last executing test programs: 1m10.454025019s ago: executing program 2 (id=3): r0 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x8000, 0x0) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) read$snapshot(r0, 0x0, 0x0) 1m9.766656178s ago: executing program 2 (id=5): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0)={[{@checkpoint_diasble}, {@jqfmt_vfsold}, {@usrjquota={'usrjquota', 0x3d, 'noinline_xattr{\xbd\x04&\xb7v\xaa-\xd5Y\xde\xfb\xab\xe1\xbb|)\x90\xcf#\'\xe9\xaf)\xb6!L\xa1\xa0\xf5\r\xec\xac^\xab~\x95\a\xcciI\xf5\xdd\xd3\xe2\x8e\x8bW\xdd\xee;>]\x8d\x0f\x00\x8c\x19u?\xb65|\xe5@$!\xcd\xf4>\xbdX\xfe\x03Z'}}, {@resuid}, {@fault_injection={'fault_injection', 0x3d, 0x8}}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '&\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {@inline_dentry}, {@flush_merge}, {@background_gc_off}, {@barrier}, {@test_dummy_encryption}, {@noextent_cache}, {@memory_normal}]}, 0xfd, 0x5534, &(0x7f0000005b40)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) lstat(&(0x7f0000000300)='./file0/file1\x00', &(0x7f00000004c0)) 1m7.085349003s ago: executing program 2 (id=11): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) pipe2(&(0x7f0000000040), 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1m1.871007015s ago: executing program 2 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 1m0.416033858s ago: executing program 32 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000440)=""/128, 0x80}], 0x2, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {0x0}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee", 0x87, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 6.033028272s ago: executing program 0 (id=168): socket(0x2, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4008894}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) fcntl$getown(r0, 0x9) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 4.891069731s ago: executing program 0 (id=173): r0 = openat$vcsa(0xffffff9c, &(0x7f0000000000), 0x604040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x10, r0, 0x2000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000346000/0x1000)=nil) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6a, 0x7c, 0xc9, 0x40, 0x45e, 0x284, 0x3fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe, 0x72, 0x78}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap$snddsp(&(0x7f0000c34000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r0, 0xb000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/206, 0xce}, {&(0x7f0000000240)=""/155, 0x9b}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x24, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000003800)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000037c0)={&(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x12b4}, 0x1, 0x0, 0x0, 0x5}, 0xc000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000180)=[r3, r3, r4], 0x3, 0x0, 0x0, 0xffffffffffffffff}) r6 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x2, 0xb, 0x6c, 0x5, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x80, 0x7, 0xfff, 0xe8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f00000005c0)=""/229, 0xe5, 0x0, &(0x7f00000006c0)=""/10, 0xa}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x23, &(0x7f0000003840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x82}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ldst={0x1, 0x2, 0x4, 0x8, 0x2, 0x30, 0xfffffffffffffff5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x86}, @call={0x85, 0x0, 0x0, 0x5f}], &(0x7f00000008c0)='syzkaller\x00', 0x4, 0xb3, &(0x7f0000000900)=""/179, 0x40f00, 0x60, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r0, r0, r0, r0, 0x1, r5, r0], 0x0, 0x10, 0x91}, 0x94) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100, '\x00', 0x0, r0, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x10, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80a}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='syzkaller\x00', 0xb41, 0x2a, &(0x7f00000001c0)=""/42, 0x40f00, 0x24, '\x00', r7, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0xb, 0x5, 0x9}, 0x10, r8, r9, 0x0, &(0x7f0000000b40)=[r10, 0xffffffffffffffff, r0, r11], 0x0, 0x10, 0x5}, 0x97) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r13 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r12, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xca}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.639225917s ago: executing program 0 (id=185): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2d0}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) fsopen(&(0x7f0000000400)='nfs\x00', 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000bc0)={&(0x7f0000000b40)=[{0x116e, 0x400, 0x0, 0x0}], 0x1}) 2.388829308s ago: executing program 1 (id=186): creat(0x0, 0x4b) syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 2.135816958s ago: executing program 3 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_rm_watch(0xffffffffffffffff, 0x0) 2.064533331s ago: executing program 3 (id=188): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r2}) 1.931991307s ago: executing program 3 (id=190): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x3fffff) 1.883031379s ago: executing program 4 (id=191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.815821882s ago: executing program 3 (id=192): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0xfffffffffffffc9e, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.711921627s ago: executing program 4 (id=193): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 1.62721618s ago: executing program 4 (id=194): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x850, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x824, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x577, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x5, 0x1, 0x22462e3c, 0x1, 0xb, 0xffffffff, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0x7, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0xfffff2e9, 0x2, 0x42d2, 0x6, 0x5678f281, 0xfc, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x2, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x40, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0xb, 0x0, 0x9, 0x5, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x201, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1.588869662s ago: executing program 3 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x10003, 0xfffffffffffffffd, 0x4002004c4, 0x2001004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.310820074s ago: executing program 4 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 1.143730461s ago: executing program 4 (id=197): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x836d9fb164f927b3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x63022, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r3 = pidfd_getfd(r2, r0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r3, r1}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x81fd) 1.077671283s ago: executing program 0 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x30, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x30}}, 0x0) 976.500008ms ago: executing program 0 (id=199): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 841.638193ms ago: executing program 0 (id=200): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_usb_connect(0x4, 0x2d, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") fcntl$lock(0xffffffffffffffff, 0x26, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4098, 0x1002) 646.026602ms ago: executing program 1 (id=201): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='signal_generate\x00', r0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 487.952829ms ago: executing program 1 (id=202): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 465.373029ms ago: executing program 1 (id=203): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0xfffffffffffffc9e, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 321.138646ms ago: executing program 1 (id=204): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 207.102821ms ago: executing program 3 (id=205): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, &(0x7f00000002c0)=""/78, 0x34, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400100000f08000240000000030900010073797a30"], 0xcc}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x44, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x1, 0x2, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x18, &(0x7f0000000180)={0x40, 0xc, 0x20, {0x20, 0xd, "81515d7cf6051939fc3cdc8c8d03b17a65ae3d37f12af5b017aae9389e53"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}, &(0x7f0000000580)={0x0, 0xf, 0x13b, {0x5, 0xf, 0x13b, 0x6, [@generic={0xe1, 0x10, 0x4, "51cbb6e5325f285820566182833df6c3f698c00a8212f17c6cb63933ba731c7efbcc0fa608e2e49372171b6d5b6224b2aa41e513dbc7b10dad325861ba6722f2380e2378e189987cb979aa5443bc4be6a795a8e9a0ecb4a7bfd6d51268d1366bca431f54a5f2551998459ba7a908171bb1e1edc0b13d902cbab4b1e36fc284fc9c6ae84ee06de253684180a0cc6eb4b75f2775e919a59e035f364afc640c103146fcbe00bc895c651561fc5f41ca76293de88239d75cbba4943c81a96f003aaaf0bdf0c7bf8dd4dc90ead220c26d4614daf6d4d219d75ca67074c55c1db7"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xf00, 0x3, [0xff000f]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x9, 0x8001}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "b2fa2710b23cc6475e227468751cfeac"}, @generic={0x27, 0x10, 0xb, "27dcc86e3fa3129bef6a97a39b8865cc5c60f2ef3e7ac92d440ad8034a44f19a2cf0358d"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x4, 0x0, "8df8a270", "98589736"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x2, 0x3, 0xd, 0x88, 0x3}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000700)={0x20, 0x7, 0x4c, "8f13b85ae7d110321b1fd11a0df338349798cb33e7a39276219e50642a43e6feee10e1b118b9c59d2dc0a4708855c9337e267d8716eeb5e827150f63b8256a2c7cf68c07a41ac22953216732"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000840)={0x20, 0x0, 0x8, {0xc0, 0x41, [0xf0ff]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0xb, 0x2, "9b20"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2, 'ng'}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x9}, 0x0, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x9}}) bind$unix(r3, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "27893ce60adde72a", "be07f2c0d0f47c2909b3f965b11848ce", "5239bf4d", "10fc405425abce7b"}, 0x28) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009", 0x1f, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 59.773867ms ago: executing program 1 (id=206): r0 = open(&(0x7f0000000100)='./file0\x00', 0x60840, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x20, 0x8, 0xa090000, 0xb, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x64, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010100, @multicast2, {[@lsrr={0x83, 0x3, 0xc8}, @ssrr={0x89, 0xf, 0xa1, [@loopback, @loopback, @local]}, @lsrr={0x83, 0x17, 0xc, [@local, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @end]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 4 (id=207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(0x0, 0x1, 0x402) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x2d0}) r2 = socket(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x0) fsopen(&(0x7f0000000400)='nfs\x00', 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000630a00fe000000007933000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000bc0)={&(0x7f0000000b40)=[{0x116e, 0x400, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.245' (ED25519) to the list of known hosts. [ 73.638029][ T5781] cgroup: Unknown subsys name 'net' [ 73.752850][ T5781] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.473963][ T5781] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.109289][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.117546][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.127321][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.135339][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.143459][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.152277][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.153948][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.160072][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.174457][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.175141][ T5803] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.183620][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.189847][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.197384][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.206676][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.212126][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.218232][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.225486][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.232132][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.238698][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.253907][ T5808] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.262553][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.270218][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.278192][ T5807] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.287682][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.757831][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 77.830682][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.883158][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 77.989832][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 78.002134][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.009882][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.017682][ T5794] bridge_slave_0: entered allmulticast mode [ 78.024589][ T5794] bridge_slave_0: entered promiscuous mode [ 78.052262][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.059618][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.066941][ T5794] bridge_slave_1: entered allmulticast mode [ 78.073734][ T5794] bridge_slave_1: entered promiscuous mode [ 78.173593][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.181991][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.189933][ T5792] bridge_slave_0: entered allmulticast mode [ 78.197712][ T5792] bridge_slave_0: entered promiscuous mode [ 78.206199][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.213433][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.221633][ T5792] bridge_slave_1: entered allmulticast mode [ 78.228779][ T5792] bridge_slave_1: entered promiscuous mode [ 78.248989][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.280901][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.288259][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.295614][ T5790] bridge_slave_0: entered allmulticast mode [ 78.302605][ T5790] bridge_slave_0: entered promiscuous mode [ 78.313148][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.354312][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.362056][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.370424][ T5790] bridge_slave_1: entered allmulticast mode [ 78.378225][ T5790] bridge_slave_1: entered promiscuous mode [ 78.402349][ T5794] team0: Port device team_slave_0 added [ 78.423176][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.447288][ T5794] team0: Port device team_slave_1 added [ 78.466257][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.473457][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.481792][ T5791] bridge_slave_0: entered allmulticast mode [ 78.488911][ T5791] bridge_slave_0: entered promiscuous mode [ 78.499637][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.522557][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.535495][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.546044][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.553405][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.560727][ T5791] bridge_slave_1: entered allmulticast mode [ 78.568032][ T5791] bridge_slave_1: entered promiscuous mode [ 78.662013][ T5792] team0: Port device team_slave_0 added [ 78.670115][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.678639][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.705877][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.719628][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.727195][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.753927][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.770528][ T5790] team0: Port device team_slave_0 added [ 78.778961][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.792029][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.811360][ T5792] team0: Port device team_slave_1 added [ 78.838175][ T5790] team0: Port device team_slave_1 added [ 78.883797][ T5791] team0: Port device team_slave_0 added [ 78.903280][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.910572][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.937903][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.950820][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.958176][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.984497][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.997771][ T5791] team0: Port device team_slave_1 added [ 79.071194][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.079413][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.106219][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.120657][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.127806][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.153924][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.176136][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.183501][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.210247][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.243258][ T5794] hsr_slave_0: entered promiscuous mode [ 79.251163][ T5794] hsr_slave_1: entered promiscuous mode [ 79.259479][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.266555][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.292816][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.305860][ T5807] Bluetooth: hci2: command tx timeout [ 79.308802][ T5792] hsr_slave_0: entered promiscuous mode [ 79.317218][ T5807] Bluetooth: hci3: command tx timeout [ 79.323819][ T5792] hsr_slave_1: entered promiscuous mode [ 79.330410][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.338872][ T5792] Cannot create hsr debugfs directory [ 79.385489][ T5808] Bluetooth: hci1: command tx timeout [ 79.391350][ T5807] Bluetooth: hci0: command tx timeout [ 79.415698][ T5790] hsr_slave_0: entered promiscuous mode [ 79.424738][ T5790] hsr_slave_1: entered promiscuous mode [ 79.431514][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.439514][ T5790] Cannot create hsr debugfs directory [ 79.532946][ T5791] hsr_slave_0: entered promiscuous mode [ 79.540008][ T5791] hsr_slave_1: entered promiscuous mode [ 79.547201][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.554815][ T5791] Cannot create hsr debugfs directory [ 79.911342][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.928724][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.940171][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.956300][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.028618][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.046507][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.065843][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.076954][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.162013][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.181234][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.201623][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.222397][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.302942][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.323892][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.346181][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.357445][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.399099][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.473891][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.508708][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.516161][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.527608][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.534856][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.553964][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.622511][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.653516][ T2901] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.660730][ T2901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.695242][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.702514][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.750106][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.780440][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.853216][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.874035][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.898571][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.905923][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.918281][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.925771][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.943631][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.963613][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.970972][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.016545][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.023732][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.212372][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.311640][ T5794] veth0_vlan: entered promiscuous mode [ 81.351547][ T5794] veth1_vlan: entered promiscuous mode [ 81.386728][ T5808] Bluetooth: hci2: command tx timeout [ 81.392415][ T5807] Bluetooth: hci3: command tx timeout [ 81.432960][ T5794] veth0_macvtap: entered promiscuous mode [ 81.459635][ T5794] veth1_macvtap: entered promiscuous mode [ 81.465689][ T5808] Bluetooth: hci1: command tx timeout [ 81.471222][ T5807] Bluetooth: hci0: command tx timeout [ 81.572996][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.607694][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.672468][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.707378][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.717978][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.728349][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.739272][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.748772][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787286][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.842790][ T5792] veth0_vlan: entered promiscuous mode [ 81.882822][ T5792] veth1_vlan: entered promiscuous mode [ 81.964306][ T5790] veth0_vlan: entered promiscuous mode [ 81.971602][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.000167][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.091130][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.107027][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.107899][ T5791] veth0_vlan: entered promiscuous mode [ 82.152504][ T5792] veth0_macvtap: entered promiscuous mode [ 82.178130][ T5790] veth1_vlan: entered promiscuous mode [ 82.201779][ T5792] veth1_macvtap: entered promiscuous mode [ 82.249419][ T5791] veth1_vlan: entered promiscuous mode [ 82.324211][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.338539][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.352409][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.389267][ T5790] veth0_macvtap: entered promiscuous mode [ 82.410326][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.429208][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.442076][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.473972][ T5791] veth0_macvtap: entered promiscuous mode [ 82.501290][ T5790] veth1_macvtap: entered promiscuous mode [ 82.516678][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.527640][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.537066][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.546897][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.593654][ T5791] veth1_macvtap: entered promiscuous mode [ 82.612291][ T5880] syz.3.4[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.630154][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.657258][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.668159][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.685343][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.697927][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.770494][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.793187][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.804534][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.821352][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.845402][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.861685][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.874925][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.889658][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.904345][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.925161][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.942445][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.962669][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.003610][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.029228][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.042367][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.058988][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.094614][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.117135][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.128938][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.151368][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.167906][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.178275][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.192608][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.256108][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.272299][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.280477][ T5880] loop3: detected capacity change from 0 to 40427 [ 83.282222][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.303434][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.316368][ T5880] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 83.325104][ T5880] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.368718][ T5880] F2FS-fs (loop3): invalid crc value [ 83.381797][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.401979][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.442635][ T5880] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.466925][ T5807] Bluetooth: hci3: command tx timeout [ 83.472538][ T5807] Bluetooth: hci2: command tx timeout [ 83.546000][ T5808] Bluetooth: hci1: command tx timeout [ 83.551829][ T5807] Bluetooth: hci0: command tx timeout [ 83.561351][ T5880] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.574150][ T5880] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.635275][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.643166][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.004376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.028490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.039628][ T5891] Illegal XDP return value 507494441 on prog (id 2) dev syz_tun, expect packet loss! [ 84.069904][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.083494][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.562732][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.632789][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.762160][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.808125][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.265999][ T5896] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.513858][ T5898] wg2: entered promiscuous mode [ 85.539862][ T5898] wg2: entered allmulticast mode [ 85.565426][ T5807] Bluetooth: hci2: command tx timeout [ 85.571091][ T5807] Bluetooth: hci3: command tx timeout [ 85.603364][ T5896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.625085][ T5808] Bluetooth: hci0: command tx timeout [ 85.630735][ T5807] Bluetooth: hci1: command tx timeout [ 85.653757][ T5896] netem: change failed [ 85.664968][ C1] sched: RT throttling activated [ 86.300305][ T5908] loop1: detected capacity change from 0 to 128 [ 86.375874][ T5894] loop2: detected capacity change from 0 to 40427 [ 86.390653][ T5894] F2FS-fs (loop2): invalid crc value [ 86.507266][ T5877] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.688388][ T5894] F2FS-fs (loop2): Start checkpoint disabled! [ 86.725618][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 86.732307][ T5894] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 86.762971][ T5877] usb 1-1: config index 0 descriptor too short (expected 4132, got 249) [ 86.792419][ T5877] usb 1-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config [ 86.839476][ T5877] usb 1-1: config 166 has 1 interface, different from the descriptor's value: 11 [ 86.862556][ T5877] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 86.882800][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.003133][ T5914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9'. [ 87.153794][ T788] cfg80211: failed to load regulatory.db [ 87.167274][ T5877] usb 1-1: string descriptor 0 read error: -71 [ 87.205653][ T5877] ums-sddr09 1-1:166.0: USB Mass Storage device detected [ 87.295669][ T5792] syz-executor: attempt to access beyond end of device [ 87.295669][ T5792] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 87.319508][ T5877] usb 1-1: USB disconnect, device number 2 [ 87.328057][ T5792] syz-executor: attempt to access beyond end of device [ 87.328057][ T5792] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 87.417174][ T2967] kworker/u4:11: attempt to access beyond end of device [ 87.417174][ T2967] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 87.470398][ T2967] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.660269][ T2967] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.669170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 87.671902][ T2967] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.756332][ T5924] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.175428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 90.609042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.054786][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 92.211611][ T2927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.390422][ T5948] loop0: detected capacity change from 0 to 512 [ 92.398178][ T5948] ======================================================= [ 92.398178][ T5948] WARNING: The mand mount option has been deprecated and [ 92.398178][ T5948] and is ignored by this kernel. Remove the mand [ 92.398178][ T5948] option from the mount to silence this warning. [ 92.398178][ T5948] ======================================================= [ 92.433340][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.450311][ T5948] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 92.461495][ T5948] EXT4-fs (loop0): group descriptors corrupted! [ 92.540005][ T5804] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.558375][ T2927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.774779][ T2927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.919931][ T2927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.475488][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.522896][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.537077][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.553813][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.566007][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.581512][ T5807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.592397][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.695316][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 94.704201][ T5839] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 94.726367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.745145][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.805791][ T5839] usb 4-1: config 0 descriptor?? [ 94.830535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 95.052226][ T5968] Zero length message leads to an empty skb [ 95.205428][ T5839] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 95.266785][ T5984] syz.1.25[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.267033][ T5984] syz.1.25[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.279455][ T5839] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 95.310598][ T5839] dib0700: firmware download failed at 7 with -22 [ 95.330312][ T5839] usb 4-1: USB disconnect, device number 2 [ 95.906798][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 95.934113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.943526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.943563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 95.960993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.036283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.777103][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28'. [ 96.845200][ T5808] Bluetooth: hci2: command tx timeout [ 96.916856][ T6001] loop1: detected capacity change from 0 to 512 [ 98.241688][ T6017] loop0: detected capacity change from 0 to 1024 [ 98.427381][ T2927] hsr_slave_0: left promiscuous mode [ 98.451174][ T2927] hsr_slave_1: left promiscuous mode [ 98.495927][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.515202][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.527846][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.553572][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.588572][ T6017] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.605112][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.630698][ T2927] bridge_slave_1: left allmulticast mode [ 98.664865][ T2927] bridge_slave_1: left promiscuous mode [ 98.681942][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.733047][ T2927] bridge_slave_0: left allmulticast mode [ 98.749265][ T2927] bridge_slave_0: left promiscuous mode [ 98.760704][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.818744][ T2927] veth1_macvtap: left promiscuous mode [ 98.825606][ T2927] veth0_macvtap: left promiscuous mode [ 98.831398][ T2927] veth1_vlan: left promiscuous mode [ 98.855589][ T2927] veth0_vlan: left promiscuous mode [ 98.912066][ T5807] Bluetooth: hci2: command tx timeout [ 99.020516][ T6016] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.32: lblock 0 mapped to illegal pblock 0 (length 6) [ 99.141777][ T6016] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 99.192041][ T6016] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.192041][ T6016] [ 100.581615][ T5796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.707716][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 100.754370][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 100.803421][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.814216][ T5796] usb 2-1: Using ep0 maxpacket: 32 [ 100.822780][ T5796] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 100.834009][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.870754][ T5796] usb 2-1: config 0 descriptor?? [ 100.890625][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.985148][ T5807] Bluetooth: hci2: command tx timeout [ 101.084611][ T5796] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 101.097160][ T5796] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 101.107633][ T5796] dib0700: firmware download failed at 7 with -22 [ 101.127052][ T5796] usb 2-1: USB disconnect, device number 2 [ 101.428738][ T2927] bond0 (unregistering): Released all slaves [ 101.505716][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.513191][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.520872][ T5971] bridge_slave_0: entered allmulticast mode [ 101.528079][ T5971] bridge_slave_0: entered promiscuous mode [ 101.542203][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.549502][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.556935][ T5971] bridge_slave_1: entered allmulticast mode [ 101.566057][ T5971] bridge_slave_1: entered promiscuous mode [ 101.687404][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.744886][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.998843][ T6057] loop1: detected capacity change from 0 to 128 [ 102.782457][ T6026] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 103.795047][ T5807] Bluetooth: hci2: command tx timeout [ 103.812564][ T6056] netlink: 56 bytes leftover after parsing attributes in process `syz.3.38'. [ 103.946744][ T5971] team0: Port device team_slave_0 added [ 103.998543][ T5971] team0: Port device team_slave_1 added [ 104.043771][ T1308] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 104.199590][ T1308] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 104.271757][ T1308] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.271757][ T1308] [ 104.300582][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.319352][ T1308] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 2048 with error 28 [ 104.336384][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.375280][ T1308] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.375280][ T1308] [ 104.405224][ T1308] EXT4-fs (loop0): Total free blocks count 0 [ 104.411293][ T1308] EXT4-fs (loop0): Free/Dirty block details [ 104.418509][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.438814][ T1308] EXT4-fs (loop0): free_blocks=0 [ 104.444075][ T1308] EXT4-fs (loop0): dirty_blocks=5232 [ 104.466600][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.482493][ T1308] EXT4-fs (loop0): Block reservation details [ 104.490734][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.524148][ T1308] EXT4-fs (loop0): i_reserved_data_blocks=327 [ 104.558502][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.791332][ T5971] hsr_slave_0: entered promiscuous mode [ 104.819927][ T5971] hsr_slave_1: entered promiscuous mode [ 104.841009][ T5971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.867999][ T5971] Cannot create hsr debugfs directory [ 105.471394][ T5971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.540647][ T5971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.579926][ T5971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.623007][ T5971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.024888][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.142945][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.197145][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.204439][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.255829][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.263040][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.044651][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.405073][ T5178] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.534433][ T6134] netlink: 56 bytes leftover after parsing attributes in process `syz.1.47'. [ 107.666862][ T5178] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.778088][ T5178] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.855044][ T5178] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 107.864253][ T5178] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.919255][ T5178] usb 4-1: config 0 descriptor?? [ 107.943763][ T5178] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 108.534604][ T5971] veth0_vlan: entered promiscuous mode [ 108.678408][ T5971] veth1_vlan: entered promiscuous mode [ 109.633091][ T5971] veth0_macvtap: entered promiscuous mode [ 109.748880][ T5971] veth1_macvtap: entered promiscuous mode [ 109.919646][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.017710][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.063859][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.184729][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.250636][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.261389][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.282866][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.380518][ T28] audit: type=1107 audit(1764208995.943:2): pid=6157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 110.386477][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.413008][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.424833][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.435797][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.445787][ T5971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.457633][ T5971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.472938][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.486232][ T5971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.495810][ T5971] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.508333][ T5971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.517566][ T5971] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.610788][ T5178] usb 4-1: USB disconnect, device number 3 [ 111.090409][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.109146][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.462076][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.506728][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.612027][ T6212] loop1: detected capacity change from 0 to 512 [ 114.744450][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.815350][ T6212] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.758863][ T5790] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.430628][ T6235] loop0: detected capacity change from 0 to 256 [ 117.607379][ T6235] FAT-fs (loop0): Directory bread(block 64) failed [ 117.655096][ T6235] FAT-fs (loop0): Directory bread(block 65) failed [ 117.675876][ T6235] FAT-fs (loop0): Directory bread(block 66) failed [ 117.707343][ T6235] FAT-fs (loop0): Directory bread(block 67) failed [ 117.734528][ T6235] FAT-fs (loop0): Directory bread(block 68) failed [ 117.766079][ T6235] FAT-fs (loop0): Directory bread(block 69) failed [ 117.772876][ T6235] FAT-fs (loop0): Directory bread(block 70) failed [ 117.805405][ T6235] FAT-fs (loop0): Directory bread(block 71) failed [ 117.822603][ T6235] FAT-fs (loop0): Directory bread(block 72) failed [ 117.837756][ T6235] FAT-fs (loop0): Directory bread(block 73) failed [ 118.875065][ T23] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 119.567101][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.587135][ T23] usb 2-1: config 0 has no interface number 0 [ 119.593872][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.608057][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 119.650679][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.660750][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.692361][ T23] usb 2-1: config 0 descriptor?? [ 119.717072][ T6255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.788332][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 120.006193][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 120.036146][ T23] usb 2-1: USB disconnect, device number 3 [ 120.452676][ T6281] loop3: detected capacity change from 0 to 256 [ 122.133800][ T6281] FAT-fs (loop3): bogus number of FAT sectors [ 122.140082][ T6281] FAT-fs (loop3): Can't find a valid FAT filesystem [ 122.156416][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 122.939553][ T6281] veth1_macvtap: left promiscuous mode [ 124.865954][ T6335] netlink: 144 bytes leftover after parsing attributes in process `syz.1.83'. [ 124.985385][ T6335] team0: Port device team_slave_0 removed [ 125.002961][ T6335] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 126.919820][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 127.845523][ T6387] syz.0.95 uses obsolete (PF_INET,SOCK_PACKET) [ 129.049228][ T6404] loop1: detected capacity change from 0 to 4096 [ 129.525113][ T5178] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.636775][ T6408] loop0: detected capacity change from 0 to 256 [ 129.716673][ T5178] usb 2-1: Using ep0 maxpacket: 8 [ 129.757325][ T5178] usb 2-1: unable to get BOS descriptor or descriptor too short [ 129.765917][ T6408] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.798875][ T5178] usb 2-1: config 7 has an invalid interface number: 169 but max is 0 [ 129.800030][ T6408] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.815388][ T5178] usb 2-1: config 7 has no interface number 0 [ 129.843403][ T5178] usb 2-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 129.882010][ T5178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.908537][ T5178] usb 2-1: Product: syz [ 129.913788][ T6408] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 129.927813][ T5178] usb 2-1: Manufacturer: syz [ 129.941111][ T5178] usb 2-1: SerialNumber: syz [ 130.513264][ T5178] usb 2-1: USB disconnect, device number 4 [ 130.522597][ T6425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.106'. [ 131.163694][ T42] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 132.055191][ T5859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.266052][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 132.295048][ T5859] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.318759][ T5859] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.349733][ T5859] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 132.368867][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.389651][ T5859] usb 2-1: config 0 descriptor?? [ 132.504754][ T6449] netlink: 20 bytes leftover after parsing attributes in process `syz.4.109'. [ 132.877510][ T5859] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 132.933440][ T5859] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 132.972058][ T5859] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 133.023945][ T5859] nzxt-smart2 0003:1E71:2009.0001: unknown main item tag 0x0 [ 133.080511][ T5859] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 133.106881][ C0] usb 2-1: input irq status -75 received [ 133.366368][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.373812][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.875313][ T5859] usb 2-1: USB disconnect, device number 5 [ 134.982412][ T6455] fido_id[6455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.640199][ T6489] tipc: Enabling of bearer rejected, failed to enable media [ 136.686006][ T6489] syzkaller0: entered promiscuous mode [ 136.693404][ T6489] syzkaller0: entered allmulticast mode [ 136.803891][ T6489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.117'. [ 137.317284][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 137.569919][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 137.579214][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.591755][ T23] usb 5-1: Product: syz [ 137.596781][ T23] usb 5-1: Manufacturer: syz [ 137.605388][ T23] usb 5-1: SerialNumber: syz [ 137.660488][ T23] usb 5-1: config 0 descriptor?? [ 138.473471][ T6502] netlink: 596 bytes leftover after parsing attributes in process `syz.4.120'. [ 138.637804][ T6507] syzkaller1: entered promiscuous mode [ 138.689883][ T6507] syzkaller1: entered allmulticast mode [ 138.840837][ T6533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 139.187982][ T5915] usb 5-1: USB disconnect, device number 2 [ 140.322535][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 140.508258][ T6559] tipc: Enabling of bearer rejected, failed to enable media [ 140.552284][ T6559] syzkaller0: entered promiscuous mode [ 140.578389][ T6559] syzkaller0: entered allmulticast mode [ 140.668060][ T6559] netlink: 44 bytes leftover after parsing attributes in process `syz.1.129'. [ 141.054894][ T6582] netlink: 24 bytes leftover after parsing attributes in process `syz.3.134'. [ 141.435574][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 141.621030][ T23] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 141.655446][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.674846][ T23] usb 2-1: Product: syz [ 141.689307][ T23] usb 2-1: Manufacturer: syz [ 141.701409][ T23] usb 2-1: SerialNumber: syz [ 141.722713][ T23] usb 2-1: config 0 descriptor?? [ 141.975315][ T6609] "syz.4.139" (6609) uses obsolete ecb(arc4) skcipher [ 142.095367][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 142.357180][ T6585] netlink: 596 bytes leftover after parsing attributes in process `syz.1.135'. [ 142.538910][ T6585] syzkaller1: entered promiscuous mode [ 142.545788][ T6585] syzkaller1: entered allmulticast mode [ 143.181905][ T787] usb 2-1: USB disconnect, device number 6 [ 143.483971][ T6640] process 'syz.0.143' launched './file0' with NULL argv: empty string added [ 143.579132][ T6642] loop4: detected capacity change from 0 to 512 [ 144.047391][ T6647] loop4: detected capacity change from 0 to 512 [ 144.151982][ T5804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.675126][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 144.880254][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 144.945224][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 144.962661][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 144.996867][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.040095][ T23] usb 5-1: config 0 descriptor?? [ 145.285597][ T23] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 145.334595][ T23] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 145.353364][ T23] dib0700: firmware download failed at 7 with -22 [ 145.384089][ T23] usb 5-1: USB disconnect, device number 3 [ 145.430870][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 145.488334][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.3.151'. [ 145.900429][ T6691] loop3: detected capacity change from 0 to 512 [ 145.969759][ T5804] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.085107][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 146.325300][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 146.397918][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.427304][ T23] usb 1-1: Product: syz [ 146.431569][ T23] usb 1-1: Manufacturer: syz [ 146.460872][ T23] usb 1-1: SerialNumber: syz [ 146.499099][ T23] usb 1-1: config 0 descriptor?? [ 146.610765][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 146.916394][ T6689] netlink: 596 bytes leftover after parsing attributes in process `syz.0.154'. [ 147.023667][ T6689] syzkaller1: entered promiscuous mode [ 147.043275][ T6689] syzkaller1: entered allmulticast mode [ 147.347983][ T5915] usb 1-1: USB disconnect, device number 3 [ 147.734667][ T6727] serio: Serial port ttyS3 [ 148.397337][ T23] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 148.607608][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.679361][ T23] usb 2-1: config 0 has no interface number 0 [ 148.716218][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 148.737409][ T23] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 148.772834][ T23] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.793054][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.838497][ T23] usb 2-1: config 0 descriptor?? [ 148.852731][ T6734] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 148.887699][ T23] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.108008][ T23] usb 2-1: USB disconnect, device number 7 [ 149.835459][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 149.917515][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.4.176'. [ 150.039959][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 150.057543][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.068062][ T23] usb 1-1: Product: syz [ 150.072450][ T23] usb 1-1: Manufacturer: syz [ 150.082663][ T23] usb 1-1: SerialNumber: syz [ 150.096094][ T23] usb 1-1: config 0 descriptor?? [ 150.335139][ T787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.439062][ T6758] netlink: 596 bytes leftover after parsing attributes in process `syz.0.173'. [ 150.500368][ T6758] syzkaller1: entered promiscuous mode [ 150.508856][ T6758] syzkaller1: entered allmulticast mode [ 150.555371][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 150.575845][ T787] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 150.590836][ T787] usb 4-1: config 0 has no interface number 0 [ 150.614237][ T787] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 150.631374][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.645107][ T787] usb 4-1: Product: syz [ 150.655713][ T787] usb 4-1: Manufacturer: syz [ 150.696614][ T787] usb 4-1: SerialNumber: syz [ 150.706338][ T787] usb 4-1: config 0 descriptor?? [ 150.726325][ T787] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 150.738020][ T787] pctv452e: pctv452e_power_ctrl: 1 [ 150.738020][ T787] [ 150.751243][ T787] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 150.751243][ T787] [ 150.764503][ T787] dvb-usb: bulk message failed: -22 (5/0) [ 150.800030][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.830443][ T787] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 150.866410][ T5859] usb 1-1: USB disconnect, device number 4 [ 150.872490][ T787] usb 4-1: media controller created [ 150.884547][ T787] dvb-usb: bulk message failed: -22 (8/0) [ 150.894352][ T787] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 150.914176][ T6775] tipc: Started in network mode [ 150.925622][ T787] dvb-usb: MAC address reading failed. [ 150.931378][ T6775] tipc: Node identity ac1414aa, cluster identity 4711 [ 150.947218][ T6775] tipc: Enabled bearer , priority 10 [ 151.017620][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.159529][ T787] DVB: Unable to find symbol stb0899_attach() [ 151.208897][ T787] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 151.399885][ T787] rc_core: IR keymap rc-tt-1500 not found [ 151.436524][ T787] Registered IR keymap rc-empty [ 151.464548][ T787] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 151.487728][ T6787] loop4: detected capacity change from 0 to 512 [ 151.557654][ T787] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 151.753650][ T787] dvb-usb: schedule remote query interval to 100 msecs. [ 151.783827][ T787] pctv452e: pctv452e_power_ctrl: 0 [ 151.783827][ T787] [ 151.821687][ T787] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 151.884585][ T787] usb 4-1: USB disconnect, device number 4 [ 152.067540][ T5796] tipc: Node number set to 2886997162 [ 152.129419][ T787] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 152.215637][ T5859] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 152.406930][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 152.420001][ T5796] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 152.436996][ T5859] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 152.463510][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.490338][ T5859] usb 1-1: config 0 descriptor?? [ 152.667638][ T5796] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 152.684695][ T5796] usb 2-1: config 0 has no interface number 0 [ 152.691787][ T5796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 152.713446][ T5859] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 152.725808][ T5796] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 152.753975][ T5859] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 152.770741][ T5796] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.786106][ T5859] dib0700: firmware download failed at 7 with -22 [ 152.792915][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.826451][ T5859] usb 1-1: USB disconnect, device number 5 [ 152.835319][ T5796] usb 2-1: config 0 descriptor?? [ 152.855797][ T6799] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 152.900915][ T5796] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 152.923615][ T6815] syzkaller0: entered promiscuous mode [ 152.937354][ T6815] syzkaller0: entered allmulticast mode [ 153.134316][ T5178] usb 2-1: USB disconnect, device number 8 [ 153.362949][ T6824] loop4: detected capacity change from 0 to 512 [ 153.432369][ T5804] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.671802][ T6831] loop0: detected capacity change from 0 to 512 [ 153.770238][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.129544][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.204'. [ 154.327845][ T6847] loop1: detected capacity change from 0 to 512 [ 154.385627][ T6847] ------------[ cut here ]------------ [ 154.392711][ T6847] EA inode 11 i_nlink=2 [ 154.392943][ T6847] WARNING: CPU: 0 PID: 6847 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 154.411009][ T6847] Modules linked in: [ 154.416018][ T6847] CPU: 0 PID: 6847 Comm: syz.1.206 Not tainted syzkaller #0 [ 154.424536][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.436472][ T6847] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 154.444134][ T6847] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 154.472373][ T6847] RSP: 0018:ffffc9000b7b71c0 EFLAGS: 00010246 [ 154.478838][ T6847] RAX: 3176bc00705fd600 RBX: 0000000000000002 RCX: 0000000000080000 [ 154.487084][ T6847] RDX: ffffc9000cfeb000 RSI: 0000000000043faf RDI: 0000000000043fb0 [ 154.495552][ T6847] RBP: ffffc9000b7b72b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 154.495929][ T5178] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.504041][ T6847] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 154.504112][ T6847] R13: ffff8880787798a8 R14: ffff8880787796b0 R15: ffff888078779700 [ 154.504130][ T6847] FS: 00007efd453d76c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 154.541751][ T6847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.548539][ T6847] CR2: 00007fd8cd784000 CR3: 0000000065b38000 CR4: 00000000003506f0 [ 154.557017][ T6847] Call Trace: [ 154.560730][ T6847] [ 154.563870][ T6847] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 154.569639][ T6847] ? ext4_xattr_inode_iget+0x3df/0x600 [ 154.575588][ T6847] ext4_xattr_set_entry+0xcda/0x1e90 [ 154.581162][ T6847] ext4_xattr_ibody_set+0x254/0x6a0 [ 154.587086][ T6847] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 154.593381][ T6847] __ext4_expand_extra_isize+0x306/0x400 [ 154.599166][ T6847] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 154.605124][ T6847] ext4_evict_inode+0x7ed/0xea0 [ 154.611340][ T6847] ? _raw_spin_unlock+0x28/0x40 [ 154.616893][ T6847] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 154.622937][ T6847] ? do_raw_spin_unlock+0x121/0x230 [ 154.628240][ T6847] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 154.634456][ T6847] evict+0x486/0x870 [ 154.638535][ T6847] ? __lock_acquire+0x7c80/0x7c80 [ 154.643949][ T6847] ? proc_nr_inodes+0x230/0x230 [ 154.649340][ T6847] ? do_raw_spin_unlock+0x121/0x230 [ 154.654680][ T6847] ? _raw_spin_unlock+0x28/0x40 [ 154.659785][ T6847] ? iput+0x70a/0x920 [ 154.664188][ T6847] ext4_orphan_cleanup+0xbd4/0x1400 [ 154.670057][ T6847] ? ext4_orphan_del+0xba0/0xba0 [ 154.675486][ T6847] ? ext4_register_li_request+0x183/0x940 [ 154.681348][ T6847] ? errseq_check_and_advance+0x66/0x120 [ 154.687172][ T6847] ext4_fill_super+0x5de4/0x66c0 [ 154.692288][ T6847] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 154.698897][ T6847] ? __might_sleep+0xe0/0xe0 [ 154.703737][ T6847] ? read_lock_is_recursive+0x20/0x20 [ 154.709516][ T6847] ? snprintf+0xdb/0x120 [ 154.714609][ T6847] ? vscnprintf+0x80/0x80 [ 154.719470][ T6847] ? down_write+0x162/0x1f0 [ 154.724179][ T6847] ? down_read_killable+0x340/0x340 [ 154.729859][ T6847] ? setup_bdev_super+0x56b/0x660 [ 154.733441][ T5178] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.735340][ T6847] get_tree_bdev+0x3e4/0x510 [ 154.735372][ T6847] ? vfs_parse_fs_string+0x160/0x160 [ 154.735399][ T6847] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 154.735436][ T6847] ? setup_bdev_super+0x660/0x660 [ 154.735459][ T6847] ? apparmor_capable+0x137/0x1a0 [ 154.735484][ T6847] ? bpf_lsm_capable+0x9/0x10 [ 154.735513][ T6847] ? security_capable+0x89/0xb0 [ 154.735543][ T6847] vfs_get_tree+0x8c/0x280 [ 154.753541][ T5178] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.756251][ T6847] do_new_mount+0x24b/0xa40 [ 154.756295][ T6847] __se_sys_mount+0x2da/0x3c0 [ 154.756323][ T6847] ? __x64_sys_mount+0xc0/0xc0 [ 154.764686][ T5178] usb 4-1: Product: syz [ 154.768568][ T6847] ? lockdep_hardirqs_on+0x98/0x150 [ 154.768603][ T6847] ? __x64_sys_mount+0x20/0xc0 [ 154.768628][ T6847] do_syscall_64+0x55/0xb0 [ 154.768653][ T6847] ? clear_bhb_loop+0x40/0x90 [ 154.768677][ T6847] ? clear_bhb_loop+0x40/0x90 [ 154.768718][ T6847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.768742][ T6847] RIP: 0033:0x7efd44590eea [ 154.768764][ T6847] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.768783][ T6847] RSP: 002b:00007efd453d6e68 EFLAGS: 00000246 [ 154.780182][ T5178] usb 4-1: Manufacturer: syz [ 154.784359][ T6847] ORIG_RAX: 00000000000000a5 [ 154.784386][ T6847] RAX: ffffffffffffffda RBX: 00007efd453d6ef0 RCX: 00007efd44590eea [ 154.784401][ T6847] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007efd453d6eb0 [ 154.784417][ T6847] RBP: 0000200000000180 R08: 00007efd453d6ef0 R09: 0000000000800700 [ 154.817844][ T5178] usb 4-1: SerialNumber: syz [ 154.823144][ T6847] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 154.823169][ T6847] R13: 00007efd453d6eb0 R14: 000000000000046f R15: 000000000000002c [ 154.823205][ T6847] [ 154.828676][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 154.951857][ T6847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 154.959290][ T6847] CPU: 0 PID: 6847 Comm: syz.1.206 Not tainted syzkaller #0 [ 154.966788][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 154.976881][ T6847] Call Trace: [ 154.980202][ T6847] [ 154.983316][ T6847] dump_stack_lvl+0x16c/0x230 [ 154.988106][ T6847] ? show_regs_print_info+0x20/0x20 [ 154.993331][ T6847] ? load_image+0x3b0/0x3b0 [ 154.997859][ T6847] panic+0x2c0/0x710 [ 155.001964][ T6847] ? bpf_jit_dump+0xd0/0xd0 [ 155.006500][ T6847] __warn+0x2e0/0x470 [ 155.010506][ T6847] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 155.016517][ T6847] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 155.022701][ T6847] report_bug+0x2be/0x4f0 [ 155.027226][ T6847] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 155.033326][ T6847] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 155.039416][ T6847] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 155.045525][ T6847] handle_bug+0xcf/0x120 [ 155.049807][ T6847] exc_invalid_op+0x1a/0x50 [ 155.054508][ T6847] asm_exc_invalid_op+0x1a/0x20 [ 155.059395][ T6847] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 155.066356][ T6847] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 e0 c6 be 8a 89 da e8 a5 39 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 4f 59 2c 08 [ 155.086880][ T6847] RSP: 0018:ffffc9000b7b71c0 EFLAGS: 00010246 [ 155.093088][ T6847] RAX: 3176bc00705fd600 RBX: 0000000000000002 RCX: 0000000000080000 [ 155.101427][ T6847] RDX: ffffc9000cfeb000 RSI: 0000000000043faf RDI: 0000000000043fb0 [ 155.109782][ T6847] RBP: ffffc9000b7b72b8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 155.117764][ T6847] R10: dffffc0000000000 R11: ffffed10171c5183 R12: dffffc0000000000 [ 155.125749][ T6847] R13: ffff8880787798a8 R14: ffff8880787796b0 R15: ffff888078779700 [ 155.133761][ T6847] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 155.139646][ T6847] ? ext4_xattr_inode_iget+0x3df/0x600 [ 155.145139][ T6847] ext4_xattr_set_entry+0xcda/0x1e90 [ 155.150545][ T6847] ext4_xattr_ibody_set+0x254/0x6a0 [ 155.156033][ T6847] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 155.162425][ T6847] __ext4_expand_extra_isize+0x306/0x400 [ 155.168256][ T6847] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 155.174177][ T6847] ext4_evict_inode+0x7ed/0xea0 [ 155.179152][ T6847] ? _raw_spin_unlock+0x28/0x40 [ 155.184570][ T6847] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 155.190573][ T6847] ? do_raw_spin_unlock+0x121/0x230 [ 155.195883][ T6847] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 155.201884][ T6847] evict+0x486/0x870 [ 155.206016][ T6847] ? __lock_acquire+0x7c80/0x7c80 [ 155.211157][ T6847] ? proc_nr_inodes+0x230/0x230 [ 155.216197][ T6847] ? do_raw_spin_unlock+0x121/0x230 [ 155.221501][ T6847] ? _raw_spin_unlock+0x28/0x40 [ 155.226564][ T6847] ? iput+0x70a/0x920 [ 155.230651][ T6847] ext4_orphan_cleanup+0xbd4/0x1400 [ 155.236237][ T6847] ? ext4_orphan_del+0xba0/0xba0 [ 155.241394][ T6847] ? ext4_register_li_request+0x183/0x940 [ 155.247563][ T6847] ? errseq_check_and_advance+0x66/0x120 [ 155.253218][ T6847] ext4_fill_super+0x5de4/0x66c0 [ 155.258273][ T6847] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 155.265143][ T6847] ? __might_sleep+0xe0/0xe0 [ 155.269973][ T6847] ? read_lock_is_recursive+0x20/0x20 [ 155.275812][ T6847] ? snprintf+0xdb/0x120 [ 155.280165][ T6847] ? vscnprintf+0x80/0x80 [ 155.284534][ T6847] ? down_write+0x162/0x1f0 [ 155.289222][ T6847] ? down_read_killable+0x340/0x340 [ 155.294531][ T6847] ? setup_bdev_super+0x56b/0x660 [ 155.299763][ T6847] get_tree_bdev+0x3e4/0x510 [ 155.304743][ T6847] ? vfs_parse_fs_string+0x160/0x160 [ 155.310163][ T6847] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 155.316434][ T6847] ? setup_bdev_super+0x660/0x660 [ 155.321591][ T6847] ? apparmor_capable+0x137/0x1a0 [ 155.326763][ T6847] ? bpf_lsm_capable+0x9/0x10 [ 155.331571][ T6847] ? security_capable+0x89/0xb0 [ 155.336557][ T6847] vfs_get_tree+0x8c/0x280 [ 155.341187][ T6847] do_new_mount+0x24b/0xa40 [ 155.345807][ T6847] __se_sys_mount+0x2da/0x3c0 [ 155.350691][ T6847] ? __x64_sys_mount+0xc0/0xc0 [ 155.355991][ T6847] ? lockdep_hardirqs_on+0x98/0x150 [ 155.361758][ T6847] ? __x64_sys_mount+0x20/0xc0 [ 155.366869][ T6847] do_syscall_64+0x55/0xb0 [ 155.371340][ T6847] ? clear_bhb_loop+0x40/0x90 [ 155.376363][ T6847] ? clear_bhb_loop+0x40/0x90 [ 155.381259][ T6847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.387351][ T6847] RIP: 0033:0x7efd44590eea [ 155.391882][ T6847] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.411707][ T6847] RSP: 002b:00007efd453d6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.420352][ T6847] RAX: ffffffffffffffda RBX: 00007efd453d6ef0 RCX: 00007efd44590eea [ 155.429573][ T6847] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007efd453d6eb0 [ 155.437598][ T6847] RBP: 0000200000000180 R08: 00007efd453d6ef0 R09: 0000000000800700 [ 155.445687][ T6847] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 155.453792][ T6847] R13: 00007efd453d6eb0 R14: 000000000000046f R15: 000000000000002c [ 155.461993][ T6847] [ 155.466321][ T6847] Kernel Offset: disabled [ 155.470748][ T6847] Rebooting in 86400 seconds..