last executing test programs: 4m17.445441545s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 4m16.658677588s ago: executing program 2 (id=3): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 4m16.476360306s ago: executing program 3 (id=6): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) 4m15.337903828s ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111980000000000180000000000000000000000000000009500000002000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 4m13.618661122s ago: executing program 2 (id=10): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x1000, 0x8, 0xfffffff8, 0x6, 0x9, 0x6, 0x9, 0xb, 0x800, 0x3, 0x6, 0x7, 0x447, 0xf, 0x7f, 0xffffffff, 0x9, 0x80, 0x0, 0x6, 0x80f7, 0x4, 0xfce, 0x5, 0x1, 0x1, 0xd, 0x8, 0x5, 0x1, 0x1, 0x80000000, 0x3, 0x2, 0xa, 0x5, 0x9, 0x4, 0xfffffffb, 0x5, 0x2, 0x9, 0x21, 0x8, 0x0, 0x80000001, 0x5, 0xd, 0x9, 0x6, 0x7fffffff, 0x421, 0x5, 0xf6f, 0x8, 0x5, 0x5, 0x1, 0xffffffff, 0x8, 0x4, 0xfffffff8, 0xe, 0x1, 0x6, 0xd7, 0x9, 0x6, 0x5, 0xff, 0x2, 0x1, 0x9, 0x7edd, 0xfffffffc, 0xd7f, 0x1, 0x94, 0x4, 0x9, 0x7, 0x8, 0xffff, 0x9, 0x1, 0x400, 0x2, 0x8, 0x3, 0x200, 0xfffff282, 0x5, 0x5, 0x5, 0xa, 0x9, 0x0, 0x3, 0x48a, 0x9a000000, 0x4, 0x0, 0x3be, 0x5, 0x3, 0xff, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x2, 0x6, 0x7a, 0xe, 0xffff, 0x9, 0xd, 0x3, 0x7, 0x8, 0x800, 0x1, 0x3, 0x8000, 0x5, 0xb, 0xfffffffd], "4f11cc688c5464d4345c8800d1f0616b0cac23a004a937a262dbb10e93710b532f4e472bb4feaaecb84178ad52479f4ddec2ba11934c051a3a7972fc60d7ea197f6a2d119ce5230ab28df19ff9340aa0b63866074fcd900f2cb104c6f0098c10c1934ecaad178b1ac3ae9ca51de7ef02920720112b2e4b1945252a2b32808f91ae891b537f219a39d4ca86a09c57ff51fca0ad305b0f31653df2554cbb8ff6f7"}}) 4m1.017860254s ago: executing program 32 (id=6): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x801) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) 3m57.840505458s ago: executing program 33 (id=10): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000380)=@ethtool_per_queue_op={0x4b, 0xe, [0x1000, 0x8, 0xfffffff8, 0x6, 0x9, 0x6, 0x9, 0xb, 0x800, 0x3, 0x6, 0x7, 0x447, 0xf, 0x7f, 0xffffffff, 0x9, 0x80, 0x0, 0x6, 0x80f7, 0x4, 0xfce, 0x5, 0x1, 0x1, 0xd, 0x8, 0x5, 0x1, 0x1, 0x80000000, 0x3, 0x2, 0xa, 0x5, 0x9, 0x4, 0xfffffffb, 0x5, 0x2, 0x9, 0x21, 0x8, 0x0, 0x80000001, 0x5, 0xd, 0x9, 0x6, 0x7fffffff, 0x421, 0x5, 0xf6f, 0x8, 0x5, 0x5, 0x1, 0xffffffff, 0x8, 0x4, 0xfffffff8, 0xe, 0x1, 0x6, 0xd7, 0x9, 0x6, 0x5, 0xff, 0x2, 0x1, 0x9, 0x7edd, 0xfffffffc, 0xd7f, 0x1, 0x94, 0x4, 0x9, 0x7, 0x8, 0xffff, 0x9, 0x1, 0x400, 0x2, 0x8, 0x3, 0x200, 0xfffff282, 0x5, 0x5, 0x5, 0xa, 0x9, 0x0, 0x3, 0x48a, 0x9a000000, 0x4, 0x0, 0x3be, 0x5, 0x3, 0xff, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x2, 0x6, 0x7a, 0xe, 0xffff, 0x9, 0xd, 0x3, 0x7, 0x8, 0x800, 0x1, 0x3, 0x8000, 0x5, 0xb, 0xfffffffd], "4f11cc688c5464d4345c8800d1f0616b0cac23a004a937a262dbb10e93710b532f4e472bb4feaaecb84178ad52479f4ddec2ba11934c051a3a7972fc60d7ea197f6a2d119ce5230ab28df19ff9340aa0b63866074fcd900f2cb104c6f0098c10c1934ecaad178b1ac3ae9ca51de7ef02920720112b2e4b1945252a2b32808f91ae891b537f219a39d4ca86a09c57ff51fca0ad305b0f31653df2554cbb8ff6f7"}}) 3m13.878922104s ago: executing program 1 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 3m11.919301173s ago: executing program 1 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) 3m8.654369883s ago: executing program 1 (id=87): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2bf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.614687836s ago: executing program 1 (id=90): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2c203, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) io_setup(0x1ff, &(0x7f0000001540)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x5, 0x0, r6, &(0x7f00000002c0)}]) socket$tipc(0x1e, 0x2, 0x0) 3m2.383963317s ago: executing program 1 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00') 3m1.830339127s ago: executing program 4 (id=95): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x8, r1) tgkill(r1, r1, 0x1a) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 3m1.039843113s ago: executing program 1 (id=97): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x18) listen(r2, 0x3) 2m59.239619953s ago: executing program 4 (id=98): pipe2(0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 2m58.072898854s ago: executing program 4 (id=99): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) set_robust_list(&(0x7f0000000540)={0x0, 0x40}, 0x18) 2m56.042005805s ago: executing program 4 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) symlinkat(0x0, r6, &(0x7f0000000140)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000003c0)=""/206, 0xce) 2m53.899906679s ago: executing program 4 (id=104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) socketpair(0x1, 0xf, 0x1, &(0x7f0000000000)) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(0x0, r7) sendmsg$IEEE802154_SCAN_REQ(r6, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c980)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r9, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x11) unshare(0x8020080) 2m50.513545845s ago: executing program 4 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x20040081) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 2m45.051671915s ago: executing program 34 (id=97): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x18) listen(r2, 0x3) 2m34.776918277s ago: executing program 35 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={0x0, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x20040081) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 2m17.631655669s ago: executing program 0 (id=124): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20e101, 0x194) pidfd_getfd(r0, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2m16.483946097s ago: executing program 0 (id=125): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(&(0x7f0000000540)={0x0, 0x40}, 0x18) 2m15.034385703s ago: executing program 0 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 2m13.687193711s ago: executing program 0 (id=127): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$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") chdir(&(0x7f0000000540)='./file0\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m10.91853924s ago: executing program 0 (id=128): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086e81, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r2 = dup(r1) rt_sigaction(0x20, 0x0, &(0x7f0000000380)={&(0x7f0000000280)="f20f34c4e1f82b710026f3440faedac4e27d1d318f491891c6c4617167302e3e660fe6a30e000000f04383720406426e420f01da", 0x0, 0x0}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m8.394982487s ago: executing program 0 (id=129): socket(0xf, 0x2, 0x100) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$inet6(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0xfffffffe, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x767cdaec, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x7f, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m52.803535347s ago: executing program 36 (id=129): socket(0xf, 0x2, 0x100) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$inet6(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0xfffffffe, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x767cdaec, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x7f, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 28.867575437s ago: executing program 8 (id=187): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x400, 0x13c) 27.119499896s ago: executing program 8 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 26.650889312s ago: executing program 9 (id=191): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20e101, 0x194) pidfd_getfd(r0, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 25.550292941s ago: executing program 8 (id=192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800) 24.040923917s ago: executing program 9 (id=194): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000340)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4b2, &(0x7f0000001500)="$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") r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$hiddev(&(0x7f0000001c80), 0x7ec, 0x3) read$hiddev(r1, &(0x7f0000001cc0)=""/163, 0xa3) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x79, 0x0, 0x0, 0xe7}, @initr0, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) 23.771315286s ago: executing program 8 (id=195): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r3) 22.614972192s ago: executing program 8 (id=198): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 20.255477064s ago: executing program 8 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 17.69770562s ago: executing program 9 (id=202): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x5, 0x6, 0x1000, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x9, 0x1, 0x7fff, 0x7, 0x4000, 0xe, r5, 0x0, 0x4, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 16.120613532s ago: executing program 9 (id=205): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800) 15.141014267s ago: executing program 9 (id=208): finit_module(0xffffffffffffffff, 0x0, 0x1) 14.205982389s ago: executing program 9 (id=211): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() tkill(r0, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="110000004200015b"], 0x18}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1ed, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r6, 0xaa1f, 0xff39, 0x3) 11.617886172s ago: executing program 5 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) statfs(&(0x7f0000000ac0)='.\x00', &(0x7f0000000b00)=""/231) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r3, 0x82, 0x5, &(0x7f0000002340)='hello') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 10.17890069s ago: executing program 7 (id=214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 9.056967653s ago: executing program 7 (id=215): r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x20e101, 0x194) pidfd_getfd(r0, r1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b0000000000"], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 8.246368399s ago: executing program 5 (id=216): getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x6c, &(0x7f0000000080)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010100, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x40, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) 8.050763884s ago: executing program 7 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x0, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x2c}}, 0x20044800) 7.299728526s ago: executing program 5 (id=218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = socket(0x10, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0xa721) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r4, r4, 0x0) write(r3, &(0x7f0000000200)="08a124e1394a8548843882b4467df9c7418325f3b113fc6b", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090401"], 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)) 7.253560841s ago: executing program 7 (id=219): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)='./file0\x00') 4.792527914s ago: executing program 37 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 3.76774742s ago: executing program 5 (id=221): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x800, &(0x7f00000005c0)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@uni_xlate}]}, 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdirat(r0, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x20040, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) 2.479541821s ago: executing program 7 (id=222): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 1.655048716s ago: executing program 5 (id=223): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x2, {0x0, 0x8, 0x0, {0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0, 0x200000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 387.875942ms ago: executing program 7 (id=224): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) r2 = dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff9, @ipv4}, 0x1c) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x200000d1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x3, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x545}, {0x4, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x24040014) 0s ago: executing program 5 (id=225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 23] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.342578][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.361151][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.512993][ T5826] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.551531][ T5826] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.594837][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.690735][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.715030][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.937569][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 272.984589][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 273.339975][ T5826] Bluetooth: hci0: command tx timeout [ 273.401316][ T5826] Bluetooth: hci3: command tx timeout [ 273.411420][ T5826] Bluetooth: hci1: command tx timeout [ 273.412591][ T5823] Bluetooth: hci2: command tx timeout [ 273.583941][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 273.805712][ T5823] Bluetooth: hci4: command tx timeout [ 274.033915][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 274.394861][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 274.422172][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.430040][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.461923][ T5819] bridge_slave_0: entered allmulticast mode [ 274.472961][ T5819] bridge_slave_0: entered promiscuous mode [ 274.555097][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.565046][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.573986][ T5819] bridge_slave_1: entered allmulticast mode [ 274.584603][ T5819] bridge_slave_1: entered promiscuous mode [ 274.910714][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.927143][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.935177][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.944546][ T5818] bridge_slave_0: entered allmulticast mode [ 274.954780][ T5818] bridge_slave_0: entered promiscuous mode [ 274.991182][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.064528][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.073257][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.081268][ T5818] bridge_slave_1: entered allmulticast mode [ 275.091547][ T5818] bridge_slave_1: entered promiscuous mode [ 275.370813][ T5819] team0: Port device team_slave_0 added [ 275.408803][ T5823] Bluetooth: hci0: command tx timeout [ 275.481218][ T5823] Bluetooth: hci2: command tx timeout [ 275.486956][ T5823] Bluetooth: hci3: command tx timeout [ 275.493089][ T5826] Bluetooth: hci1: command tx timeout [ 275.531972][ T5819] team0: Port device team_slave_1 added [ 275.552475][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.626352][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.636551][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.644574][ T5817] bridge_slave_0: entered allmulticast mode [ 275.654682][ T5817] bridge_slave_0: entered promiscuous mode [ 275.737783][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.867731][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.877249][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.885412][ T5817] bridge_slave_1: entered allmulticast mode [ 275.892018][ T5823] Bluetooth: hci4: command tx timeout [ 275.895459][ T5817] bridge_slave_1: entered promiscuous mode [ 276.037050][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.044881][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.053418][ T5832] bridge_slave_0: entered allmulticast mode [ 276.063433][ T5832] bridge_slave_0: entered promiscuous mode [ 276.115335][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.123172][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.131325][ T5825] bridge_slave_0: entered allmulticast mode [ 276.141492][ T5825] bridge_slave_0: entered promiscuous mode [ 276.156540][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.166346][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.174506][ T5825] bridge_slave_1: entered allmulticast mode [ 276.184785][ T5825] bridge_slave_1: entered promiscuous mode [ 276.205316][ T5818] team0: Port device team_slave_0 added [ 276.259345][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.266739][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.294325][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.307154][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.315362][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.323287][ T5832] bridge_slave_1: entered allmulticast mode [ 276.333602][ T5832] bridge_slave_1: entered promiscuous mode [ 276.390553][ T5818] team0: Port device team_slave_1 added [ 276.413186][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.463331][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.470993][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.498059][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.615961][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.638587][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.669981][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.895194][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.927445][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.934963][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.961633][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.102091][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.114654][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.122112][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.149046][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.189224][ T5817] team0: Port device team_slave_0 added [ 277.209076][ T5817] team0: Port device team_slave_1 added [ 277.231687][ T5819] hsr_slave_0: entered promiscuous mode [ 277.241249][ T5819] hsr_slave_1: entered promiscuous mode [ 277.258070][ T5825] team0: Port device team_slave_0 added [ 277.396710][ T5825] team0: Port device team_slave_1 added [ 277.462222][ T5832] team0: Port device team_slave_0 added [ 277.481349][ T5823] Bluetooth: hci0: command tx timeout [ 277.515884][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.523251][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.550126][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.563989][ T5823] Bluetooth: hci3: command tx timeout [ 277.565745][ T49] Bluetooth: hci1: command tx timeout [ 277.569576][ T5823] Bluetooth: hci2: command tx timeout [ 277.663293][ T5832] team0: Port device team_slave_1 added [ 277.752821][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.760079][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.787416][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.850474][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.857919][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.885014][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.961442][ T5823] Bluetooth: hci4: command tx timeout [ 278.000572][ T5818] hsr_slave_0: entered promiscuous mode [ 278.011790][ T5818] hsr_slave_1: entered promiscuous mode [ 278.020637][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.029156][ T5818] Cannot create hsr debugfs directory [ 278.038347][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.046489][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.073157][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.088257][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.095705][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.122863][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.275945][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.283456][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.310685][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.668549][ T5817] hsr_slave_0: entered promiscuous mode [ 278.679543][ T5817] hsr_slave_1: entered promiscuous mode [ 278.689077][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.698775][ T5817] Cannot create hsr debugfs directory [ 278.845884][ T5825] hsr_slave_0: entered promiscuous mode [ 278.856581][ T5825] hsr_slave_1: entered promiscuous mode [ 278.866050][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.874086][ T5825] Cannot create hsr debugfs directory [ 279.105788][ T5832] hsr_slave_0: entered promiscuous mode [ 279.116606][ T5832] hsr_slave_1: entered promiscuous mode [ 279.128892][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.137022][ T5832] Cannot create hsr debugfs directory [ 279.572513][ T5823] Bluetooth: hci0: command tx timeout [ 279.641749][ T5823] Bluetooth: hci1: command tx timeout [ 279.647800][ T5826] Bluetooth: hci2: command tx timeout [ 279.653921][ T49] Bluetooth: hci3: command tx timeout [ 280.041662][ T5823] Bluetooth: hci4: command tx timeout [ 280.372533][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.399456][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.426947][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.470422][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.580572][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.632916][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.683358][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.713707][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.921508][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.986111][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.087094][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.113445][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.267525][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.296200][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.385882][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.419849][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.522263][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.682904][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.743229][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.836726][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.319298][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.469323][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.558931][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.614569][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.698491][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.772204][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.779964][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.814771][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.877227][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.885104][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.969421][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.977222][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.994965][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.002825][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.044291][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.052105][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.111242][ T3871] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.119069][ T3871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.168815][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.415544][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.634075][ T3793] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.641956][ T3793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.778203][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.786213][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.945514][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.233443][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.389135][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.396987][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.501929][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.509710][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.130009][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.232712][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.586488][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.834376][ T5819] veth0_vlan: entered promiscuous mode [ 286.913775][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.012023][ T5819] veth1_vlan: entered promiscuous mode [ 287.089835][ T5817] veth0_vlan: entered promiscuous mode [ 287.311138][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.329936][ T5818] veth0_vlan: entered promiscuous mode [ 287.345612][ T5817] veth1_vlan: entered promiscuous mode [ 287.487845][ T5818] veth1_vlan: entered promiscuous mode [ 287.585343][ T5832] veth0_vlan: entered promiscuous mode [ 287.620033][ T5819] veth0_macvtap: entered promiscuous mode [ 287.789208][ T5819] veth1_macvtap: entered promiscuous mode [ 287.880432][ T5832] veth1_vlan: entered promiscuous mode [ 287.933055][ T5817] veth0_macvtap: entered promiscuous mode [ 287.999555][ T5818] veth0_macvtap: entered promiscuous mode [ 288.074659][ T5817] veth1_macvtap: entered promiscuous mode [ 288.135281][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.154909][ T5818] veth1_macvtap: entered promiscuous mode [ 288.237285][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.337232][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.421501][ T5819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.430640][ T5819] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.440587][ T5819] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.449890][ T5819] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.560650][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.615369][ T5832] veth0_macvtap: entered promiscuous mode [ 288.654716][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.691672][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.701109][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.710212][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.719967][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.790805][ T5832] veth1_macvtap: entered promiscuous mode [ 288.823140][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.986971][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.996630][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.006244][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.015603][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.112513][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.250801][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.378501][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.388083][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.397685][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.408154][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.808728][ T5825] veth0_vlan: entered promiscuous mode [ 290.959087][ T5825] veth1_vlan: entered promiscuous mode [ 291.271967][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.278838][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.369420][ T5825] veth0_macvtap: entered promiscuous mode [ 291.496819][ T5825] veth1_macvtap: entered promiscuous mode [ 291.776411][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.899908][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.065959][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.076445][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.085906][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.095365][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.762182][ T3793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.770407][ T3793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.009232][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.018928][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.487140][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.495384][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.571144][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.579404][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.755767][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 297.869582][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.878159][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.932589][ T4137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.941076][ T4137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.067631][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.076271][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.346287][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.354743][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.980394][ T6007] loop1: detected capacity change from 0 to 256 [ 299.870346][ T6017] loop3: detected capacity change from 0 to 256 [ 301.700774][ T3832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.709456][ T3832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.953171][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.961673][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.198630][ T6043] Zero length message leads to an empty skb [ 305.742025][ T6045] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 306.133297][ T6049] loop0: detected capacity change from 0 to 512 [ 306.204171][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.211273][ T6049] EXT4-fs: inline encryption not supported [ 306.217805][ T6049] EXT4-fs: Ignoring removed mblk_io_submit option [ 306.224912][ T6049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 306.475867][ T6049] EXT4-fs (loop0): Test dummy encryption mode enabled [ 306.483759][ T6049] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 306.504900][ T6049] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 306.993346][ T6049] EXT4-fs (loop0): 1 truncate cleaned up [ 307.007239][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.835655][ T6049] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 309.246230][ T6065] 9pnet_fd: Insufficient options for proto=fd [ 309.817601][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.881033][ T30] audit: type=1326 audit(1752391505.361:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 310.924499][ T6074] input: syz1 as /devices/virtual/input/input5 [ 311.032125][ T30] audit: type=1326 audit(1752391505.421:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.055150][ T30] audit: type=1326 audit(1752391505.421:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.078360][ T30] audit: type=1326 audit(1752391505.421:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.112918][ T30] audit: type=1326 audit(1752391505.421:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.138044][ T30] audit: type=1326 audit(1752391505.421:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.160782][ T30] audit: type=1326 audit(1752391505.421:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.183620][ T30] audit: type=1326 audit(1752391505.421:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.214330][ T30] audit: type=1326 audit(1752391505.511:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 311.239487][ T30] audit: type=1326 audit(1752391505.511:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.22" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 313.515412][ T6087] syz.0.27 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.454740][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.478243][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.488264][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.521219][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.549751][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.985431][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 316.985516][ T30] audit: type=1326 audit(1752391511.491:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 317.014867][ T30] audit: type=1326 audit(1752391511.501:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 317.044586][ T30] audit: type=1326 audit(1752391511.501:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 317.069755][ T30] audit: type=1326 audit(1752391511.541:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dad58e929 code=0x7ffc0000 [ 318.685117][ T5826] Bluetooth: hci5: command tx timeout [ 319.112053][ T6103] chnl_net:caif_netlink_parms(): no params data found [ 319.986363][ T6127] loop4: detected capacity change from 0 to 128 [ 320.018034][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.028536][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.047858][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.069095][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.082901][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.085483][ T6127] vfat: Bad value for 'gid' [ 320.099041][ T6127] vfat: Bad value for 'gid' [ 320.792283][ T5823] Bluetooth: hci5: command tx timeout [ 321.312174][ T30] audit: type=1326 audit(1752391515.821:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 321.335124][ T30] audit: type=1326 audit(1752391515.831:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 321.365120][ T30] audit: type=1326 audit(1752391515.841:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 321.390594][ T30] audit: type=1326 audit(1752391515.841:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 321.413816][ T30] audit: type=1326 audit(1752391515.841:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6131 comm="syz.0.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 322.211298][ T5826] Bluetooth: hci6: command tx timeout [ 322.447047][ T6103] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.455376][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.465710][ T6103] bridge_slave_0: entered allmulticast mode [ 322.486785][ T6103] bridge_slave_0: entered promiscuous mode [ 322.501826][ T6126] chnl_net:caif_netlink_parms(): no params data found [ 322.639646][ T6139] loop0: detected capacity change from 0 to 512 [ 322.666439][ T6103] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.685125][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.693472][ T6103] bridge_slave_1: entered allmulticast mode [ 322.703870][ T6103] bridge_slave_1: entered promiscuous mode [ 322.796940][ T6139] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 322.842279][ T5826] Bluetooth: hci5: command tx timeout [ 322.976906][ T6139] EXT4-fs (loop0): 1 truncate cleaned up [ 322.991188][ T6139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.129041][ T6139] syz.0.45 (pid 6139) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 323.385875][ T6103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.543680][ T6103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.718324][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.091070][ T6103] team0: Port device team_slave_0 added [ 324.281555][ T5826] Bluetooth: hci6: command tx timeout [ 324.403181][ T6103] team0: Port device team_slave_1 added [ 324.560056][ T3942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.935211][ T5826] Bluetooth: hci5: command tx timeout [ 324.946636][ T6150] loop0: detected capacity change from 0 to 4096 [ 325.117724][ T3942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.250201][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.257797][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.285002][ T6103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.457060][ T3942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.558727][ T6103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.566445][ T6103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.593333][ T6103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.890167][ T3942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.372668][ T5826] Bluetooth: hci6: command tx timeout [ 326.416321][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.424892][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.433110][ T6126] bridge_slave_0: entered allmulticast mode [ 326.446472][ T6126] bridge_slave_0: entered promiscuous mode [ 326.864437][ T6165] loop4: detected capacity change from 0 to 512 [ 326.892308][ T6165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.009760][ T6165] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 327.026559][ T6165] EXT4-fs (loop4): 1 truncate cleaned up [ 327.037816][ T6165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.097453][ T6150] fscrypt: Error allocating hmac(sha512): -2 [ 327.928799][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.937579][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.946124][ T6126] bridge_slave_1: entered allmulticast mode [ 327.957042][ T6126] bridge_slave_1: entered promiscuous mode [ 328.571401][ T5826] Bluetooth: hci6: command tx timeout [ 328.651192][ T11] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 330.391345][ T11] usb 2-1: Using ep0 maxpacket: 16 [ 331.315241][ T6103] hsr_slave_0: entered promiscuous mode [ 331.326780][ T6103] hsr_slave_1: entered promiscuous mode [ 331.336505][ T6103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.344509][ T6103] Cannot create hsr debugfs directory [ 335.476732][ T11] usb 2-1: device descriptor read/all, error -110 [ 336.001251][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.021827][ T3942] bridge_slave_1: left allmulticast mode [ 336.027939][ T3942] bridge_slave_1: left promiscuous mode [ 336.036061][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.889354][ T3942] bridge_slave_0: left allmulticast mode [ 336.895838][ T3942] bridge_slave_0: left promiscuous mode [ 336.899809][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.902817][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.713077][ T3942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.752734][ T3942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.792268][ T3942] bond0 (unregistering): Released all slaves [ 339.989166][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.038470][ T6126] team0: Port device team_slave_0 added [ 341.229954][ T6126] team0: Port device team_slave_1 added [ 341.715832][ T3942] hsr_slave_0: left promiscuous mode [ 341.781492][ T3942] hsr_slave_1: left promiscuous mode [ 341.790401][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.798645][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.893536][ T3942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.901808][ T3942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.019319][ T3942] veth1_macvtap: left promiscuous mode [ 342.028124][ T3942] veth0_macvtap: left promiscuous mode [ 342.034369][ T3942] veth1_vlan: left promiscuous mode [ 342.040048][ T3942] veth0_vlan: left promiscuous mode [ 342.941615][ T11] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 343.197142][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 343.208830][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 343.220675][ T11] usb 5-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 343.230290][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.515581][ T11] usb 5-1: config 0 descriptor?? [ 343.532473][ T6198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 343.540467][ T6198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 343.822216][ T3942] team0 (unregistering): Port device team_slave_1 removed [ 343.889932][ T3942] team0 (unregistering): Port device team_slave_0 removed [ 344.188495][ T6204] netlink: 2 bytes leftover after parsing attributes in process `syz.0.63'. [ 344.356906][ T11] wacom 0003:056A:0094.0001: Using device in hidraw-only mode [ 344.524483][ T11] wacom 0003:056A:0094.0001: hidraw0: USB HID v8.da Device [HID 056a:0094] on usb-dummy_hcd.4-1/input0 [ 344.652782][ T11] usb 5-1: USB disconnect, device number 2 [ 344.759462][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.768002][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.797714][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.215054][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.223374][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.251690][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.461907][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 346.603637][ T6126] hsr_slave_0: entered promiscuous mode [ 346.615324][ T6126] hsr_slave_1: entered promiscuous mode [ 346.626866][ T6126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.641889][ T6126] Cannot create hsr debugfs directory [ 347.286660][ T6103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 347.532578][ T6103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 347.693075][ T6103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 347.796343][ T6103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.525058][ T6227] can0: slcan on ttyS3. [ 349.174155][ T6227] can0 (unregistered): slcan off ttyS3. [ 349.568112][ T6126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 349.690170][ T6126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 349.797862][ T6126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 349.948147][ T6126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.006049][ T6236] 9pnet_fd: Insufficient options for proto=fd [ 350.143699][ T6103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.416607][ T6103] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.577469][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.585243][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.706768][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.714561][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.933065][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 352.137859][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 352.222627][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.262310][ T11] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.276997][ T11] usb 1-1: config 0 has no interface number 0 [ 352.287308][ T11] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.298920][ T11] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.309291][ T11] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 352.318985][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.614935][ T11] usb 1-1: config 0 descriptor?? [ 352.678702][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.725557][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.732710][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.989161][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.997065][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.262946][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.271166][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.311317][ T11] uclogic 0003:28BD:0094.0002: pen parameters not found [ 353.318620][ T11] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 353.463800][ T11] usb 1-1: USB disconnect, device number 2 [ 356.226639][ T6103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.340021][ T6282] loop4: detected capacity change from 0 to 128 [ 358.798349][ T6282] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.847701][ T6282] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.956230][ T6285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 360.223655][ T6288] netlink: 104 bytes leftover after parsing attributes in process `syz.0.81'. [ 360.911785][ T5136] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 361.919633][ T6294] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 361.959287][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.199600][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 364.474306][ T6311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 365.158529][ T6103] veth0_vlan: entered promiscuous mode [ 365.445708][ T6103] veth1_vlan: entered promiscuous mode [ 366.513729][ T6103] veth0_macvtap: entered promiscuous mode [ 366.661274][ T6103] veth1_macvtap: entered promiscuous mode [ 367.337635][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.676168][ T6103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.921806][ T6103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.939084][ T6103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.950680][ T6103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.960322][ T6103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.304474][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.018632][ T6126] veth0_vlan: entered promiscuous mode [ 372.387703][ T6126] veth1_vlan: entered promiscuous mode [ 373.276722][ T6126] veth0_macvtap: entered promiscuous mode [ 373.386025][ T6352] loop0: detected capacity change from 0 to 128 [ 373.417319][ T6126] veth1_macvtap: entered promiscuous mode [ 373.761414][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.986815][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.126556][ T6126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.136468][ T6126] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.145906][ T6126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.156276][ T6126] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.201954][ T5136] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 375.436329][ T5136] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.448108][ T5136] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 375.457999][ T5136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.565532][ T5136] usb 1-1: config 0 descriptor?? [ 376.034721][ T5136] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 376.168566][ T5136] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input6 [ 376.644289][ T5136] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 376.883398][ T5136] usb 1-1: USB disconnect, device number 3 [ 376.908694][ T6381] netlink: 'syz.4.98': attribute type 12 has an invalid length. [ 378.115429][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 379.055526][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 379.144559][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 379.159144][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 379.223763][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 379.255167][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.751145][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.195294][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.817628][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.397042][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.523693][ T5823] Bluetooth: hci4: command tx timeout [ 382.017657][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.056636][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.344039][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.546635][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.655438][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.852981][ T12] bridge_slave_1: left allmulticast mode [ 382.859184][ T12] bridge_slave_1: left promiscuous mode [ 382.867479][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.910616][ T6416] loop4: detected capacity change from 0 to 128 [ 383.613705][ T5826] Bluetooth: hci4: command tx timeout [ 383.869948][ T12] bridge_slave_0: left allmulticast mode [ 383.876526][ T12] bridge_slave_0: left promiscuous mode [ 383.883611][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.908071][ T6416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.924655][ T6416] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 384.921800][ T5826] Bluetooth: hci2: command tx timeout [ 385.516382][ T5825] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.682144][ T5826] Bluetooth: hci4: command tx timeout [ 387.011262][ T5826] Bluetooth: hci2: command tx timeout [ 387.741231][ T5826] Bluetooth: hci4: command tx timeout [ 387.824224][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.908967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.987810][ T12] bond0 (unregistering): Released all slaves [ 389.081475][ T5826] Bluetooth: hci2: command tx timeout [ 389.963846][ T12] hsr_slave_0: left promiscuous mode [ 390.141033][ T12] hsr_slave_1: left promiscuous mode [ 390.149476][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.164077][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.309621][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.317921][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.621983][ T12] veth1_macvtap: left promiscuous mode [ 390.627856][ T12] veth0_macvtap: left promiscuous mode [ 390.634158][ T12] veth1_vlan: left promiscuous mode [ 390.640071][ T12] veth0_vlan: left promiscuous mode [ 391.202001][ T5826] Bluetooth: hci2: command tx timeout [ 392.772666][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 392.783477][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 392.832907][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 392.855887][ T12] team0 (unregistering): Port device team_slave_1 removed [ 392.893846][ T12] team0 (unregistering): Port device team_slave_0 removed [ 393.032177][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.090000][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.436382][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 395.162443][ T5820] Bluetooth: hci5: command tx timeout [ 395.198112][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.425739][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.737142][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 395.744436][ T5820] Bluetooth: hci3: command 0x0406 tx timeout [ 395.752198][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 395.957229][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.098419][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 396.188329][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.229646][ T30] audit: type=1326 audit(1752391590.721:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 396.344034][ T30] audit: type=1326 audit(1752391590.761:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 396.370312][ T30] audit: type=1326 audit(1752391590.771:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 396.394020][ T30] audit: type=1326 audit(1752391590.771:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6445 comm="syz.0.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 396.408408][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 397.227661][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.254117][ T49] Bluetooth: hci5: command tx timeout [ 397.596960][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.823144][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.085203][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.674406][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.683121][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.691417][ T6395] bridge_slave_0: entered allmulticast mode [ 398.702164][ T6395] bridge_slave_0: entered promiscuous mode [ 399.151546][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.159411][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.175432][ T6395] bridge_slave_1: entered allmulticast mode [ 399.252633][ T6395] bridge_slave_1: entered promiscuous mode [ 399.345910][ T49] Bluetooth: hci5: command tx timeout [ 400.617253][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.625228][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.633660][ T6409] bridge_slave_0: entered allmulticast mode [ 400.643981][ T6409] bridge_slave_0: entered promiscuous mode [ 400.672499][ T12] bridge_slave_1: left allmulticast mode [ 400.678763][ T12] bridge_slave_1: left promiscuous mode [ 400.688673][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.762080][ T12] bridge_slave_0: left allmulticast mode [ 400.768048][ T12] bridge_slave_0: left promiscuous mode [ 400.775370][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.875243][ T12] bridge_slave_1: left allmulticast mode [ 400.885845][ T12] bridge_slave_1: left promiscuous mode [ 400.893360][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.972063][ T12] bridge_slave_0: left allmulticast mode [ 400.978078][ T12] bridge_slave_0: left promiscuous mode [ 400.985171][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.413121][ T49] Bluetooth: hci5: command tx timeout [ 402.023958][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 402.170380][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 402.259305][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 402.297882][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 402.311181][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 402.383368][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.483351][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.540092][ T12] bond0 (unregistering): Released all slaves [ 403.062195][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.143103][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.187637][ T12] bond0 (unregistering): Released all slaves [ 403.334392][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.587001][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.598549][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.606867][ T6409] bridge_slave_1: entered allmulticast mode [ 403.617315][ T6409] bridge_slave_1: entered promiscuous mode [ 403.715503][ T12] hsr_slave_0: left promiscuous mode [ 403.731639][ T12] hsr_slave_1: left promiscuous mode [ 403.740343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.748468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.801179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.809189][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.947667][ T12] hsr_slave_0: left promiscuous mode [ 403.962358][ T12] hsr_slave_1: left promiscuous mode [ 403.971505][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.980619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.054414][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.062904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.237416][ T12] veth1_macvtap: left promiscuous mode [ 404.243786][ T12] veth0_macvtap: left promiscuous mode [ 404.249854][ T12] veth1_vlan: left promiscuous mode [ 404.255972][ T12] veth0_vlan: left promiscuous mode [ 404.322777][ T12] veth1_macvtap: left promiscuous mode [ 404.328852][ T12] veth0_macvtap: left promiscuous mode [ 404.335444][ T12] veth1_vlan: left promiscuous mode [ 404.341780][ T12] veth0_vlan: left promiscuous mode [ 404.467488][ T5823] Bluetooth: hci6: command tx timeout [ 405.186916][ T30] audit: type=1326 audit(1752391599.681:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 405.335364][ T30] audit: type=1326 audit(1752391599.731:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 405.359007][ T30] audit: type=1326 audit(1752391599.731:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 405.382394][ T30] audit: type=1326 audit(1752391599.731:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.0.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 405.783664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 405.893904][ T12] team0 (unregistering): Port device team_slave_0 removed [ 406.529915][ T5823] Bluetooth: hci6: command tx timeout [ 406.866177][ T12] team0 (unregistering): Port device team_slave_1 removed [ 406.993462][ T12] team0 (unregistering): Port device team_slave_0 removed [ 407.485217][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.496139][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.504276][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.512545][ T6429] bridge_slave_0: entered allmulticast mode [ 407.523084][ T6429] bridge_slave_0: entered promiscuous mode [ 408.078163][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.087843][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.096221][ T6429] bridge_slave_1: entered allmulticast mode [ 408.106608][ T6429] bridge_slave_1: entered promiscuous mode [ 408.208442][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.425591][ T6395] team0: Port device team_slave_0 added [ 408.453458][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.552496][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.580090][ T6395] team0: Port device team_slave_1 added [ 408.606478][ T5823] Bluetooth: hci6: command tx timeout [ 408.864066][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.262839][ T6409] team0: Port device team_slave_0 added [ 409.286328][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.294208][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.322584][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.382757][ T6409] team0: Port device team_slave_1 added [ 409.417107][ T6429] team0: Port device team_slave_0 added [ 409.536119][ T6429] team0: Port device team_slave_1 added [ 409.569436][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.577001][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.606138][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.776895][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.060585][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.068080][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.095064][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.182023][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.504152][ T6495] netlink: 37 bytes leftover after parsing attributes in process `syz.0.120'. [ 410.514480][ T6495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.522287][ T6495] IPv6: NLM_F_CREATE should be set when creating new route [ 410.529984][ T6495] IPv6: NLM_F_CREATE should be set when creating new route [ 410.680277][ T6395] hsr_slave_0: entered promiscuous mode [ 410.691630][ T6395] hsr_slave_1: entered promiscuous mode [ 410.721077][ T5823] Bluetooth: hci6: command tx timeout [ 410.724248][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.736968][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.765931][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.860076][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.905801][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.913259][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.946584][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.193974][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.266057][ T6497] loop0: detected capacity change from 0 to 512 [ 411.277707][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.285167][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.311988][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.483973][ T6478] chnl_net:caif_netlink_parms(): no params data found [ 411.484264][ T6497] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.121: corrupted in-inode xattr: invalid ea_ino [ 411.541313][ T6497] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.121: couldn't read orphan inode 15 (err -117) [ 411.623938][ T6497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.123912][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.152951][ T6409] hsr_slave_0: entered promiscuous mode [ 412.164197][ T6409] hsr_slave_1: entered promiscuous mode [ 412.181563][ T6409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.189492][ T6409] Cannot create hsr debugfs directory [ 412.644658][ T6429] hsr_slave_0: entered promiscuous mode [ 412.735173][ T6429] hsr_slave_1: entered promiscuous mode [ 412.744800][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.752884][ T6429] Cannot create hsr debugfs directory [ 413.633634][ T12] bridge_slave_1: left allmulticast mode [ 413.639712][ T12] bridge_slave_1: left promiscuous mode [ 413.646861][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.754914][ T12] bridge_slave_0: left allmulticast mode [ 413.761141][ T12] bridge_slave_0: left promiscuous mode [ 413.768380][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.170075][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.178615][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.614422][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.683368][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.709621][ T12] bond0 (unregistering): Released all slaves [ 415.353317][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.361507][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.369509][ T6478] bridge_slave_0: entered allmulticast mode [ 415.380079][ T6478] bridge_slave_0: entered promiscuous mode [ 415.657425][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.665601][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.673977][ T6478] bridge_slave_1: entered allmulticast mode [ 415.684865][ T6478] bridge_slave_1: entered promiscuous mode [ 416.328334][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.511950][ T12] hsr_slave_0: left promiscuous mode [ 416.538141][ T12] hsr_slave_1: left promiscuous mode [ 416.547280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.555626][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.599548][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.607813][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.722121][ T12] veth1_macvtap: left promiscuous mode [ 416.728196][ T12] veth0_macvtap: left promiscuous mode [ 416.736041][ T12] veth1_vlan: left promiscuous mode [ 416.742150][ T12] veth0_vlan: left promiscuous mode [ 417.115576][ T6524] loop0: detected capacity change from 0 to 256 [ 418.044427][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.144732][ T12] team0 (unregistering): Port device team_slave_0 removed [ 418.590259][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.631373][ T30] audit: type=1326 audit(1752391614.081:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 419.633951][ T6478] team0: Port device team_slave_0 added [ 419.657803][ T30] audit: type=1326 audit(1752391614.081:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 419.685752][ T30] audit: type=1326 audit(1752391614.081:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 419.708664][ T30] audit: type=1326 audit(1752391614.091:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.0.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05b578e929 code=0x7ffc0000 [ 419.835776][ T6478] team0: Port device team_slave_1 added [ 420.170609][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.178135][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.205232][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.419372][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.427159][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.454583][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.476595][ T6395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 420.514760][ T6429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 420.671009][ T6429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 420.734280][ T6395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 420.862478][ T6429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.007672][ T6429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.366467][ T6395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.745946][ T6478] hsr_slave_0: entered promiscuous mode [ 421.757150][ T6478] hsr_slave_1: entered promiscuous mode [ 421.766899][ T6478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.775367][ T6478] Cannot create hsr debugfs directory [ 421.822436][ T6395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.738447][ T6409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 422.846173][ T6409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 422.977381][ T6409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.217056][ T6409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.554016][ T6542] loop0: detected capacity change from 0 to 8192 [ 424.016167][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.107431][ T6478] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 424.263825][ T6478] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 424.424509][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.435391][ T6478] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 424.553899][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.567212][ T6478] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 424.749063][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.756948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.844857][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.982786][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.990567][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.219986][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.227861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.262741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.270716][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.699876][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.708537][ T6429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.719835][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.208393][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.495539][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.503336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.521926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.529617][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.336021][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.764473][ T6478] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.569179][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.576945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.875111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.882988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.047205][ T3871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.267269][ T3871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.438927][ T3871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.649833][ T3871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.027816][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.358863][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.656575][ T3871] bridge_slave_1: left allmulticast mode [ 430.663228][ T3871] bridge_slave_1: left promiscuous mode [ 430.669995][ T3871] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.783551][ T3871] bridge_slave_0: left allmulticast mode [ 430.789537][ T3871] bridge_slave_0: left promiscuous mode [ 430.797858][ T3871] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.742869][ T3871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.792731][ T3871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.818771][ T3871] bond0 (unregistering): Released all slaves [ 432.119607][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.891823][ T3871] hsr_slave_0: left promiscuous mode [ 432.932420][ T3871] hsr_slave_1: left promiscuous mode [ 432.943091][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.951236][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.055282][ T3871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.063894][ T3871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.186834][ T3871] veth1_macvtap: left promiscuous mode [ 433.193045][ T3871] veth0_macvtap: left promiscuous mode [ 433.199256][ T3871] veth1_vlan: left promiscuous mode [ 433.205281][ T3871] veth0_vlan: left promiscuous mode [ 433.957427][ T3871] team0 (unregistering): Port device team_slave_1 removed [ 433.995094][ T3871] team0 (unregistering): Port device team_slave_0 removed [ 435.946724][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.059631][ T6429] veth0_vlan: entered promiscuous mode [ 436.135687][ T6395] veth0_vlan: entered promiscuous mode [ 436.277117][ T6429] veth1_vlan: entered promiscuous mode [ 436.300243][ T6395] veth1_vlan: entered promiscuous mode [ 436.722922][ T6395] veth0_macvtap: entered promiscuous mode [ 436.849354][ T6429] veth0_macvtap: entered promiscuous mode [ 436.948627][ T6395] veth1_macvtap: entered promiscuous mode [ 437.028918][ T6429] veth1_macvtap: entered promiscuous mode [ 437.294914][ T6409] veth0_vlan: entered promiscuous mode [ 437.401934][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.447177][ T6409] veth1_vlan: entered promiscuous mode [ 437.506565][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.679271][ T6429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.689158][ T6429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.699283][ T6429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.709684][ T6429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.028962][ T6409] veth0_macvtap: entered promiscuous mode [ 438.221326][ T6409] veth1_macvtap: entered promiscuous mode [ 438.748919][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.890525][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.029960][ T6409] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.040092][ T6409] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.049563][ T6409] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.058823][ T6409] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.515309][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.533504][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.554868][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.594320][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.615087][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.659451][ T6478] veth0_vlan: entered promiscuous mode [ 440.808990][ T6478] veth1_vlan: entered promiscuous mode [ 441.021662][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.045869][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.075750][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.112784][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.184913][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.588395][ T6478] veth0_macvtap: entered promiscuous mode [ 441.763908][ T49] Bluetooth: hci1: command tx timeout [ 441.835307][ T6478] veth1_macvtap: entered promiscuous mode [ 442.332005][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.488779][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.551221][ T6627] chnl_net:caif_netlink_parms(): no params data found [ 442.686503][ T6478] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.696293][ T6478] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.706143][ T6478] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.715342][ T6478] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.333239][ T49] Bluetooth: hci3: command tx timeout [ 443.812403][ T49] Bluetooth: hci1: command tx timeout [ 445.223446][ T12] bridge_slave_1: left allmulticast mode [ 445.229550][ T12] bridge_slave_1: left promiscuous mode [ 445.236985][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.277932][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.288706][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.300003][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.359919][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.403134][ T5823] Bluetooth: hci3: command tx timeout [ 445.418659][ T12] bridge_slave_0: left allmulticast mode [ 445.424824][ T12] bridge_slave_0: left promiscuous mode [ 445.432201][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.463868][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.881804][ T49] Bluetooth: hci1: command tx timeout [ 446.182930][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.220001][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.257800][ T12] bond0 (unregistering): Released all slaves [ 446.955371][ T12] hsr_slave_0: left promiscuous mode [ 447.001921][ T12] hsr_slave_1: left promiscuous mode [ 447.010552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.063641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.163477][ T12] veth1_macvtap: left promiscuous mode [ 447.169433][ T12] veth0_macvtap: left promiscuous mode [ 447.176671][ T12] veth1_vlan: left promiscuous mode [ 447.182765][ T12] veth0_vlan: left promiscuous mode [ 447.596408][ T49] Bluetooth: hci3: command tx timeout [ 447.602406][ T49] Bluetooth: hci4: command tx timeout [ 447.961391][ T5820] Bluetooth: hci1: command tx timeout [ 448.185289][ T12] team0 (unregistering): Port device team_slave_1 removed [ 448.224163][ T12] team0 (unregistering): Port device team_slave_0 removed [ 448.629466][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.638369][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.646619][ T6627] bridge_slave_0: entered allmulticast mode [ 448.656755][ T6627] bridge_slave_0: entered promiscuous mode [ 448.716033][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.724576][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.732738][ T6627] bridge_slave_1: entered allmulticast mode [ 448.742840][ T6627] bridge_slave_1: entered promiscuous mode [ 449.019380][ T6637] chnl_net:caif_netlink_parms(): no params data found [ 449.462122][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.661906][ T5820] Bluetooth: hci4: command tx timeout [ 449.662622][ T49] Bluetooth: hci3: command tx timeout [ 449.742270][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.968556][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.157312][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.258349][ T6627] team0: Port device team_slave_0 added [ 450.356838][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.440342][ T6627] team0: Port device team_slave_1 added [ 450.528373][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.832300][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.839639][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.869139][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.219999][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.227762][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.258147][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.457581][ T6637] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.465719][ T6637] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.474256][ T6637] bridge_slave_0: entered allmulticast mode [ 451.485066][ T6637] bridge_slave_0: entered promiscuous mode [ 451.731223][ T49] Bluetooth: hci4: command tx timeout [ 451.912370][ T6637] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.920085][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.928771][ T6637] bridge_slave_1: entered allmulticast mode [ 451.939238][ T6637] bridge_slave_1: entered promiscuous mode [ 452.246759][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.584985][ T6637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.637006][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.732162][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.742268][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.753334][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.768419][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.781300][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 452.782230][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.821273][ T6627] hsr_slave_0: entered promiscuous mode [ 452.832580][ T6627] hsr_slave_1: entered promiscuous mode [ 452.858650][ T6637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.017276][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.228186][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.764407][ T6637] team0: Port device team_slave_0 added [ 453.831439][ T5820] Bluetooth: hci4: command tx timeout [ 454.204861][ T6637] team0: Port device team_slave_1 added [ 454.826989][ T12] bridge_slave_1: left allmulticast mode [ 454.835616][ T12] bridge_slave_1: left promiscuous mode [ 454.845659][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.899507][ T12] bridge_slave_0: left allmulticast mode [ 454.906029][ T12] bridge_slave_0: left promiscuous mode [ 454.913181][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.921169][ T5820] Bluetooth: hci0: command tx timeout [ 454.978738][ T12] bridge_slave_1: left allmulticast mode [ 454.986824][ T12] bridge_slave_1: left promiscuous mode [ 454.993803][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.019836][ T12] bridge_slave_0: left allmulticast mode [ 455.029445][ T12] bridge_slave_0: left promiscuous mode [ 455.037005][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.726505][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.747961][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.779138][ T12] bond0 (unregistering): Released all slaves [ 456.046039][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.062882][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.089441][ T12] bond0 (unregistering): Released all slaves [ 456.396640][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.406369][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.433999][ T6637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.444992][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.454148][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.647787][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.655939][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.664141][ T6665] bridge_slave_0: entered allmulticast mode [ 456.674605][ T6665] bridge_slave_0: entered promiscuous mode [ 456.727086][ T6637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.734828][ T6637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.761801][ T6637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.883737][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.892639][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.900510][ T6665] bridge_slave_1: entered allmulticast mode [ 456.915149][ T6665] bridge_slave_1: entered promiscuous mode [ 457.017204][ T5820] Bluetooth: hci0: command tx timeout [ 457.130610][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.139545][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.549294][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.647371][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.697741][ T6637] hsr_slave_0: entered promiscuous mode [ 457.709347][ T6637] hsr_slave_1: entered promiscuous mode [ 457.719167][ T6637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.727394][ T6637] Cannot create hsr debugfs directory [ 457.833965][ T12] hsr_slave_0: left promiscuous mode [ 457.872602][ T12] hsr_slave_1: left promiscuous mode [ 457.881392][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.889207][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.985327][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.995169][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.065765][ T12] hsr_slave_0: left promiscuous mode [ 458.090171][ T12] hsr_slave_1: left promiscuous mode [ 458.099195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.107340][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.174526][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.182769][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.196375][ T6743] loop8: detected capacity change from 0 to 512 [ 458.268972][ T12] veth1_macvtap: left promiscuous mode [ 458.279054][ T12] veth0_macvtap: left promiscuous mode [ 458.288507][ T12] veth1_vlan: left promiscuous mode [ 458.294438][ T12] veth0_vlan: left promiscuous mode [ 458.307235][ T6743] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 458.318152][ T12] veth1_macvtap: left promiscuous mode [ 458.325133][ T12] veth0_macvtap: left promiscuous mode [ 458.331311][ T12] veth1_vlan: left promiscuous mode [ 458.336969][ T12] veth0_vlan: left promiscuous mode [ 458.373476][ T6743] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 458.421654][ T6743] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.114: corrupted in-inode xattr: e_value size too large [ 458.891752][ T6743] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.114: couldn't read orphan inode 15 (err -117) [ 458.936803][ T6743] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.107200][ T5820] Bluetooth: hci0: command tx timeout [ 459.355579][ T6478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.677194][ T12] team0 (unregistering): Port device team_slave_1 removed [ 459.806191][ T12] team0 (unregistering): Port device team_slave_0 removed [ 460.647912][ T12] team0 (unregistering): Port device team_slave_1 removed [ 460.732104][ T12] team0 (unregistering): Port device team_slave_0 removed [ 461.195845][ T5820] Bluetooth: hci0: command tx timeout [ 461.993432][ T6665] team0: Port device team_slave_0 added [ 462.044467][ T6713] chnl_net:caif_netlink_parms(): no params data found [ 462.073032][ T6761] netlink: 'syz.8.132': attribute type 27 has an invalid length. [ 462.130506][ T6665] team0: Port device team_slave_1 added [ 462.313566][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.321177][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.348328][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.428230][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.435981][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.462808][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.995432][ T6665] hsr_slave_0: entered promiscuous mode [ 463.006646][ T6665] hsr_slave_1: entered promiscuous mode [ 463.016263][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.024329][ T6665] Cannot create hsr debugfs directory [ 463.779370][ T6675] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 463.841952][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.867905][ T6627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.989938][ T6675] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 464.012405][ T6675] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.022029][ T6675] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 464.030462][ T6675] usb 9-1: SerialNumber: syz [ 464.165346][ T6627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 464.255036][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.309519][ T6627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 464.388569][ T6627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.531177][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.864717][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.905343][ T6675] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 465.039566][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.051107][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.060228][ T6713] bridge_slave_0: entered allmulticast mode [ 465.103087][ T6713] bridge_slave_0: entered promiscuous mode [ 465.151118][ T6733] usb 9-1: USB disconnect, device number 2 [ 465.160307][ T6733] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 465.366821][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.376486][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.385123][ T6713] bridge_slave_1: entered allmulticast mode [ 465.395412][ T6713] bridge_slave_1: entered promiscuous mode [ 466.066341][ T6713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.155770][ T12] bridge_slave_1: left allmulticast mode [ 466.162458][ T12] bridge_slave_1: left promiscuous mode [ 466.169307][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.288757][ T12] bridge_slave_0: left allmulticast mode [ 466.295490][ T12] bridge_slave_0: left promiscuous mode [ 466.302708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.011977][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.030515][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.047304][ T12] bond0 (unregistering): Released all slaves [ 467.076985][ T6665] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 467.130534][ T6665] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 467.240354][ T6713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.298616][ T6665] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.335025][ T6637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 467.368348][ T6637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 467.618338][ T6665] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.667473][ T6637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 467.795842][ T6637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 467.803066][ T5873] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 467.889790][ T6713] team0: Port device team_slave_0 added [ 467.973161][ T12] hsr_slave_0: left promiscuous mode [ 467.978039][ T5873] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 468.000524][ T12] hsr_slave_1: left promiscuous mode [ 468.010120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.018461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.027556][ T5873] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.037519][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.046174][ T5873] usb 9-1: SerialNumber: syz [ 468.065001][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.073364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.172463][ T12] veth1_macvtap: left promiscuous mode [ 468.178328][ T12] veth0_macvtap: left promiscuous mode [ 468.185240][ T12] veth1_vlan: left promiscuous mode [ 468.194210][ T12] veth0_vlan: left promiscuous mode [ 468.564960][ T5873] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -71 [ 468.630399][ T5873] usb 9-1: USB disconnect, device number 3 [ 469.044941][ T12] team0 (unregistering): Port device team_slave_1 removed [ 469.100280][ T12] team0 (unregistering): Port device team_slave_0 removed [ 469.560406][ T6713] team0: Port device team_slave_1 added [ 469.988760][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.997876][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.025184][ T6713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.273604][ T6713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.280991][ T6713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.308015][ T6713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.440582][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.724059][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.887557][ T6713] hsr_slave_0: entered promiscuous mode [ 470.900150][ T6713] hsr_slave_1: entered promiscuous mode [ 470.909626][ T6713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.917617][ T6713] Cannot create hsr debugfs directory [ 471.093765][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.101752][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.280381][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.288182][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.504265][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.607025][ T6637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.845725][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.010049][ T6782] netlink: 'syz.8.139': attribute type 27 has an invalid length. [ 472.069189][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.077959][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.203559][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.211477][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.375466][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.597041][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.605056][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.814093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.821895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.001687][ T6733] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 473.263544][ T6733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.275420][ T6733] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.286404][ T6733] usb 9-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 473.296012][ T6733] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.512472][ T6733] usb 9-1: config 0 descriptor?? [ 474.024366][ T6733] zydacron 0003:13EC:0006.0004: unknown main item tag 0x7 [ 474.032336][ T6733] zydacron 0003:13EC:0006.0004: item fetching failed at offset 2/5 [ 474.068658][ T6713] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 474.164694][ T6733] zydacron 0003:13EC:0006.0004: parse failed [ 474.171962][ T6733] zydacron 0003:13EC:0006.0004: probe with driver zydacron failed with error -22 [ 474.194512][ T6713] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 474.313406][ T6733] usb 9-1: USB disconnect, device number 4 [ 474.375381][ T6713] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 474.523981][ T6713] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 475.544016][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.588398][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.596398][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.034866][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.315830][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.362661][ T5873] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 476.493117][ T6713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.591756][ T5873] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 476.600513][ T5873] usb 9-1: config 0 has no interface number 0 [ 476.717086][ T5873] usb 9-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= f.d6 [ 476.726695][ T6713] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.736213][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.746506][ T5873] usb 9-1: Product: syz [ 476.751580][ T5873] usb 9-1: Manufacturer: syz [ 476.756506][ T5873] usb 9-1: SerialNumber: syz [ 476.838226][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.846244][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.942559][ T5873] usb 9-1: config 0 descriptor?? [ 476.980562][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.988391][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.022398][ T5873] ftdi_sio 9-1:0.117: FTDI USB Serial Device converter detected [ 477.034039][ T5873] ftdi_sio ttyUSB0: unknown device type: 0xfd6 [ 477.382086][ T6733] usb 9-1: USB disconnect, device number 5 [ 477.391393][ T6733] ftdi_sio 9-1:0.117: device disconnected [ 479.280161][ T6733] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 479.440200][ T6627] veth0_vlan: entered promiscuous mode [ 479.541270][ T6733] usb 9-1: Using ep0 maxpacket: 16 [ 479.619174][ T6733] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 479.685039][ T6627] veth1_vlan: entered promiscuous mode [ 479.758672][ T6733] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 479.762415][ T6665] veth0_vlan: entered promiscuous mode [ 479.768568][ T6733] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.783181][ T6733] usb 9-1: Product: syz [ 479.787640][ T6733] usb 9-1: Manufacturer: syz [ 479.792795][ T6733] usb 9-1: SerialNumber: syz [ 479.888707][ T6733] usb 9-1: config 0 descriptor?? [ 479.932224][ T6733] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 479.943290][ T6733] usb 9-1: Detected FT232R [ 480.064910][ T6665] veth1_vlan: entered promiscuous mode [ 480.142294][ T6733] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 480.211633][ T6627] veth0_macvtap: entered promiscuous mode [ 480.380593][ T6713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.415817][ T6665] veth0_macvtap: entered promiscuous mode [ 480.511504][ T6627] veth1_macvtap: entered promiscuous mode [ 480.597380][ T6665] veth1_macvtap: entered promiscuous mode [ 480.736549][ T6637] veth0_vlan: entered promiscuous mode [ 480.747702][ T6733] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 480.856636][ T6637] veth1_vlan: entered promiscuous mode [ 480.894958][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.966705][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.100599][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.201340][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.302916][ T6627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.312285][ T6627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.326409][ T6627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.335652][ T6627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.422785][ T6665] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.432257][ T6665] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.441620][ T6665] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.450999][ T6665] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.515090][ T5950] usb 9-1: USB disconnect, device number 6 [ 481.625780][ T6637] veth0_macvtap: entered promiscuous mode [ 481.661707][ T5950] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 481.674435][ T5950] ftdi_sio 9-1:0.0: device disconnected [ 481.841243][ T6637] veth1_macvtap: entered promiscuous mode [ 482.154933][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.347897][ T6637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.478613][ T6637] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.489597][ T6637] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.500191][ T6637] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.509915][ T6637] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.584446][ T6713] veth0_vlan: entered promiscuous mode [ 485.809167][ T6713] veth1_vlan: entered promiscuous mode [ 486.528251][ T6713] veth0_macvtap: entered promiscuous mode [ 486.737154][ T6713] veth1_macvtap: entered promiscuous mode [ 487.187576][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.456622][ T6713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.716325][ T6713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.730302][ T6713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.743570][ T6713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.753620][ T6713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.604920][ T4062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.613658][ T4062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.699182][ T6913] netlink: 'syz.8.146': attribute type 27 has an invalid length. [ 495.920517][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.929459][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.644070][ T30] audit: type=1326 audit(1752391691.131:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.8.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7849d8e929 code=0x7ffc0000 [ 496.668643][ T30] audit: type=1326 audit(1752391691.141:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.8.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f7849d8e929 code=0x7ffc0000 [ 496.698483][ T30] audit: type=1326 audit(1752391691.141:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.8.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7849d8e929 code=0x7ffc0000 [ 497.044629][ T30] audit: type=1326 audit(1752391691.241:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.8.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7849d8e929 code=0x7ffc0000 [ 497.918972][ T3871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.927711][ T3871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.021259][ T11] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 498.312694][ T11] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 498.568202][ T11] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.578300][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 498.586918][ T11] usb 9-1: SerialNumber: syz [ 499.131861][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.140532][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.145269][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.157436][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.187443][ T11] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 501.936470][ T11] usb 9-1: USB disconnect, device number 7 [ 501.945946][ T11] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 502.453424][ T6954] loop5: detected capacity change from 0 to 256 [ 502.872549][ T3591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.881084][ T3591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.208468][ T6956] loop8: detected capacity change from 0 to 2048 [ 503.441780][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 503.456270][ T4137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.465704][ T4137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.495527][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 503.524720][ T6956] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.539408][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 503.614699][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 503.639193][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 504.803770][ T6478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.735182][ T5820] Bluetooth: hci2: command tx timeout [ 505.772109][ T6969] serio: Serial port ptm0 [ 507.262862][ T6982] netlink: 'syz.8.153': attribute type 27 has an invalid length. [ 507.830353][ T5820] Bluetooth: hci2: command tx timeout [ 508.232507][ T6959] chnl_net:caif_netlink_parms(): no params data found [ 510.226635][ T5820] Bluetooth: hci2: command tx timeout [ 512.286353][ T5820] Bluetooth: hci2: command tx timeout [ 512.491818][ T7000] loop5: detected capacity change from 0 to 256 [ 513.364884][ T7005] loop9: detected capacity change from 0 to 512 [ 513.459309][ T7005] EXT4-fs: Ignoring removed nobh option [ 513.609702][ T7005] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 513.622802][ T7005] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 513.633797][ T7005] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.161: Corrupt directory, running e2fsck is recommended [ 513.906000][ T7005] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 513.916523][ T7005] EXT4-fs error (device loop9): ext4_iget_extra_inode:5035: inode #15: comm syz.9.161: corrupted in-inode xattr: invalid ea_ino [ 514.028299][ T4137] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.082038][ T7005] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.161: couldn't read orphan inode 15 (err -117) [ 514.165410][ T7005] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.249037][ T4137] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.370710][ T7005] EXT4-fs (loop9): shut down requested (1) [ 514.372238][ T6959] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.385307][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.393901][ T6959] bridge_slave_0: entered allmulticast mode [ 514.404256][ T6959] bridge_slave_0: entered promiscuous mode [ 514.411864][ T7005] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.424051][ T7005] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 514.434606][ T7005] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.161: Corrupt directory, running e2fsck is recommended [ 514.530704][ T4137] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.667780][ T6959] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.685994][ T6959] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.694180][ T6959] bridge_slave_1: entered allmulticast mode [ 514.765229][ T6959] bridge_slave_1: entered promiscuous mode [ 514.842403][ T4137] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.309306][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.353837][ T6959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.475367][ T6959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.628474][ T7024] netlink: 'syz.5.167': attribute type 27 has an invalid length. [ 516.238683][ T4137] bridge_slave_1: left allmulticast mode [ 516.245312][ T4137] bridge_slave_1: left promiscuous mode [ 516.253099][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.368322][ T4137] bridge_slave_0: left allmulticast mode [ 516.375185][ T4137] bridge_slave_0: left promiscuous mode [ 516.382379][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.497959][ T7033] mmap: syz.8.169 (7033) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 517.705213][ T4137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.770514][ T4137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.832922][ T4137] bond0 (unregistering): Released all slaves [ 517.943478][ T6959] team0: Port device team_slave_0 added [ 518.074723][ T6959] team0: Port device team_slave_1 added [ 519.046218][ T4137] hsr_slave_0: left promiscuous mode [ 519.071278][ T4137] hsr_slave_1: left promiscuous mode [ 519.093976][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.102302][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.134414][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.144394][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.262324][ T4137] veth1_macvtap: left promiscuous mode [ 519.268363][ T4137] veth0_macvtap: left promiscuous mode [ 519.274768][ T4137] veth1_vlan: left promiscuous mode [ 519.287928][ T4137] veth0_vlan: left promiscuous mode [ 519.925856][ T7051] loop7: detected capacity change from 0 to 256 [ 520.832083][ T4137] team0 (unregistering): Port device team_slave_1 removed [ 520.993976][ T4137] team0 (unregistering): Port device team_slave_0 removed [ 521.664373][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.671819][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.699205][ T6959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.765427][ T7059] input: syz1 as /devices/virtual/input/input11 [ 522.027328][ T6959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.034704][ T6959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.064070][ T6959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.241879][ T5873] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 522.541680][ T5873] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.553459][ T5873] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 522.569107][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.700213][ T5873] usb 10-1: config 0 descriptor?? [ 523.002240][ T6959] hsr_slave_0: entered promiscuous mode [ 523.013629][ T6959] hsr_slave_1: entered promiscuous mode [ 523.023180][ T6959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.031170][ T6959] Cannot create hsr debugfs directory [ 523.207421][ T5873] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 523.288777][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.0005/input/input12 [ 523.943889][ T5873] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 524.047352][ T5873] usb 10-1: USB disconnect, device number 2 [ 524.270420][ T7076] loop7: detected capacity change from 0 to 1024 [ 524.410159][ T7076] EXT4-fs: Ignoring removed orlov option [ 524.664618][ T7076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.799043][ T7082] IPv4: Oversized IP packet from 127.202.26.0 [ 525.141113][ T7076] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.182: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 525.598881][ T7084] fido_id[7084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 525.701471][ T6713] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.737502][ T5873] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 526.003465][ T5873] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 526.075234][ T5873] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 526.085568][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 526.094277][ T5873] usb 10-1: SerialNumber: syz [ 526.468453][ T7095] loop7: detected capacity change from 0 to 256 [ 526.828106][ T6959] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.952062][ T5873] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 527.013379][ T6959] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 527.122743][ T6959] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 527.241993][ T6959] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 527.339023][ T7099] loop5: detected capacity change from 0 to 256 [ 527.415072][ T5873] usb 10-1: USB disconnect, device number 3 [ 527.541990][ T5873] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 528.869626][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 529.766201][ T7104] loop7: detected capacity change from 0 to 4096 [ 531.079900][ T7104] fscrypt: Error allocating hmac(sha512): -2 [ 531.918976][ T30] audit: type=1326 audit(1752391726.421:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 531.942630][ T30] audit: type=1326 audit(1752391726.421:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 531.970556][ T6959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.293685][ T30] audit: type=1326 audit(1752391726.551:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.317826][ T30] audit: type=1326 audit(1752391726.581:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.341063][ T30] audit: type=1326 audit(1752391726.581:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.364307][ T30] audit: type=1326 audit(1752391726.601:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.389576][ T30] audit: type=1326 audit(1752391726.611:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.413048][ T30] audit: type=1326 audit(1752391726.611:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7120 comm="syz.5.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79e598e929 code=0x7ffc0000 [ 532.455704][ T6959] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.527557][ T7124] loop9: detected capacity change from 0 to 512 [ 532.646397][ T4137] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.654909][ T4137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.800039][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.808053][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.092501][ T7124] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.113465][ T7124] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.917216][ T7139] loop8: detected capacity change from 0 to 256 [ 535.426012][ T5873] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.693856][ T5873] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 535.773801][ T5873] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.783861][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 535.792788][ T5873] usb 6-1: SerialNumber: syz [ 537.035544][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 537.042804][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 537.289530][ T6959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.456994][ T5873] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 537.853186][ T5873] usb 6-1: USB disconnect, device number 2 [ 537.862606][ T5873] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 538.005719][ T6665] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.394426][ T7183] process 'syz.7.206' launched '/dev/fd/3' with NULL argv: empty string added [ 541.347338][ T6959] veth0_vlan: entered promiscuous mode [ 541.462464][ T7194] loop5: detected capacity change from 0 to 256 [ 541.517860][ T6959] veth1_vlan: entered promiscuous mode [ 542.044921][ T6959] veth0_macvtap: entered promiscuous mode [ 542.176348][ T6959] veth1_macvtap: entered promiscuous mode [ 542.536533][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.756558][ T6959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 543.018137][ T6959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.027922][ T6959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.045040][ T6959] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.056720][ T6959] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.367952][ T7202] loop9: detected capacity change from 0 to 16 [ 543.502711][ T7202] erofs (device loop9): mounted with root inode @ nid 36. [ 543.719689][ T7202] erofs (device loop9): readahead error at folio 26 @ nid 36 [ 543.727928][ T7202] erofs (device loop9): readahead error at folio 25 @ nid 36 [ 543.736539][ T7202] erofs (device loop9): readahead error at folio 24 @ nid 36 [ 543.744524][ T7202] erofs (device loop9): readahead error at folio 23 @ nid 36 [ 543.758758][ T7202] erofs (device loop9): readahead error at folio 22 @ nid 36 [ 543.768699][ T7202] erofs (device loop9): readahead error at folio 21 @ nid 36 [ 543.776834][ T7202] erofs (device loop9): readahead error at folio 20 @ nid 36 [ 543.785146][ T7202] erofs (device loop9): readahead error at folio 19 @ nid 36 [ 543.793369][ T7202] erofs (device loop9): readahead error at folio 18 @ nid 36 [ 543.801468][ T7202] erofs (device loop9): readahead error at folio 17 @ nid 36 [ 543.809171][ T7202] erofs (device loop9): readahead error at folio 16 @ nid 36 [ 543.817475][ T7202] erofs (device loop9): readahead error at folio 15 @ nid 36 [ 543.825590][ T7202] erofs (device loop9): readahead error at folio 14 @ nid 36 [ 543.834088][ T7202] erofs (device loop9): readahead error at folio 13 @ nid 36 [ 543.842544][ T7202] erofs (device loop9): readahead error at folio 12 @ nid 36 [ 543.850239][ T7202] erofs (device loop9): readahead error at folio 11 @ nid 36 [ 543.863904][ T7202] erofs (device loop9): readahead error at folio 10 @ nid 36 [ 544.742172][ T1732] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 544.991043][ T1732] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 545.055769][ T1732] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.066012][ T1732] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 545.074682][ T1732] usb 6-1: SerialNumber: syz [ 545.981741][ T1732] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 546.328732][ T1732] usb 6-1: USB disconnect, device number 3 [ 546.337960][ T1732] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 547.793635][ T7226] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 549.795789][ T7242] random: crng reseeded on system resumption [ 552.738986][ T7256] loop5: detected capacity change from 0 to 256 [ 553.052279][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.062355][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.094922][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.151915][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.186792][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 555.382203][ T5820] Bluetooth: hci3: command tx timeout [ 556.119737][ T4137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.128316][ T4137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.298209][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.306848][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.419503][ T7283] ===================================================== [ 556.427119][ T7283] BUG: KMSAN: uninit-value in bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 556.435956][ T7283] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 556.442244][ T7283] do_xdp_generic+0xd52/0x1690 [ 556.447346][ T7283] tun_get_user+0x447a/0x6b40 [ 556.452524][ T7283] tun_chr_write_iter+0x3e9/0x5c0 [ 556.457903][ T7283] vfs_write+0xb48/0x1580 [ 556.463041][ T7283] __x64_sys_write+0x1fb/0x4d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 556.468115][ T7283] x64_sys_call+0x38c3/0x3db0 [ 556.473287][ T7283] do_syscall_64+0xd9/0x210 [ 556.478176][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.484611][ T7283] [ 556.487083][ T7283] Uninit was stored to memory at: [ 556.492696][ T7283] pskb_expand_head+0x310/0x1610 [ 556.497935][ T7283] do_xdp_generic+0xa79/0x1690 [ 556.503258][ T7283] tun_get_user+0x447a/0x6b40 [ 556.508285][ T7283] tun_chr_write_iter+0x3e9/0x5c0 [ 556.513788][ T7283] vfs_write+0xb48/0x1580 [ 556.518446][ T7283] __x64_sys_write+0x1fb/0x4d0 [ 556.523731][ T7283] x64_sys_call+0x38c3/0x3db0 [ 556.528836][ T7283] do_syscall_64+0xd9/0x210 [ 556.533913][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.540088][ T7283] [ 556.543086][ T7283] Uninit was created at: [ 556.547782][ T7283] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 556.555032][ T7283] kmalloc_reserve+0x22f/0x4b0 [ 556.560205][ T7283] __alloc_skb+0x347/0x7d0 [ 556.565177][ T7283] alloc_skb_with_frags+0xc5/0xa60 [ 556.570605][ T7283] sock_alloc_send_pskb+0xad8/0xc70 [ 556.576393][ T7283] tun_get_user+0x1019/0x6b40 [ 556.581529][ T7283] tun_chr_write_iter+0x3e9/0x5c0 [ 556.587066][ T7283] vfs_write+0xb48/0x1580 [ 556.591890][ T7283] __x64_sys_write+0x1fb/0x4d0 [ 556.596943][ T7283] x64_sys_call+0x38c3/0x3db0 [ 556.602105][ T7283] do_syscall_64+0xd9/0x210 [ 556.606918][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.613366][ T7283] [ 556.615867][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.5.225 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(none) [ 556.628539][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.639035][ T7283] ===================================================== [ 556.646345][ T7283] Disabling lock debugging due to kernel taint [ 556.652860][ T7283] Kernel panic - not syncing: kmsan.panic set ... [ 556.659590][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.5.225 Tainted: G B 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(none) [ 556.673728][ T7283] Tainted: [B]=BAD_PAGE [ 556.678239][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.688601][ T7283] Call Trace: [ 556.692052][ T7283] [ 556.695155][ T7283] __dump_stack+0x26/0x30 [ 556.699780][ T7283] dump_stack_lvl+0x53/0x270 [ 556.704745][ T7283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 556.710962][ T7283] dump_stack+0x1e/0x25 [ 556.715426][ T7283] panic+0x4bd/0xd50 [ 556.719754][ T7283] kmsan_report+0x31c/0x320 [ 556.724908][ T7283] ? __msan_warning+0x1b/0x30 [ 556.730039][ T7283] ? bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 556.736382][ T7283] ? do_xdp_generic+0xd52/0x1690 [ 556.742042][ T7283] ? tun_get_user+0x447a/0x6b40 [ 556.747388][ T7283] ? tun_chr_write_iter+0x3e9/0x5c0 [ 556.752878][ T7283] ? vfs_write+0xb48/0x1580 [ 556.757680][ T7283] ? __x64_sys_write+0x1fb/0x4d0 [ 556.763011][ T7283] ? x64_sys_call+0x38c3/0x3db0 [ 556.768246][ T7283] ? do_syscall_64+0xd9/0x210 [ 556.773223][ T7283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.779566][ T7283] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 556.785776][ T7283] ? ___bpf_prog_run+0xea65/0xeba0 [ 556.791323][ T7283] ? __bpf_prog_run32+0xc2/0xf0 [ 556.796446][ T7283] ? kmsan_get_metadata+0xfb/0x160 [ 556.801905][ T7283] __msan_warning+0x1b/0x30 [ 556.806742][ T7283] bpf_prog_run_generic_xdp+0x1a74/0x1ff0 [ 556.813094][ T7283] do_xdp_generic+0xd52/0x1690 [ 556.818259][ T7283] ? __msan_warning+0x1b/0x30 [ 556.823246][ T7283] ? filter_irq_stacks+0x13f/0x190 [ 556.828667][ T7283] ? tun_get_user+0x43f5/0x6b40 [ 556.833873][ T7283] tun_get_user+0x447a/0x6b40 [ 556.838917][ T7283] ? stack_depot_save_flags+0x35/0x7b0 [ 556.844685][ T7283] ? __rcu_read_unlock+0x6d/0xd0 [ 556.849981][ T7283] ? kmsan_get_metadata+0xfb/0x160 [ 556.855612][ T7283] ? kmsan_get_metadata+0xfb/0x160 [ 556.861232][ T7283] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 556.868018][ T7283] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 556.874592][ T7283] tun_chr_write_iter+0x3e9/0x5c0 [ 556.879914][ T7283] vfs_write+0xb48/0x1580 [ 556.884571][ T7283] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 556.890406][ T7283] __x64_sys_write+0x1fb/0x4d0 [ 556.895679][ T7283] x64_sys_call+0x38c3/0x3db0 [ 556.900854][ T7283] do_syscall_64+0xd9/0x210 [ 556.906009][ T7283] ? irqentry_exit+0x16/0x60 [ 556.910964][ T7283] ? clear_bhb_loop+0x40/0x90 [ 556.916156][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.922310][ T7283] RIP: 0033:0x7f79e598d3df [ 556.926915][ T7283] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 556.947129][ T7283] RSP: 002b:00007f79e687d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 556.955806][ T7283] RAX: ffffffffffffffda RBX: 00007f79e5bb5fa0 RCX: 00007f79e598d3df [ 556.964445][ T7283] RDX: 000000000000fdef RSI: 0000200000000600 RDI: 00000000000000c8 [ 556.972799][ T7283] RBP: 00007f79e5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 556.981056][ T7283] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 556.989497][ T7283] R13: 0000000000000000 R14: 00007f79e5bb5fa0 R15: 00007ffed5411538 [ 556.997697][ T7283] [ 557.001041][ T7283] Kernel Offset: disabled [ 557.005461][ T7283] Rebooting in 86400 seconds..