 0x0409 tx timeout [ 338.542711][ T6846] loop5: detected capacity change from 0 to 256 [ 338.609708][ T6846] FAT-fs (loop5): bogus sectors per cluster 0 [ 338.629596][ T6846] FAT-fs (loop5): Can't find a valid FAT filesystem [ 338.779621][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.929272][ T6810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.048455][ T6852] xt_nfacct: accounting object `syz1' does not exists [ 339.882727][ T6810] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.892010][ T6810] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.901436][ T6810] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.913782][ T6810] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.234055][ T6810] syz.6.560 (6810) used greatest stack depth: 20320 bytes left [ 340.385022][ T4246] Bluetooth: hci1: command 0x041b tx timeout [ 340.415961][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 340.425692][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 340.438703][ T6839] device bridge0 entered promiscuous mode [ 340.543903][ T6861] syz.5.569[6861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.544038][ T6861] syz.5.569[6861] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.561790][ T6861] loop5: detected capacity change from 0 to 512 [ 340.748306][ T6861] EXT4-fs (loop5): Ignoring removed nobh option [ 341.150949][ T6861] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,bsddf,nobh,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback. [ 341.554665][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 341.554684][ T26] audit: type=1800 audit(1749393261.259:93): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.569" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 342.702317][ T1108] Bluetooth: hci1: command 0x040f tx timeout [ 343.257748][ T6822] chnl_net:caif_netlink_parms(): no params data found [ 343.308249][ T5567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.502361][ T5567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.716883][ T6898] loop5: detected capacity change from 0 to 256 [ 343.765959][ T6898] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 343.851810][ T5567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.928493][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.947976][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.995382][ T6822] device bridge_slave_0 entered promiscuous mode [ 344.046522][ T5567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.103695][ T6822] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.115195][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.206117][ T6822] device bridge_slave_1 entered promiscuous mode [ 344.263185][ T6822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.287592][ T6822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.437134][ T6822] team0: Port device team_slave_0 added [ 344.497890][ T6822] team0: Port device team_slave_1 added [ 344.753626][ T6822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.785837][ T4246] Bluetooth: hci1: command 0x0419 tx timeout [ 344.814706][ T6822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.866102][ T6912] [ 344.868475][ T6912] ====================================================== [ 344.875491][ T6912] WARNING: possible circular locking dependency detected [ 344.882508][ T6912] 5.15.185-syzkaller #0 Not tainted [ 344.887719][ T6912] ------------------------------------------------------ [ 344.894816][ T6912] syz.5.584/6912 is trying to acquire lock: [ 344.900794][ T6912] ffff8880b9127e78 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x186/0x7c0 [ 344.909425][ T6912] [ 344.909425][ T6912] but task is already holding lock: [ 344.916787][ T6912] ffff888022ca19b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 344.925671][ T6912] [ 344.925671][ T6912] which lock already depends on the new lock. [ 344.925671][ T6912] [ 344.936419][ T6912] [ 344.936419][ T6912] the existing dependency chain (in reverse order) is: [ 344.945535][ T6912] [ 344.945535][ T6912] -> #2 (&trie->lock){..-.}-{2:2}: [ 344.952828][ T6912] _raw_spin_lock_irqsave+0xa4/0xf0 [ 344.958665][ T6912] trie_delete_elem+0x90/0x710 [ 344.964079][ T6912] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbfc [ 344.970170][ T6912] bpf_trace_run3+0x17e/0x320 [ 344.975473][ T6912] __traceiter_timer_start+0x73/0xc0 [ 344.981297][ T6912] enqueue_timer+0x394/0x520 [ 344.986445][ T6912] __mod_timer+0x8e1/0xd20 [ 344.991396][ T6912] sk_reset_timer+0x1f/0xb0 [ 344.996434][ T6912] tipc_sk_finish_conn+0x154/0x7e0 [ 345.002069][ T6912] tipc_socketpair+0x250/0x470 [ 345.007372][ T6912] __sys_socketpair+0x2ac/0x540 [ 345.012744][ T6912] __x64_sys_socketpair+0x97/0xb0 [ 345.018310][ T6912] do_syscall_64+0x4c/0xa0 [ 345.023257][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.029899][ T6912] [ 345.029899][ T6912] -> #1 (&base->lock){-.-.}-{2:2}: [ 345.037200][ T6912] _raw_spin_lock_irqsave+0xa4/0xf0 [ 345.042936][ T6912] lock_timer_base+0x123/0x270 [ 345.048230][ T6912] __mod_timer+0x117/0xd20 [ 345.053264][ T6912] queue_delayed_work_on+0x126/0x1e0 [ 345.059162][ T6912] kvfree_call_rcu+0x4a9/0x7c0 [ 345.064619][ T6912] rtnl_register_internal+0x44e/0x540 [ 345.070611][ T6912] rtnl_register+0x2e/0x70 [ 345.075553][ T6912] ip_rt_init+0x2e0/0x3a0 [ 345.080403][ T6912] ip_init+0xa/0x20 [ 345.084733][ T6912] inet_init+0x28b/0x3a0 [ 345.089502][ T6912] do_one_initcall+0x1ee/0x680 [ 345.094848][ T6912] do_initcall_level+0x137/0x1f0 [ 345.100325][ T6912] do_initcalls+0x4b/0x90 [ 345.105173][ T6912] kernel_init_freeable+0x3ce/0x560 [ 345.110889][ T6912] kernel_init+0x19/0x1b0 [ 345.115733][ T6912] ret_from_fork+0x1f/0x30 [ 345.120802][ T6912] [ 345.120802][ T6912] -> #0 (krc.lock){..-.}-{2:2}: [ 345.128120][ T6912] __lock_acquire+0x2c33/0x7c60 [ 345.133605][ T6912] lock_acquire+0x197/0x3f0 [ 345.138630][ T6912] _raw_spin_lock+0x2a/0x40 [ 345.143668][ T6912] kvfree_call_rcu+0x186/0x7c0 [ 345.148948][ T6912] trie_delete_elem+0x58c/0x710 [ 345.154361][ T6912] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbfc [ 345.160517][ T6912] bpf_trace_run3+0x17e/0x320 [ 345.165713][ T6912] __traceiter_timer_start+0x73/0xc0 [ 345.171523][ T6912] enqueue_timer+0x394/0x520 [ 345.176661][ T6912] __mod_timer+0x8e1/0xd20 [ 345.181611][ T6912] sk_reset_timer+0x1f/0xb0 [ 345.186732][ T6912] tipc_sk_finish_conn+0x154/0x7e0 [ 345.192482][ T6912] tipc_socketpair+0x250/0x470 [ 345.197772][ T6912] __sys_socketpair+0x2ac/0x540 [ 345.203141][ T6912] __x64_sys_socketpair+0x97/0xb0 [ 345.208776][ T6912] do_syscall_64+0x4c/0xa0 [ 345.213798][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.220261][ T6912] [ 345.220261][ T6912] other info that might help us debug this: [ 345.220261][ T6912] [ 345.230885][ T6912] Chain exists of: [ 345.230885][ T6912] krc.lock --> &base->lock --> &trie->lock [ 345.230885][ T6912] [ 345.242615][ T6912] Possible unsafe locking scenario: [ 345.242615][ T6912] [ 345.250250][ T6912] CPU0 CPU1 [ 345.255631][ T6912] ---- ---- [ 345.260996][ T6912] lock(&trie->lock); [ 345.265065][ T6912] lock(&base->lock); [ 345.271647][ T6912] lock(&trie->lock); [ 345.278229][ T6912] lock(krc.lock); [ 345.282040][ T6912] [ 345.282040][ T6912] *** DEADLOCK *** [ 345.282040][ T6912] [ 345.290449][ T6912] 3 locks held by syz.5.584/6912: [ 345.295828][ T6912] #0: ffff8880b9128098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 345.305305][ T6912] #1: ffffffff8c11bfa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 345.314624][ T6912] #2: ffff888022ca19b8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 345.323938][ T6912] [ 345.323938][ T6912] stack backtrace: [ 345.329818][ T6912] CPU: 1 PID: 6912 Comm: syz.5.584 Not tainted 5.15.185-syzkaller #0 [ 345.337879][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.347943][ T6912] Call Trace: [ 345.351219][ T6912] [ 345.354355][ T6912] dump_stack_lvl+0x168/0x230 [ 345.359051][ T6912] ? load_image+0x3b0/0x3b0 [ 345.363550][ T6912] ? show_regs_print_info+0x20/0x20 [ 345.368748][ T6912] ? print_circular_bug+0x12b/0x1a0 [ 345.374074][ T6912] check_noncircular+0x274/0x310 [ 345.379138][ T6912] ? add_chain_block+0x940/0x940 [ 345.384117][ T6912] ? lockdep_lock+0xdc/0x1e0 [ 345.388826][ T6912] ? stack_depot_save+0x404/0x440 [ 345.393853][ T6912] ? mark_lock+0x94/0x320 [ 345.398203][ T6912] ? _find_first_zero_bit+0xce/0xf0 [ 345.403406][ T6912] __lock_acquire+0x2c33/0x7c60 [ 345.408354][ T6912] ? stack_depot_save+0x404/0x440 [ 345.413475][ T6912] ? verify_lock_unused+0x140/0x140 [ 345.419038][ T6912] ? kasan_save_stack+0x4b/0x60 [ 345.424451][ T6912] ? kasan_save_stack+0x35/0x60 [ 345.429399][ T6912] ? kasan_record_aux_stack+0xb8/0x100 [ 345.434856][ T6912] ? kvfree_call_rcu+0x10a/0x7c0 [ 345.439889][ T6912] ? trie_delete_elem+0x58c/0x710 [ 345.444916][ T6912] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0xbfc [ 345.450650][ T6912] ? bpf_trace_run3+0x17e/0x320 [ 345.455496][ T6912] ? __traceiter_timer_start+0x73/0xc0 [ 345.460965][ T6912] ? enqueue_timer+0x394/0x520 [ 345.465742][ T6912] ? __mod_timer+0x8e1/0xd20 [ 345.470338][ T6912] ? sk_reset_timer+0x1f/0xb0 [ 345.475043][ T6912] ? tipc_sk_finish_conn+0x154/0x7e0 [ 345.480330][ T6912] ? tipc_socketpair+0x250/0x470 [ 345.485268][ T6912] ? __sys_socketpair+0x2ac/0x540 [ 345.490285][ T6912] ? __x64_sys_socketpair+0x97/0xb0 [ 345.495477][ T6912] ? do_syscall_64+0x4c/0xa0 [ 345.500064][ T6912] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.506134][ T6912] lock_acquire+0x197/0x3f0 [ 345.510799][ T6912] ? kvfree_call_rcu+0x186/0x7c0 [ 345.515769][ T6912] ? read_lock_is_recursive+0x10/0x10 [ 345.521163][ T6912] _raw_spin_lock+0x2a/0x40 [ 345.525755][ T6912] ? kvfree_call_rcu+0x186/0x7c0 [ 345.530783][ T6912] kvfree_call_rcu+0x186/0x7c0 [ 345.535567][ T6912] ? call_rcu+0x920/0x920 [ 345.540004][ T6912] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 345.545506][ T6912] ? _raw_spin_lock+0x40/0x40 [ 345.550195][ T6912] ? longest_prefix_match+0x350/0x660 [ 345.555886][ T6912] trie_delete_elem+0x58c/0x710 [ 345.560878][ T6912] bpf_prog_2c29ac5cdc6b1842+0x3a/0xbfc [ 345.566438][ T6912] bpf_trace_run3+0x17e/0x320 [ 345.571129][ T6912] ? bpf_trace_run2+0x2d0/0x2d0 [ 345.575983][ T6912] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 345.581900][ T6912] ? _raw_spin_unlock+0x40/0x40 [ 345.586748][ T6912] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 345.592242][ T6912] ? _raw_spin_lock+0x40/0x40 [ 345.596940][ T6912] ? __bpf_trace_timer_class+0x20/0x20 [ 345.602415][ T6912] __traceiter_timer_start+0x73/0xc0 [ 345.607715][ T6912] enqueue_timer+0x394/0x520 [ 345.612571][ T6912] __mod_timer+0x8e1/0xd20 [ 345.617079][ T6912] sk_reset_timer+0x1f/0xb0 [ 345.621758][ T6912] tipc_sk_finish_conn+0x154/0x7e0 [ 345.626885][ T6912] tipc_socketpair+0x250/0x470 [ 345.631664][ T6912] __sys_socketpair+0x2ac/0x540 [ 345.636528][ T6912] __x64_sys_socketpair+0x97/0xb0 [ 345.641560][ T6912] do_syscall_64+0x4c/0xa0 [ 345.646221][ T6912] ? clear_bhb_loop+0x30/0x80 [ 345.650908][ T6912] ? clear_bhb_loop+0x30/0x80 [ 345.655590][ T6912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.661537][ T6912] RIP: 0033:0x7f28b86b9929 [ 345.665970][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.685681][ T6912] RSP: 002b:00007f28b6521038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 345.694115][ T6912] RAX: ffffffffffffffda RBX: 00007f28b88e0fa0 RCX: 00007f28b86b9929 [ 345.702217][ T6912] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 345.710304][ T6912] RBP: 00007f28b873bb39 R08: 0000000000000000 R09: 0000000000000000 [ 345.718281][ T6912] R10: 0000200000000940 R11: 0000000000000246 R12: 0000000000000000 [ 345.726511][ T6912] R13: 0000000000000000 R14: 00007f28b88e0fa0 R15: 00007ffd8f40d948 [ 345.734610][ T6912]