last executing test programs: 46.251158608s ago: executing program 0 (id=181): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x48}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 42.675712629s ago: executing program 0 (id=189): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f00000006c0)={[{@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@rodir}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xee9}}, {@fat=@errors_remount}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'uni_x\x9a\xfdte=1'}}, {@measure}, {@subj_user={'subj_user', 0x3d, 'check=strict'}}, {@uid_eq={'uid', 0x3d, r1}}, {@fowner_lt={'fowner<', r1}}]}, 0x6, 0x2d0, &(0x7f00000003c0)="$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") r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) process_mrelease(0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES64=r4, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0xd, &(0x7f0000000840)=@raw=[@jmp={0x5, 0x1, 0x5, 0x5, 0x1f6b94669bc2284e, 0xfffffffffffffff4, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x0, 0x0, 0x1, 0x7, 0x1, 0xc, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], &(0x7f0000000180)='syzkaller\x00', 0xff, 0x1b, &(0x7f00000008c0)=""/27, 0xe7ee8cf6fbadb4a9, 0x48, '\x00', r5, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x6, 0x9874, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[r9, r9, r9], &(0x7f0000000b00)=[{0x4, 0x2, 0xf, 0xc}], 0x10, 0xff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x5c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x81, 0x7ff, 0x0, 0x35a3607c, 0xd}}, {0x4}}]}]}, 0x5c}}, 0x20000000) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x68, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000) 31.30965494s ago: executing program 0 (id=208): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000180)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask={'fmask', 0x3d, 0x36}}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@shortname_lower}, {@fat=@check_strict}, {@utf8}, {@fat=@quiet}, {@shortname_win95}, {@fat=@nfs}, {@numtail}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x7fffffffffffffff}}, {@shortname_winnt}, {}]}, 0x6, 0x2c2, &(0x7f0000000900)="$eJzs3UFrI2UYB/Bn0skkq4fk4EkEB/Tgadnu1UuK7ILYk0sO6kGL2wVpgtBCQQWznrx68eDBTyAIfhAvfgavgjdXWHhlJjObpBuyzbqpSH+/S5++ef8zz7wd2imlbz55bXpyv4wHaS9qnVGM4lEWw+hE62GsGH0XAMD/2aOU4s80t00ui4j+7toCAHbocj//80X5y5W0BQDs0L0PPnzv4PDwzvtl2Y+702/Px9Vv9tXH+esHD+KzmMRx3IpBPI6oHxS6UT8tVOXdlNIsLyvDeHM6Ox9XyenHvzbHP/gjos7vxyCG9dCTp406/+7hnf1ybik/q/p4qTn/qMrfjkG88iS8kr+9Jh/jIt56Y6n/mzGI3z6Nz2MS9+smFvmv98vynfT9X199VLVX5bPZ+bhXz1to/0ICAAAAAAAAAAAAAAAAAAAAAAD/3s1m75xe1Pv3VEPN/jt7j6tPulG2hqv788zzWXug5f2BUkqzFD+2++vcKssyNRMX+TxezZc3FgQAAAAAAAAAAAAAAAAAAIDr6+yLL0+OJpPj0xdStLsB5BHx972I5z3OaGnk9dg8udec82gy6TTl6px8eST22jlZxMY2qot43tXIY6trv/FUz03x08/bnr3/7Dnd9ed6IcWNqIv27jo5ytavYS/akX6zUD8UEYs5RVzypMXFkTSYHydt9SUo6iJ7GCs322DrRSherovZhjmRbWrs7d/nK9eMZBevoqhXdW282xRL8Qv3xqXu5+jP409/r8js1gEAAAAAAAAAAAAAAAAAADu1+O/fNS9+szHaSb2dtQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2rx/v9bFLMmfHx6lj9jchGnZ//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAN/BMAAP//yChWqA==") 30.955102557s ago: executing program 0 (id=210): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000080)={[{@nodioread_nolock}, {@jqfmt_vfsold}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x3096088, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000001240)='./file0\x00', 0x40000, &(0x7f0000000c40)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 28.466352785s ago: executing program 0 (id=217): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) 22.190405751s ago: executing program 0 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="40004f0000004f0ed1abc63f6e866bbc4d"], 0x0, 0x0, 0x0}, 0x0) 22.096139602s ago: executing program 32 (id=229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup2(r0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000407d1eb42d000000090001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="40004f0000004f0ed1abc63f6e866bbc4d"], 0x0, 0x0, 0x0}, 0x0) 10.800948879s ago: executing program 2 (id=247): prctl$PR_SET_FPEXC(0xc, 0x100000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000071119f40000000008510000002000000850000000000000095000000002db3ca3a00a50500008a0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="6864c74d897c0200000020696f00"], 0x8) pidfd_getfd(r4, r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x4, '\x00', 0x0, r4, 0x4, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') preadv(r7, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) 8.724862204s ago: executing program 3 (id=251): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 6.305468808s ago: executing program 4 (id=253): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x5, 0x4d2, &(0x7f0000000740)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x90}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e22, 0xfffffff1, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20044800, &(0x7f0000000240)={0xa, 0x0, 0xe7, @loopback, 0x82e5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000940), 0x3ffffffffffff3c, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000880)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0x30, 0x0, 0x0, "bb0767478bf2697b8eac00e37570e5cf", "449e69e1b28f5061196dc9f8faa9052c11a852d5274171b21c6a8c"}, 0x30, 0x0) capset(&(0x7f0000000300)={0x20071026, r1}, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0xec, 0x3}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 6.184572456s ago: executing program 1 (id=254): open(&(0x7f0000000140)='./file0/../file0\x00', 0x4a00, 0x22) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x1217880, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.183947563s ago: executing program 2 (id=255): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1], 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup2(r5, r5) fcntl$setstatus(r6, 0x4, 0x2400) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) 4.991249652s ago: executing program 2 (id=256): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r0, 0x88801) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = dup(r1) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fbffc001) 4.853570863s ago: executing program 2 (id=257): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @private}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000001880)=ANY=[@ANYRESOCT=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(0x0, &(0x7f0000000140)='./file0\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f00000200000000000000", @ANYRES32, @ANYBLOB="000000efffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r7}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000fffffffffffffff400040001000000", 0x24) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000100)=""/111, 0x66}], 0x1, 0xfffffffc, 0x0) readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000740)=""/4078, 0xfee) socketpair(0x28, 0x800, 0x28, 0x0) 4.576309391s ago: executing program 3 (id=258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000180)={[{@norecovery}, {@grpid}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {}, {@nombcache}]}, 0x6, 0x5fa, &(0x7f00000004c0)="$eJzs3c1vFOUfAPDvTLcvtL+fLcSoeJAmxkCitLSAIcZEuBOCLzdPlRaCLJTQGi2SWBK8mBgvHkw8eRD/CyXx6sGrBy+eDAkxhoMYImtmX+p2u1vabfeF3c8nme7zzLTzfKfw7TP77DMzAfStyexLGrE/Iq4mEeP1vmGy9HL/zxvnsiWJQuHtP5K48UmyWv2tSfl1LPuSi/hnPJKf04h9AxvbXVq5fmkun1+4Vq5PL1++Or20cv3wxctzFxYuLFyZfXX2xPFjx0/MHNnR8eWqyqdvvf/h+Gdn3v3264fJzHe/nkniZDwqx5YdV+3PDu+o5ex3NhmFkge1MZ3Y4b67xV/j63/HmaR2BV3rfPn/42BEPBvjMVD1rzken77Z0eCAliokUemjgL6TNJX/I7sfCNBmlfOAynv7eu+DN0pbfFYCtMO9U6UBgFLuD0ZEJf9zpbHBGCmODYzeT9aN8yQRsbORuZKsjZ9+PHMrW6LBOBzQGqs3K6Pctf1/UszNiRgp1kbvp+vyP61asvVvNdn+ZE1d/kP7rN6MiOfK/f9QbCv/J6vy/70m25f/AAAAAAAAsHvunIqIV+rN/0vX5v8M1Zn/MxYRJ3eh/cd//pfeLReSXWgOqHLvVMTrdef/rs3xnRgo1/5fnA8wmJy/mF84EhFPRcShGBzO6jM1+62eIXz4831fNWq/ev5ftmTtV+YClvd0N1dzIe783PLcTo8biLh3M+L54vzfA+U16+f/ZP1/Uqf/z/L76hbb2PfS7bONtj0+/4FWKXwTcbBu///f6Xay+f05povnA9OVs4KNXvj4i+8btS//oXOy/n908/wfTqrv17O0vf0PRcTRlVyh0fZmz/+HkncGKvvPfDS3vHxtJmIoOb1x/ez2YoZeVcmHSr5k+X/oxc3H/9bO/6vycE9ErG6xzWcejf3WaJv+Hzony//5zfv/ifX9//YLs7cnfmjU/tkt9f/Hin36ofIa439QbeP9OLaaoB0JFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACecGlE/C+SdGqtnKZTUxFjEfF0jKb5xaXll88vfnBlPttWfP5/WnnS73ipnlSe/z9RVZ+tqR+NiL0R8eXAnmJ96txifr7TBw8AAAAAAAAAAAAAAAAAAABdYqx4zX9huPb6/8zvA52ODmi5XPlVvkP/yTX9k4XhXQ0EaLvm8x940m09/wdbGgfQfo3z/8HDQlFbwwHayPk/9K8m89/HBdAD9P/Qr7Y4pjfS6jiATtD/AwAAAABAT9l74M4vSUSsvranuGSGyttM9ofelnY6AKBjzOGF/pVb7HQEQKd4jw8ka6W/617s33j2f9KagAAAAAAAAAAAAACADQ7ud/0/9KvNr/83tx962SbX/9dLfrcLgB7S+NEf+n7odd7jA4/r7V3/DwAAAAAAAAAAAABdYOT6pbl8fuHa0sqTV3ijO8LYXmF1rivC2NXCo9bseTAiuuMA212o3IKjg2F0+O8SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw5t8AAAD//zl2J5k=") r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmmsg$alg(r0, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000000)=0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) sched_yield() mkdir(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x60) 4.193786799s ago: executing program 4 (id=259): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) getpid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close_range(r2, 0xffffffffffffffff, 0x0) 3.423161763s ago: executing program 1 (id=260): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) syz_mount_image$fuse(&(0x7f0000000340), 0x0, 0x0, &(0x7f0000000ec0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}]}}, 0x0, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r5, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$negate(0xd, 0x0, 0x57, r6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) 3.370950117s ago: executing program 3 (id=261): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.161434063s ago: executing program 3 (id=262): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) ftruncate(r1, 0x7fff) fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x27, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)='U', 0x1, 0x1}]) 3.043087671s ago: executing program 4 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$usbfs(0x0, 0x201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb4e, 0x0, "ec28a144f13d7607"}) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000410, &(0x7f0000000000)={[{@commit={'commit', 0x3d, 0x5}}]}, 0x1, 0x79f, &(0x7f00000012c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000200)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read(r1, &(0x7f0000000500)=""/241, 0xf1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.337811441s ago: executing program 1 (id=264): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 1.970306598s ago: executing program 3 (id=265): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xe, 0xd, &(0x7f0000000840)=@raw=[@jmp={0x5, 0x1, 0x5, 0x5, 0x1f6b94669bc2284e, 0xfffffffffffffff4, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x0, 0x0, 0x1, 0x7, 0x1, 0xc, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000180)='syzkaller\x00', 0xff, 0x1b, &(0x7f00000008c0)=""/27, 0xe7ee8cf6fbadb4a9, 0x48, '\x00', r2, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x6, 0x9874, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[r3, r3, r3], &(0x7f0000000b00)=[{0x4, 0x2, 0xf, 0xc}], 0x10, 0xff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x5c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x81, 0x7ff, 0x0, 0x35a3607c, 0xd}}, {0x4}}]}]}, 0x5c}}, 0x20000000) 1.523225408s ago: executing program 4 (id=266): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0xfffffffffffffc53) 1.322709134s ago: executing program 1 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 1.289920371s ago: executing program 4 (id=268): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, &(0x7f00000000c0)={0x30ac, 0x0, 0x7fff, 0x0, 0x0, 0x3}, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xfffffffffffffffc}}, 0x10) 1.111165221s ago: executing program 4 (id=269): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={0x0, 0x4, 0x0, [0x7, 0xfffffffffffff919, 0x3, 0x8001, 0xfffffffffffffffe], [0x7d3, 0x3, 0x7ff, 0xffffffffffffff42, 0x7ff, 0x9, 0x4, 0xffff, 0x8000000000000000, 0x3, 0x3, 0x8000000000000001, 0x11c0, 0xff, 0x1, 0x8, 0xf52, 0x1485, 0x6, 0x200, 0xffffffffc1d67abe, 0x10001, 0x4, 0x3ff80, 0x2, 0x2c, 0x100000000, 0x20000000, 0x0, 0x100000001, 0x4, 0x63, 0x1, 0x7c4a, 0x4, 0xb3, 0xfffffffffffffff8, 0x9, 0x9, 0x4, 0x9, 0x1, 0x0, 0x5, 0x5, 0x800000000000007f, 0xc36, 0xfffffffffffffffb, 0x5a2f, 0x3ffffffffffd, 0x40, 0x7, 0x5d46, 0x9, 0x40000000009, 0x1, 0xfffffffd, 0x2, 0x9, 0x0, 0x7, 0x4000000000001, 0xffff, 0x6, 0x9, 0x3f, 0x100000000, 0x1, 0x8, 0x7, 0x0, 0x6, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x80, 0x6, 0xb7, 0xfffffffffffffffe, 0x0, 0x7, 0x3, 0x6, 0x2, 0x1, 0xfffffffc, 0x48b9, 0x1, 0xfff, 0x7, 0x3f, 0x1b4, 0x4ef, 0x683e, 0x8, 0xa31, 0xa952, 0x5, 0xf29, 0x2, 0x81, 0x1, 0x3296, 0x3, 0x1ff, 0x7, 0xc9cc, 0x400, 0x8, 0x7, 0x6c9, 0x9, 0x7fff, 0x1, 0x3, 0x50, 0x0, 0x3, 0x5, 0x6, 0x2f]}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) syz_usb_connect(0x2, 0x76, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x6b, 0x10, 0x56, 0x40, 0x12d1, 0x14ac, 0xfa53, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x1, 0x8, 0xfa, 0x10, 0xce, [{{0x9, 0x4, 0x5a, 0xc, 0x2, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x9, 0x3, 0x8, 0xa, 0x6, 0x3, [@generic={0x2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x400, 0xfb, 0xf, 0xd, [@generic={0x2, 0xc}, @generic={0x3c, 0x22, "55ff1df0267e6d7f9db78643aff62d3c367f1bb42ee10dda76cded25fe77fa81352bff22b60a0deb029310353f5231444164d0c61bd920dec841"}]}}]}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x10, 0x3, 0x6, 0x40, 0x7}, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x30, 0x4, 0x2, 0x2}, @ptm_cap={0x3}]}, 0x5, [{0x0, 0x0}, {0x5e, &(0x7f00000006c0)=@string={0x5e, 0x3, "d4c9a5f1b25543e3473567923c5922224e7e2fb38ab85a3cc9727e197c6da905f6fab3bc9ee95f3e71b368f3b8bdbfc634bfea9f538c2220c8cb869446a2b71a315df09a5f3229024af145a3fe91f9c14ec9c8195800b85138d2052c"}}, {0x1e, &(0x7f0000000740)=@string={0x1e, 0x3, "332e905979b1f2dff6c1fd2ec4eb4313739e023765dfdada57388c38"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x4001}}]}) 1.077365188s ago: executing program 1 (id=270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) close_range(r3, 0xffffffffffffffff, 0x0) 141.042203ms ago: executing program 2 (id=271): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18, 0x8000000000000004}, 0x18) 81.908432ms ago: executing program 1 (id=272): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.255018ms ago: executing program 2 (id=273): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x5, 0x4d2, &(0x7f0000000740)="$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") sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x90}}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004000, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20044800, &(0x7f0000000240)={0xa, 0x0, 0xe7, @loopback, 0x82e5}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000940), 0x3ffffffffffff3c, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000880)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)={0x0, 0xfb, 0x30, 0x0, 0x0, "bb0767478bf2697b8eac00e37570e5cf", "449e69e1b28f5061196dc9f8faa9052c11a852d5274171b21c6a8c"}, 0x30, 0x0) capset(&(0x7f0000000300)={0x20071026, r1}, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0xec, 0x3}) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 0s ago: executing program 3 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xc, @rand_addr, 0xfffffffd}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@newtaction={0x5c, 0x30, 0xfffffffffffff9cf, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x101000) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f00000001c0)={0x4, 0x80000001, 0x6, 0x6, 0x401, 0x3ff, "c106000000b0cd09e865000000000300", 0x8, 0x91, 0x9, 0x2, 0x1, 0x0, 0xfc}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 71.546355][ T5837] cgroup: Unknown subsys name 'net' [ 71.699786][ T5837] cgroup: Unknown subsys name 'cpuset' [ 71.708528][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.940491][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.947333][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.294332][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.648807][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.700460][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.708432][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.716668][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.726387][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.733965][ T5859] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.742491][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.750731][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.758727][ T5859] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.766826][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.775565][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.784244][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.785654][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.799070][ T5859] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.800480][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.807003][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.819177][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.821346][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.835109][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.837861][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.842688][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.850070][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.857737][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.869518][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.873603][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.885186][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.914937][ T5865] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.923460][ T5865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.931947][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.939303][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.424686][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 76.440130][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 76.461723][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 76.511973][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 76.582303][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.685005][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.693242][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.700941][ T5852] bridge_slave_0: entered allmulticast mode [ 76.708075][ T5852] bridge_slave_0: entered promiscuous mode [ 76.768040][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.775182][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.782895][ T5853] bridge_slave_0: entered allmulticast mode [ 76.789901][ T5853] bridge_slave_0: entered promiscuous mode [ 76.797580][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.804703][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.812102][ T5852] bridge_slave_1: entered allmulticast mode [ 76.819038][ T5852] bridge_slave_1: entered promiscuous mode [ 76.835025][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.843837][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.851710][ T5848] bridge_slave_0: entered allmulticast mode [ 76.859204][ T5848] bridge_slave_0: entered promiscuous mode [ 76.888173][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.895405][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.903490][ T5853] bridge_slave_1: entered allmulticast mode [ 76.910517][ T5853] bridge_slave_1: entered promiscuous mode [ 76.936503][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.946899][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.954029][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.961443][ T5848] bridge_slave_1: entered allmulticast mode [ 76.969618][ T5848] bridge_slave_1: entered promiscuous mode [ 76.997968][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.005132][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.012499][ T5854] bridge_slave_0: entered allmulticast mode [ 77.019414][ T5854] bridge_slave_0: entered promiscuous mode [ 77.029146][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.036445][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.043665][ T5854] bridge_slave_1: entered allmulticast mode [ 77.050790][ T5854] bridge_slave_1: entered promiscuous mode [ 77.068431][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.118244][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.130741][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.154068][ T5852] team0: Port device team_slave_0 added [ 77.162945][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.175405][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.184772][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.192840][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.200563][ T5861] bridge_slave_0: entered allmulticast mode [ 77.208277][ T5861] bridge_slave_0: entered promiscuous mode [ 77.236940][ T5852] team0: Port device team_slave_1 added [ 77.261159][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.268637][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.276518][ T5861] bridge_slave_1: entered allmulticast mode [ 77.283282][ T5861] bridge_slave_1: entered promiscuous mode [ 77.291779][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.305236][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.334908][ T5848] team0: Port device team_slave_0 added [ 77.372948][ T5853] team0: Port device team_slave_0 added [ 77.393685][ T5848] team0: Port device team_slave_1 added [ 77.411698][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.433885][ T5854] team0: Port device team_slave_0 added [ 77.441945][ T5853] team0: Port device team_slave_1 added [ 77.449144][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.456393][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.482913][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.506819][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.518871][ T5854] team0: Port device team_slave_1 added [ 77.545602][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.553917][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.580638][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.633260][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.640402][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.666571][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.692175][ T5861] team0: Port device team_slave_0 added [ 77.698897][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.706322][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.733020][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.745726][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.753401][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.780228][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.808554][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.815544][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.841942][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.853865][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.861352][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.887749][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.900916][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.908211][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.934380][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.946501][ T5862] Bluetooth: hci0: command tx timeout [ 77.952591][ T5861] team0: Port device team_slave_1 added [ 77.952715][ T5865] Bluetooth: hci1: command tx timeout [ 78.007488][ T5853] hsr_slave_0: entered promiscuous mode [ 78.014249][ T5853] hsr_slave_1: entered promiscuous mode [ 78.015939][ T5865] Bluetooth: hci3: command tx timeout [ 78.020192][ T5862] Bluetooth: hci4: command tx timeout [ 78.025946][ T5865] Bluetooth: hci2: command tx timeout [ 78.062133][ T5852] hsr_slave_0: entered promiscuous mode [ 78.068946][ T5852] hsr_slave_1: entered promiscuous mode [ 78.075419][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.084203][ T5852] Cannot create hsr debugfs directory [ 78.134265][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.142538][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.170259][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.182993][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.190490][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.217806][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.243882][ T5848] hsr_slave_0: entered promiscuous mode [ 78.250974][ T5848] hsr_slave_1: entered promiscuous mode [ 78.259983][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.268607][ T5848] Cannot create hsr debugfs directory [ 78.316281][ T5854] hsr_slave_0: entered promiscuous mode [ 78.323964][ T5854] hsr_slave_1: entered promiscuous mode [ 78.330661][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.338515][ T5854] Cannot create hsr debugfs directory [ 78.391336][ T5861] hsr_slave_0: entered promiscuous mode [ 78.398029][ T5861] hsr_slave_1: entered promiscuous mode [ 78.404485][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.413395][ T5861] Cannot create hsr debugfs directory [ 78.765843][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.779072][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.791554][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.814135][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.854341][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.869053][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.881682][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.904020][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.960425][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.973920][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.985330][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.998398][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.075067][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.116645][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.130105][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.140495][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.242592][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.253156][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.269466][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.289646][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.300741][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.353079][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.388117][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.410721][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.443201][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.450675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.471946][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.485262][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.492456][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.502250][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.509425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.536492][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.543641][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.587970][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.625253][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.643911][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.651314][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.680114][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.687311][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.752045][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.832499][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.839718][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.906860][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.914039][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.937518][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.979430][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.012837][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.016555][ T5865] Bluetooth: hci1: command tx timeout [ 80.022235][ T5862] Bluetooth: hci0: command tx timeout [ 80.095963][ T5862] Bluetooth: hci2: command tx timeout [ 80.096009][ T5865] Bluetooth: hci4: command tx timeout [ 80.101414][ T5862] Bluetooth: hci3: command tx timeout [ 80.127918][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.135650][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.154208][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.161442][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.281524][ T5852] veth0_vlan: entered promiscuous mode [ 80.319752][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.358733][ T5852] veth1_vlan: entered promiscuous mode [ 80.424462][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.498098][ T5853] veth0_vlan: entered promiscuous mode [ 80.524790][ T5852] veth0_macvtap: entered promiscuous mode [ 80.545511][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.573529][ T5853] veth1_vlan: entered promiscuous mode [ 80.582880][ T5852] veth1_macvtap: entered promiscuous mode [ 80.619149][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.630293][ T5854] veth0_vlan: entered promiscuous mode [ 80.652666][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.718626][ T5852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.730568][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.740143][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.750542][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.762972][ T5853] veth0_macvtap: entered promiscuous mode [ 80.782971][ T5854] veth1_vlan: entered promiscuous mode [ 80.810893][ T5853] veth1_macvtap: entered promiscuous mode [ 80.880264][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.951502][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.963041][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.984126][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.024381][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.036051][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.047961][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.071413][ T5854] veth0_macvtap: entered promiscuous mode [ 81.100661][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.109855][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.124146][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.125308][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.143428][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.152723][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.187961][ T5861] veth0_vlan: entered promiscuous mode [ 81.207216][ T5854] veth1_macvtap: entered promiscuous mode [ 81.234979][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.249279][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.253917][ T5861] veth1_vlan: entered promiscuous mode [ 81.287114][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.298708][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.314034][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.324651][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.340147][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.350420][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.361219][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.371724][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.384232][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.399055][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.413948][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.424179][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.434050][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.448523][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.451647][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.503482][ T5848] veth0_vlan: entered promiscuous mode [ 81.569704][ T5861] veth0_macvtap: entered promiscuous mode [ 81.578310][ T5848] veth1_vlan: entered promiscuous mode [ 81.607628][ T5848] veth0_macvtap: entered promiscuous mode [ 81.617714][ T5848] veth1_macvtap: entered promiscuous mode [ 81.634119][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.634232][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.634245][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.634261][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.634273][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.634287][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.635510][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.638681][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.638704][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.638718][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.638733][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.638746][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.638761][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.639848][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.642457][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.642497][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.642529][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.642563][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.693645][ T5861] veth1_macvtap: entered promiscuous mode [ 81.870507][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.894215][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.096720][ T5862] Bluetooth: hci1: command tx timeout [ 82.106055][ T5856] Bluetooth: hci0: command tx timeout [ 82.175859][ T5862] Bluetooth: hci3: command tx timeout [ 82.182048][ T5856] Bluetooth: hci4: command tx timeout [ 82.191770][ T5865] Bluetooth: hci2: command tx timeout [ 82.672084][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.690748][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.708038][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.718624][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.728529][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.740129][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.751720][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.762336][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.774695][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.825356][ T5941] loop0: detected capacity change from 0 to 2048 [ 82.833804][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.837285][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.849893][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.862719][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.879180][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.890039][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.908715][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.919755][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.929761][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.948280][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.949336][ T5941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.960363][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.982877][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.985364][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.991115][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.008367][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019905][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.032339][ T5941] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 83.037422][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.071759][ T5941] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 83.099191][ T5941] EXT4-fs (loop0): This should not happen!! Data will be lost [ 83.099191][ T5941] [ 83.112312][ T5941] EXT4-fs (loop0): Total free blocks count 0 [ 83.119465][ T5941] EXT4-fs (loop0): Free/Dirty block details [ 83.147672][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.157388][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.163409][ T5941] EXT4-fs (loop0): free_blocks=2415919104 [ 83.175215][ T5941] EXT4-fs (loop0): dirty_blocks=16 [ 83.192248][ T5941] EXT4-fs (loop0): Block reservation details [ 83.209688][ T5941] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 83.238682][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.248593][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.302177][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.322637][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.460714][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.498773][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.556252][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.591642][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.621539][ T5950] loop1: detected capacity change from 0 to 128 [ 83.632277][ T5950] ======================================================= [ 83.632277][ T5950] WARNING: The mand mount option has been deprecated and [ 83.632277][ T5950] and is ignored by this kernel. Remove the mand [ 83.632277][ T5950] option from the mount to silence this warning. [ 83.632277][ T5950] ======================================================= [ 84.345815][ T5862] Bluetooth: hci1: command tx timeout [ 84.351316][ T5862] Bluetooth: hci0: command tx timeout [ 84.361198][ T5856] Bluetooth: hci3: command tx timeout [ 84.366799][ T5862] Bluetooth: hci4: command tx timeout [ 84.372340][ T5856] Bluetooth: hci2: command tx timeout [ 84.783125][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.675827][ T5950] EXT4-fs (loop1): Test dummy encryption mode enabled [ 85.700205][ T5950] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.796308][ T5950] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.047121][ T5950] fscrypt (loop1): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 86.265956][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.351765][ T5982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.582458][ T5988] netlink: 104 bytes leftover after parsing attributes in process `syz.3.13'. [ 90.171243][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20'. [ 90.565498][ T29] audit: type=1326 audit(1730734440.545:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 90.631010][ T29] audit: type=1326 audit(1730734440.555:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 90.668227][ T29] audit: type=1326 audit(1730734440.555:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 90.702550][ T29] audit: type=1326 audit(1730734440.555:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 90.735241][ T29] audit: type=1326 audit(1730734440.555:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 90.775044][ T29] audit: type=1326 audit(1730734440.555:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 91.280888][ T29] audit: type=1326 audit(1730734440.555:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 91.365006][ T29] audit: type=1326 audit(1730734440.555:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 91.399440][ T29] audit: type=1326 audit(1730734440.555:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 91.439526][ T29] audit: type=1326 audit(1730734440.555:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.4.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 92.441121][ T971] cfg80211: failed to load regulatory.db [ 92.472386][ T6038] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.762400][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 94.508596][ T58] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.964102][ T6062] loop1: detected capacity change from 0 to 1024 [ 94.987872][ T6062] EXT4-fs: Ignoring removed nobh option [ 95.053427][ T6062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.169923][ T58] usb 4-1: not running at top speed; connect to a high speed hub [ 95.186729][ T58] usb 4-1: config 8 has an invalid interface number: 90 but max is 0 [ 95.194983][ T58] usb 4-1: config 8 has no interface number 0 [ 95.206916][ T58] usb 4-1: config 8 interface 90 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 95.221478][ T58] usb 4-1: config 8 interface 90 has no altsetting 0 [ 95.323011][ T58] usb 4-1: string descriptor 0 read error: -22 [ 95.329746][ T58] usb 4-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=fa.53 [ 95.339807][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.354217][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.372866][ T6074] loop4: detected capacity change from 0 to 16 [ 95.424767][ T58] option 4-1:8.90: GSM modem (1-port) converter detected [ 95.458241][ T6074] erofs: (device loop4): erofs_read_inode: negative i_size @ nid 36 [ 95.587213][ T58] usb 4-1: USB disconnect, device number 2 [ 95.595486][ T58] option 4-1:8.90: device disconnected [ 95.726469][ T971] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.868871][ T6087] loop1: detected capacity change from 0 to 512 [ 95.896737][ T6087] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.975927][ T6087] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 96.327298][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.395042][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.862453][ T971] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 96.927307][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.011130][ T971] usb 1-1: config 0 descriptor?? [ 98.412499][ T6105] loop3: detected capacity change from 0 to 512 [ 98.503916][ T971] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 98.607331][ T6105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.620753][ T6105] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.941694][ T971] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 98.949869][ T971] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 98.960799][ T971] isku 0003:1E7D:319C.0001: probe with driver isku failed with error -32 [ 99.608717][ T971] usb 1-1: USB disconnect, device number 2 [ 100.899921][ T6126] loop1: detected capacity change from 0 to 128 [ 101.100635][ T6128] xt_hashlimit: size too large, truncated to 1048576 [ 101.155784][ T971] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 101.357855][ T971] usb 1-1: not running at top speed; connect to a high speed hub [ 101.377813][ T971] usb 1-1: config 8 has an invalid interface number: 90 but max is 0 [ 101.397957][ T971] usb 1-1: config 8 has no interface number 0 [ 101.411535][ T971] usb 1-1: config 8 interface 90 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 101.433027][ T971] usb 1-1: config 8 interface 90 has no altsetting 0 [ 101.464713][ T971] usb 1-1: string descriptor 0 read error: -22 [ 101.484572][ T971] usb 1-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=fa.53 [ 101.504036][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.543358][ T971] option 1-1:8.90: GSM modem (1-port) converter detected [ 101.757601][ T5930] usb 1-1: USB disconnect, device number 3 [ 101.768439][ T5930] option 1-1:8.90: device disconnected [ 103.037962][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 103.147563][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 103.593616][ T6139] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 104.454999][ T6144] loop0: detected capacity change from 0 to 256 [ 104.557809][ T6144] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 104.607907][ T6144] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 104.870907][ T6144] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 105.341940][ T6155] loop2: detected capacity change from 0 to 128 [ 105.365855][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.488589][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 105.488612][ T29] audit: type=1800 audit(1730734455.815:57): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.64" name="bus" dev="loop2" ino=1048602 res=0 errno=0 [ 105.558398][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.576023][ T5902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.605829][ T5902] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 105.625884][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.656028][ T6156] syz.2.64: attempt to access beyond end of device [ 105.656028][ T6156] loop2: rw=0, sector=121, nr_sectors = 119 limit=128 [ 105.668902][ T5902] usb 5-1: config 0 descriptor?? [ 105.867216][ T6094] kworker/u8:8: attempt to access beyond end of device [ 105.867216][ T6094] loop2: rw=1, sector=241, nr_sectors = 800 limit=128 [ 105.933833][ T29] audit: type=1804 audit(1730734456.255:58): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.61" name="/newroot/12/file2/file1" dev="loop0" ino=1048601 res=1 errno=0 [ 106.099375][ T5902] hid-thrustmaster 0003:044F:B65D.0002: unbalanced collection at end of report description [ 106.123084][ T5902] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 106.142832][ T5902] hid-thrustmaster 0003:044F:B65D.0002: probe with driver hid-thrustmaster failed with error -22 [ 106.379649][ T971] usb 5-1: USB disconnect, device number 2 [ 107.855168][ T6170] loop0: detected capacity change from 0 to 512 [ 107.963785][ T6170] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 108.176079][ T6175] capability: warning: `syz.0.70' uses 32-bit capabilities (legacy support in use) [ 108.259683][ T6176] cgroup: Unknown subsys name 'cpuset' [ 109.698306][ T6187] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.088907][ T6194] loop3: detected capacity change from 0 to 128 [ 111.233699][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.241999][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.389763][ T29] audit: type=1326 audit(1730734461.715:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 111.620803][ T29] audit: type=1326 audit(1730734461.765:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 111.792847][ T29] audit: type=1326 audit(1730734461.765:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 113.252242][ T6221] loop3: detected capacity change from 0 to 512 [ 113.265354][ T6229] loop1: detected capacity change from 0 to 256 [ 113.324183][ T6229] FAT-fs (loop1): Directory bread(block 64) failed [ 113.346956][ T6221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.376162][ T6229] FAT-fs (loop1): Directory bread(block 65) failed [ 113.398419][ T6221] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.427037][ T6229] FAT-fs (loop1): Directory bread(block 66) failed [ 113.433679][ T6229] FAT-fs (loop1): Directory bread(block 67) failed [ 113.509711][ T29] audit: type=1326 audit(1730734463.835:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 113.586221][ T6229] FAT-fs (loop1): Directory bread(block 68) failed [ 113.625851][ T6229] FAT-fs (loop1): Directory bread(block 69) failed [ 113.658842][ T29] audit: type=1326 audit(1730734463.835:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 113.688406][ T6229] FAT-fs (loop1): Directory bread(block 70) failed [ 113.695909][ T6229] FAT-fs (loop1): Directory bread(block 71) failed [ 113.702751][ T6229] FAT-fs (loop1): Directory bread(block 72) failed [ 113.709463][ T6229] FAT-fs (loop1): Directory bread(block 73) failed [ 113.779771][ T29] audit: type=1326 audit(1730734463.945:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 113.825930][ T6239] loop4: detected capacity change from 0 to 128 [ 114.413136][ T29] audit: type=1326 audit(1730734463.945:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 114.545996][ T29] audit: type=1326 audit(1730734463.945:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 114.614490][ T29] audit: type=1326 audit(1730734463.945:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 114.683755][ T29] audit: type=1326 audit(1730734463.945:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4f6cb7e719 code=0x7ffc0000 [ 115.395868][ T6246] loop4: detected capacity change from 0 to 256 [ 115.423799][ T6246] exfat: Invalid uid '0x00000000ffffffff' [ 115.483591][ T6246] loop4: detected capacity change from 0 to 256 [ 116.947066][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.948223][ T6287] loop4: detected capacity change from 0 to 256 [ 120.062440][ T6292] loop2: detected capacity change from 0 to 1024 [ 120.069516][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 120.069536][ T29] audit: type=1326 audit(1730734470.365:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.099000][ T29] audit: type=1326 audit(1730734470.365:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.122825][ T29] audit: type=1326 audit(1730734470.365:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.145803][ T29] audit: type=1326 audit(1730734470.365:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.220900][ T29] audit: type=1326 audit(1730734470.365:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.243402][ T29] audit: type=1326 audit(1730734470.365:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.266095][ T29] audit: type=1326 audit(1730734470.365:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.288497][ T29] audit: type=1326 audit(1730734470.365:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.311086][ T29] audit: type=1326 audit(1730734470.365:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.363413][ T29] audit: type=1326 audit(1730734470.365:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3251f7e719 code=0x7ffc0000 [ 120.937153][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.211635][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.481093][ T6308] loop1: detected capacity change from 0 to 2048 [ 121.610002][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.674995][ T5902] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.113882][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.186983][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 123.251943][ T5902] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 123.280950][ T5902] usb 5-1: config 0 has no interface number 0 [ 123.299515][ T5902] usb 5-1: config 0 interface 219 has no altsetting 0 [ 123.327274][ T5902] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 123.389603][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.340346][ T5902] usb 5-1: config 0 descriptor?? [ 124.372535][ T6332] tipc: Failed to remove unknown binding: 66,1,1/0:4276102314/4276102316 [ 124.436143][ T5902] usb 5-1: string descriptor 0 read error: -71 [ 124.476792][ T5902] usb 5-1: USB disconnect, device number 3 [ 124.906102][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.085968][ T5902] usb 5-1: Using ep0 maxpacket: 32 [ 125.092236][ T5902] usb 5-1: config 0 interface 0 altsetting 30 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.092297][ T5902] usb 5-1: config 0 interface 0 altsetting 30 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.092326][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 125.092360][ T5902] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 125.092387][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.098484][ T5902] usb 5-1: config 0 descriptor?? [ 125.520910][ T5902] hkems 0003:2006:0118.0003: bogus close delimiter [ 125.530292][ T5902] hkems 0003:2006:0118.0003: item 0 4 2 10 parsing failed [ 125.557485][ T5902] hkems 0003:2006:0118.0003: parse failed [ 125.592331][ T5902] hkems 0003:2006:0118.0003: probe with driver hkems failed with error -22 [ 125.725817][ T971] usb 5-1: USB disconnect, device number 4 [ 128.156272][ T5900] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.513096][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.525831][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.894462][ T5900] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 128.916916][ T6392] loop4: detected capacity change from 0 to 2048 [ 128.955871][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.974502][ T6392] ext4: Unknown parameter 'noacl' [ 129.027496][ T5900] usb 2-1: config 0 descriptor?? [ 129.551836][ T5900] elo 0003:04E7:0030.0004: item fetching failed at offset 5/7 [ 129.564435][ T5900] elo 0003:04E7:0030.0004: parse failed [ 129.571556][ T5900] elo 0003:04E7:0030.0004: probe with driver elo failed with error -22 [ 129.701083][ T5900] usb 2-1: USB disconnect, device number 2 [ 130.386043][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.447153][ T5905] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.735815][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 130.742578][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.754640][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.794591][ T5900] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 130.803978][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 131.575362][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.589139][ T5900] usb 3-1: config 0 descriptor?? [ 131.675979][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.718202][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.744436][ T5905] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 131.753959][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.685374][ T5905] usb 4-1: config 0 descriptor?? [ 132.715239][ T6433] loop1: detected capacity change from 0 to 512 [ 132.765377][ T6433] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 132.783652][ T6435] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 132.801162][ T6433] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e01c, mo2=0002] [ 132.815177][ T6433] System zones: 1-12 [ 132.836896][ T6433] EXT4-fs (loop1): orphan cleanup on readonly fs [ 132.843605][ T6433] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.149: Inode bitmap for bg 0 marked uninitialized [ 132.873331][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.900352][ T5900] usbhid 3-1:0.0: can't add hid device: -71 [ 132.910478][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 132.934713][ T5900] usb 3-1: USB disconnect, device number 2 [ 132.967006][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.106603][ T5856] Bluetooth: hci5: sending frame failed (-49) [ 133.116767][ T5905] savu 0003:1E7D:2D5A.0005: item fetching failed at offset 2/5 [ 133.128669][ T5865] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 133.136446][ T5905] savu 0003:1E7D:2D5A.0005: parse failed [ 133.142752][ T5905] savu 0003:1E7D:2D5A.0005: probe with driver savu failed with error -22 [ 133.183688][ T6444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (4205064 ns). Using initial count to start timer. [ 133.254345][ T6444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 133.379357][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.387033][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.426213][ T5900] usb 4-1: USB disconnect, device number 3 [ 134.451937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 135.989763][ T5902] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.597391][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.610052][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.742601][ T6485] Zero length message leads to an empty skb [ 137.248818][ T5902] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 137.359607][ T6490] netlink: 'syz.1.160': attribute type 3 has an invalid length. [ 137.420434][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.508275][ T5902] usb 4-1: config 0 descriptor?? [ 137.930364][ T5902] holtek_kbd 0003:04D9:A055.0006: unknown main item tag 0x0 [ 137.948590][ T5902] holtek_kbd 0003:04D9:A055.0006: item fetching failed at offset 3/5 [ 138.014568][ T5902] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 138.440556][ T5905] usb 4-1: USB disconnect, device number 4 [ 139.035978][ T6504] loop4: detected capacity change from 0 to 512 [ 139.136867][ T6504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.221583][ T6504] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 139.287144][ T6504] EXT4-fs (loop4): 1 truncate cleaned up [ 139.293905][ T6504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.433866][ T6513] block device autoloading is deprecated and will be removed. [ 139.471577][ T6513] syz.3.169: attempt to access beyond end of device [ 139.471577][ T6513] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 139.505387][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.514716][ T5902] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.689682][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.724621][ T5902] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.746300][ T6522] loop3: detected capacity change from 0 to 1024 [ 139.753639][ T5902] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 139.785761][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.831399][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.847510][ T5902] usb 3-1: config 0 descriptor?? [ 139.889912][ T6522] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.000266][ T6529] loop1: detected capacity change from 0 to 16 [ 140.011655][ T6529] erofs: (device loop1): mounted with root inode @ nid 36. [ 140.296176][ T5902] sony 0003:054C:024B.0007: unexpected long global item [ 140.328867][ T5902] sony 0003:054C:024B.0007: parse failed [ 140.346051][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.366354][ T5902] sony 0003:054C:024B.0007: probe with driver sony failed with error -22 [ 141.520281][ T5902] usb 3-1: USB disconnect, device number 3 [ 141.537243][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 141.590220][ T5900] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 141.599084][ T5900] usb 5-1: config 179 has no interface number 0 [ 141.605411][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 141.616621][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 141.628315][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 141.645748][ T5900] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 141.663372][ T5900] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 141.687442][ T5900] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 141.710212][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.818171][ T6527] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 142.224608][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 142.224629][ T29] audit: type=1804 audit(1730734492.545:117): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.173" name="/newroot/30/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 142.767376][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.774792][ T6554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.952577][ T6557] loop1: detected capacity change from 0 to 128 [ 142.956139][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.534298][ T5902] usb 5-1: USB disconnect, device number 5 [ 143.534319][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 143.549685][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 144.652157][ T6572] tracefs: Bad value for 'gid' [ 144.665970][ T6572] tracefs: Bad value for 'gid' [ 145.644119][ T6581] syzkaller0: entered promiscuous mode [ 145.656391][ T6581] syzkaller0: entered allmulticast mode [ 145.774871][ T6584] loop0: detected capacity change from 0 to 256 [ 146.086109][ T6586] capability: warning: `syz.4.190' uses deprecated v2 capabilities in a way that may be insecure [ 146.114769][ T6584] exfat: Invalid uid '0x00000000ffffffff' [ 146.181923][ T6584] loop0: detected capacity change from 0 to 256 [ 148.957613][ T6609] loop1: detected capacity change from 0 to 512 [ 149.036329][ T6609] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 149.177745][ T6609] EXT4-fs (loop1): 1 truncate cleaned up [ 149.184444][ T6609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.229550][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.380294][ T6623] xt_hashlimit: size too large, truncated to 1048576 [ 150.512574][ T6619] loop4: detected capacity change from 0 to 1024 [ 150.597375][ T6619] EXT4-fs: inline encryption not supported [ 150.626067][ T6619] EXT4-fs: Ignoring removed orlov option [ 150.663252][ T6619] EXT4-fs (loop4): Test dummy encryption mode enabled [ 150.708283][ T6619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.725978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 150.735175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 150.816001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 151.449791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 151.961803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.903160][ T6630] fscrypt (loop4): Error allocating 'xts(aes)' transform: -4 [ 153.043063][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.503133][ T6646] loop4: detected capacity change from 0 to 512 [ 154.532953][ T6646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 154.564735][ T6646] EXT4-fs (loop4): 1 truncate cleaned up [ 154.579485][ T6646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.733342][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.809527][ T6650] loop4: detected capacity change from 0 to 128 [ 154.855865][ T6650] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.873225][ T6650] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.965128][ T5848] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.411829][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.608236][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 156.644159][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.655206][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 156.665664][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 156.679158][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.689050][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.713500][ T6657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 156.730284][ T25] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 157.052147][ T25] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 157.062636][ T25] usb 5-1: USB disconnect, device number 6 [ 157.161404][ T6661] loop0: detected capacity change from 0 to 256 [ 157.177351][ T6661] vfat: Bad value for 'dmask' [ 158.361686][ T6667] loop0: detected capacity change from 0 to 512 [ 158.370299][ T6667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.439720][ T6667] EXT4-fs (loop0): 1 truncate cleaned up [ 158.465123][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.602862][ T29] audit: type=1326 audit(1730734508.925:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 158.693245][ T29] audit: type=1326 audit(1730734508.975:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 158.730436][ T29] audit: type=1326 audit(1730734508.975:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 159.863251][ T29] audit: type=1326 audit(1730734508.975:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 161.625552][ T6688] loop3: detected capacity change from 0 to 512 [ 161.625745][ T29] audit: type=1326 audit(1730734508.975:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 161.837682][ T29] audit: type=1326 audit(1730734508.975:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 161.907404][ T29] audit: type=1326 audit(1730734508.975:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 161.931446][ T29] audit: type=1326 audit(1730734508.975:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 161.954728][ T29] audit: type=1326 audit(1730734508.975:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 162.021340][ T29] audit: type=1326 audit(1730734508.975:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6676 comm="syz.4.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x7ffc0000 [ 162.050192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 162.230019][ T6688] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.242808][ T6688] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.305897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.795857][ T6685] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.806037][ T6685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.870006][ T6685] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 163.900779][ T6685] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.910251][ T6685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.932230][ T6685] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 163.965590][ T6685] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.990693][ T6685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.017705][ T6685] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 164.034486][ T6685] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 164.051518][ T6685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.118647][ T6685] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 164.221795][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.218600][ T6717] usb usb7: usbfs: process 6717 (syz.4.225) did not claim interface 0 before use [ 165.262369][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.315732][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 165.315756][ T29] audit: type=1326 audit(1730734515.555:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24b37e719 code=0x0 [ 165.408329][ T5852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.940528][ T5856] Bluetooth: hci2: command 0x0c1a tx timeout [ 166.021635][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.072235][ T1146] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.104452][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.255750][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.291811][ T6727] loop4: detected capacity change from 0 to 16 [ 166.345955][ T6730] loop1: detected capacity change from 0 to 16 [ 166.376156][ T6727] erofs: (device loop4): mounted with root inode @ nid 36. [ 166.394877][ T6730] erofs: (device loop1): mounted with root inode @ nid 36. [ 166.448980][ T6731] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 166.451451][ T1146] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.453013][ T6731] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 166.454447][ T6731] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 166.457230][ T6731] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 166.459540][ T6731] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 166.758101][ T5902] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.885900][ T5902] usb 5-1: device descriptor read/64, error -71 [ 166.934897][ T1146] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.208185][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 167.234912][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 167.237792][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 167.238962][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 167.239604][ T5865] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 167.240249][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 167.361060][ T6738] loop1: detected capacity change from 0 to 128 [ 167.459072][ T1146] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.016609][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 168.036709][ T5902] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.103157][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.165992][ T5902] usb 5-1: device descriptor read/64, error -71 [ 168.176972][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 168.235882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 168.238771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 168.383516][ T5902] usb usb5-port1: attempt power cycle [ 168.395945][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.495802][ T5902] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.525275][ T5865] Bluetooth: hci1: command tx timeout [ 169.594373][ T5902] usb 5-1: device descriptor read/8, error -71 [ 169.667897][ T1146] bridge_slave_1: left allmulticast mode [ 169.668030][ T1146] bridge_slave_1: left promiscuous mode [ 169.669926][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.704268][ T1146] bridge_slave_0: left allmulticast mode [ 169.704300][ T1146] bridge_slave_0: left promiscuous mode [ 169.704460][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.095856][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 170.187706][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.255938][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 172.440247][ T5865] Bluetooth: hci1: command tx timeout [ 173.288246][ T6783] loop1: detected capacity change from 0 to 512 [ 173.475909][ T6783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.488983][ T6783] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.211979][ T6793] loop3: detected capacity change from 0 to 512 [ 174.271837][ T6793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.514869][ T5865] Bluetooth: hci1: command tx timeout [ 174.689296][ T6793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.824259][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.925940][ T6793] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.956371][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.013701][ T1146] bond0 (unregistering): Released all slaves [ 175.056694][ T29] audit: type=1800 audit(1730734525.375:149): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 175.173087][ T29] audit: type=1800 audit(1730734525.385:150): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 175.202178][ T6782] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.209255][ T6782] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.215434][ T6782] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.221611][ T6782] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 175.227724][ T6782] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.233758][ T6782] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.288644][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.302210][ T6735] chnl_net:caif_netlink_parms(): no params data found [ 175.330571][ T6782] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 175.447399][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.617001][ T6790] loop2: detected capacity change from 0 to 40427 [ 175.833038][ T6809] loop1: detected capacity change from 0 to 16 [ 175.859016][ T6809] erofs: (device loop1): mounted with root inode @ nid 36. [ 175.874098][ T6790] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 176.121075][ T6790] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 176.624186][ T6816] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 176.639163][ T6816] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 176.651511][ T6816] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 176.663368][ T6816] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 176.676705][ T6816] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 177.006038][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.156468][ T5905] usb 2-1: device descriptor read/64, error -71 [ 177.173178][ T6790] F2FS-fs (loop2): invalid crc value [ 177.205010][ T6790] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 177.222633][ T6790] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 177.382587][ T5865] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.388886][ T5865] Bluetooth: hci4: command 0x0c1a tx timeout [ 177.394949][ T5865] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.402105][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.408210][ T5865] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.427743][ T6735] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.435001][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.485879][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.520877][ T6735] bridge_slave_0: entered allmulticast mode [ 177.550318][ T6735] bridge_slave_0: entered promiscuous mode [ 178.220212][ T5905] usb 2-1: device descriptor read/64, error -71 [ 178.461352][ T5905] usb usb2-port1: attempt power cycle [ 178.515873][ T29] audit: type=1326 audit(1730734528.825:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 178.590959][ T29] audit: type=1326 audit(1730734528.825:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 178.786496][ T29] audit: type=1326 audit(1730734528.825:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 179.414710][ T29] audit: type=1326 audit(1730734528.825:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 179.595929][ T29] audit: type=1326 audit(1730734528.825:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 179.645772][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.721476][ T29] audit: type=1326 audit(1730734528.825:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 179.742477][ T6840] loop1: detected capacity change from 0 to 512 [ 179.819735][ T6842] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.037649][ T29] audit: type=1326 audit(1730734528.825:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.113142][ T6735] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.120579][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.149522][ T6840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 180.184755][ T6735] bridge_slave_1: entered allmulticast mode [ 180.216928][ T6735] bridge_slave_1: entered promiscuous mode [ 180.225139][ T6843] loop3: detected capacity change from 0 to 2048 [ 180.236128][ T6840] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.275787][ T29] audit: type=1326 audit(1730734528.825:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.298111][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.344477][ T29] audit: type=1326 audit(1730734528.825:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.367385][ T29] audit: type=1326 audit(1730734528.825:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.390424][ T29] audit: type=1326 audit(1730734528.825:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.412766][ T29] audit: type=1326 audit(1730734528.825:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.648728][ T29] audit: type=1326 audit(1730734528.825:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 180.963187][ T29] audit: type=1326 audit(1730734528.825:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 181.249393][ T6850] loop3: p1 < > p4 [ 181.273154][ T29] audit: type=1326 audit(1730734528.825:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 182.051720][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 182.065796][ T29] audit: type=1326 audit(1730734528.825:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 182.125148][ T29] audit: type=1326 audit(1730734528.825:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6829 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38277e719 code=0x7ffc0000 [ 182.210325][ T6735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.294547][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 182.311298][ T6867] loop4: detected capacity change from 0 to 512 [ 182.343463][ T6850] loop3: p4 size 8388608 extends beyond EOD, truncated [ 182.383739][ T6867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.253: bg 0: block 5: invalid block bitmap [ 182.415291][ T1146] hsr_slave_0: left promiscuous mode [ 182.442058][ T6867] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 182.456718][ T1146] hsr_slave_1: left promiscuous mode [ 182.462215][ T6867] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.253: attempt to clear invalid blocks 9508352 len 1 [ 182.651066][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.749393][ T6867] EXT4-fs (loop4): 1 orphan inode deleted [ 182.823528][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.869835][ T6867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.011949][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.123092][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 183.139590][ T6148] udevd[6148]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 183.153257][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.258139][ T1146] veth1_macvtap: left promiscuous mode [ 183.264217][ T1146] veth0_macvtap: left promiscuous mode [ 183.270047][ T1146] veth1_vlan: left promiscuous mode [ 183.303639][ T1146] veth0_vlan: left promiscuous mode [ 183.340719][ T5221] loop3: p1 < > p4 [ 183.406328][ T5221] loop3: p4 size 8388608 extends beyond EOD, truncated [ 184.174670][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.181114][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 184.187879][ T5863] udevd[5863]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 184.792822][ T6885] loop3: detected capacity change from 0 to 1024 [ 184.824185][ T6885] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 185.861401][ T6897] loop3: detected capacity change from 0 to 512 [ 185.908543][ T6897] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 185.959241][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 185.959260][ T29] audit: type=1326 audit(1730734536.285:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.4.263" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb24b37e719 code=0x0 [ 186.069229][ T6897] EXT4-fs (loop3): 1 truncate cleaned up [ 186.106542][ T6897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.174176][ T6902] loop4: detected capacity change from 0 to 2048 [ 186.209449][ T29] audit: type=1800 audit(1730734536.525:207): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.262" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 186.318667][ T6902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.397643][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.439556][ T29] audit: type=1800 audit(1730734536.755:208): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.263" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 186.452490][ T6908] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 186.654499][ T1146] team0 (unregistering): Port device team_slave_1 removed [ 186.705351][ T1146] team0 (unregistering): Port device team_slave_0 removed [ 186.800713][ T5848] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.108711][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.108827][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.128977][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.161055][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.180257][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.204273][ T6914] syz.1.267[6914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.526010][ T5902] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 187.674267][ T6735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.210349][ T5902] usb 5-1: not running at top speed; connect to a high speed hub [ 188.220417][ T5902] usb 5-1: config 8 has an invalid interface number: 90 but max is 0 [ 188.253992][ T5902] usb 5-1: config 8 has no interface number 0 [ 188.300569][ T5902] usb 5-1: config 8 interface 90 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 188.316453][ T5902] usb 5-1: config 8 interface 90 has no altsetting 0 [ 188.331727][ T5902] usb 5-1: string descriptor 0 read error: -22 [ 188.340791][ T5902] usb 5-1: New USB device found, idVendor=12d1, idProduct=14ac, bcdDevice=fa.53 [ 188.352183][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.381727][ T5902] option 5-1:8.90: GSM modem (1-port) converter detected [ 188.413014][ T6928] ------------[ cut here ]------------ [ 188.419444][ T6928] kernel BUG at arch/x86/mm/physaddr.c:23! [ 188.428470][ T6928] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 188.435498][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.1.272 Not tainted 6.12.0-rc5-next-20241104-syzkaller #0 [ 188.445608][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.455713][ T6928] RIP: 0010:__phys_addr+0x16a/0x170 [ 188.460980][ T6928] Code: 40 ca 7a 8e 4c 89 f6 4c 89 fa e8 71 70 aa 03 e9 45 ff ff ff e8 e7 23 52 00 90 0f 0b e8 df 23 52 00 90 0f 0b e8 d7 23 52 00 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 188.480635][ T6928] RSP: 0018:ffffc900183b7d90 EFLAGS: 00010283 [ 188.481969][ T6931] loop2: detected capacity change from 0 to 512 [ 188.486725][ T6928] RAX: ffffffff8143a349 RBX: 000000007ffffff2 RCX: 0000000000040000 [ 188.486746][ T6928] RDX: ffffc900049b1000 RSI: 0000000000000772 RDI: 0000000000000773 [ 188.486763][ T6928] RBP: 1ffff110049b0089 R08: ffffffff8143a2e5 R09: 1ffffffff203957e [ 188.486780][ T6928] R10: dffffc0000000000 R11: fffffbfff203957f R12: dffffc0000000000 [ 188.486798][ T6928] R13: fffffffffffffff2 R14: 000000007ffffff2 R15: ffff888024d80408 [ 188.486816][ T6928] FS: 00007f3252d1a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 188.486836][ T6928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.486853][ T6928] CR2: fffffffffffffff8 CR3: 000000005c7ee000 CR4: 00000000003526f0 [ 188.486873][ T6928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 188.486889][ T6928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 188.486905][ T6928] Call Trace: [ 188.486913][ T6928] [ 188.486923][ T6928] ? __die_body+0x5f/0xb0 [ 188.486951][ T6928] ? die+0x9e/0xc0 [ 188.486974][ T6928] ? do_trap+0x15a/0x3a0 [ 188.487008][ T6928] ? __phys_addr+0x16a/0x170 [ 188.487033][ T6928] ? do_error_trap+0x1dc/0x2c0 [ 188.600372][ T6928] ? __phys_addr+0x16a/0x170 [ 188.604986][ T6928] ? __pfx_do_error_trap+0x10/0x10 [ 188.610120][ T6928] ? handle_invalid_op+0x34/0x40 [ 188.615076][ T6928] ? __phys_addr+0x16a/0x170 [ 188.619674][ T6928] ? exc_invalid_op+0x38/0x50 [ 188.624362][ T6928] ? asm_exc_invalid_op+0x1a/0x20 [ 188.629405][ T6928] ? __phys_addr+0x105/0x170 [ 188.634005][ T6928] ? __phys_addr+0x169/0x170 [ 188.638615][ T6928] ? __phys_addr+0x16a/0x170 [ 188.643213][ T6928] ? free_bprm+0x2b5/0x300 [ 188.647654][ T6928] kfree+0x71/0x420 [ 188.651472][ T6928] ? free_bprm+0x295/0x300 [ 188.655908][ T6928] free_bprm+0x2b5/0x300 [ 188.660188][ T6928] do_execveat_common+0x3bb/0x770 [ 188.665323][ T6928] __x64_sys_execveat+0xc4/0xe0 [ 188.670192][ T6928] do_syscall_64+0xf3/0x230 [ 188.674726][ T6928] ? clear_bhb_loop+0x35/0x90 [ 188.679424][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.685333][ T6928] RIP: 0033:0x7f3251f7e719 [ 188.689771][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.709392][ T6928] RSP: 002b:00007f3252d1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 188.717823][ T6928] RAX: ffffffffffffffda RBX: 00007f3252135f80 RCX: 00007f3251f7e719 [ 188.725812][ T6928] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 188.733795][ T6928] RBP: 00007f3251ff132e R08: 0000000000001000 R09: 0000000000000000 [ 188.741777][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.749758][ T6928] R13: 0000000000000000 R14: 00007f3252135f80 R15: 00007ffc3f5e66c8 [ 188.757834][ T6928] [ 188.760860][ T6928] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 188.765773][ T6928] ---[ end trace 0000000000000000 ]--- [ 188.773637][ T6928] RIP: 0010:__phys_addr+0x16a/0x170 [ 188.779218][ T6928] Code: 40 ca 7a 8e 4c 89 f6 4c 89 fa e8 71 70 aa 03 e9 45 ff ff ff e8 e7 23 52 00 90 0f 0b e8 df 23 52 00 90 0f 0b e8 d7 23 52 00 90 <0f> 0b 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 188.802396][ T6735] team0: Port device team_slave_0 added [ 188.819334][ T6735] team0: Port device team_slave_1 added [ 188.841856][ T5905] usb 5-1: USB disconnect, device number 11 [ 188.848518][ T5905] option 5-1:8.90: device disconnected [ 188.956230][ T6928] RSP: 0018:ffffc900183b7d90 EFLAGS: 00010283 [ 188.962384][ T6928] RAX: ffffffff8143a349 RBX: 000000007ffffff2 RCX: 0000000000040000 [ 188.979906][ T6928] RDX: ffffc900049b1000 RSI: 0000000000000772 RDI: 0000000000000773 [ 188.988170][ T6928] RBP: 1ffff110049b0089 R08: ffffffff8143a2e5 R09: 1ffffffff203957e [ 188.996421][ T6928] R10: dffffc0000000000 R11: fffffbfff203957f R12: dffffc0000000000 [ 189.085425][ T6931] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 189.085499][ T6931] EXT4-fs: failed to create workqueue [ 189.102820][ T6928] R13: fffffffffffffff2 R14: 000000007ffffff2 R15: ffff888024d80408 [ 189.115709][ T6931] EXT4-fs (loop2): mount failed [ 189.121296][ T6928] FS: 00007f3252d1a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 189.134524][ T6928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.143182][ T6928] CR2: 0000000020056000 CR3: 000000005c7ee000 CR4: 00000000003526f0 [ 189.152242][ T6928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.160707][ T6928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.169190][ T6928] Kernel panic - not syncing: Fatal exception [ 189.175621][ T6928] Kernel Offset: disabled [ 189.179956][ T6928] Rebooting in 86400 seconds..